Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
File: 323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa (raw, json)
Hash identifier: 5F6BxRiNZB6GXY37pzB3Ys+x70gxm748sbIO+TYRsrA=
Subject key identifier: 6A:41:99:3D:16:C2:1D:83:9D:25:3D:0A:50:74:B3:DE:A8:0C:93:C1
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 5A6560488200A9745E9369E9672FD68764B8E40B
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
Signing time: Tue 23 Apr 2024 19:13:41 +0000
ROA not before: Tue 23 Apr 2024 19:08:41 +0000
ROA not after: Tue 22 Apr 2025 19:13:41 +0000
asID: 263627
IP address blocks: 2804:1044:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:65:60:48:82:00:a9:74:5e:93:69:e9:67:2f:d6:87:64:b8:e4:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Apr 23 19:08:41 2024 GMT
Not After : Apr 22 19:13:41 2025 GMT
Subject: CN=6A41993D16C21D839D253D0A5074B3DEA80C93C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fc:c9:2c:8d:af:38:57:a1:e7:1b:56:54:42:
83:ad:a2:e6:63:bc:ef:2d:27:fa:65:b6:62:ee:1f:
ba:9b:31:a8:d0:4a:92:b3:0f:b8:5b:d7:08:f1:15:
71:62:be:16:a3:92:43:44:c7:43:37:a9:41:be:35:
33:a3:63:c5:00:f2:83:b8:96:0d:09:b3:f5:6b:2e:
4a:27:d6:18:5c:59:35:14:e0:f8:d7:16:d4:06:1f:
22:0e:de:03:3b:5f:e1:2e:8f:c7:f2:ca:59:4d:3d:
8e:dc:1d:83:56:ec:f6:b2:dd:5f:e9:ef:43:57:e2:
66:3d:c3:3c:c7:0b:7c:76:89:a5:5f:24:c1:90:c7:
51:f4:21:3e:53:95:ba:fe:b4:d7:f0:66:8c:0f:48:
e1:0a:5a:f0:68:46:35:57:44:b7:c2:7c:3e:67:82:
13:d0:66:46:46:47:78:41:7c:ca:5d:4d:34:30:2d:
f2:94:df:30:17:44:9b:37:7d:0a:eb:d7:81:fe:e8:
1b:5f:ee:cb:48:81:60:9e:95:09:63:d3:6d:23:18:
5b:df:8d:72:10:8a:6b:f0:0d:db:01:8b:85:fc:85:
dc:ad:59:d1:e9:8d:f0:a7:d1:d5:1b:3a:ff:68:ab:
42:1f:0c:e5:18:a6:d3:92:c1:2e:66:93:98:f7:27:
ca:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:41:99:3D:16:C2:1D:83:9D:25:3D:0A:50:74:B3:DE:A8:0C:93:C1
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a383030303a3a2f33342d3334203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1044:8000::/34
Signature Algorithm: sha256WithRSAEncryption
b4:7d:f7:ac:31:13:90:38:79:b7:00:c2:b5:fd:b0:a2:9c:bd:
2a:d5:a0:15:f6:9c:bd:39:0e:4d:73:a6:93:e9:56:e7:7e:c7:
37:3f:38:33:53:ee:9d:11:b4:26:96:d0:d2:ad:7a:1b:47:56:
bc:9f:45:70:5e:44:11:7c:e0:52:72:60:f3:c7:71:c0:f1:f3:
df:68:7d:6a:35:8b:a7:1f:19:ad:ae:68:8a:2d:5c:55:0c:93:
4f:44:95:80:4a:53:1d:64:12:ac:fa:71:83:4b:96:19:02:3a:
60:22:c1:bc:5f:3b:d1:23:67:9d:c6:0b:56:3e:c3:3f:c8:31:
d6:6f:6d:05:03:b2:47:56:75:29:8b:ed:0f:7a:6e:49:8e:0b:
0d:3f:25:3c:d5:29:7b:8a:de:02:16:3c:4a:78:e2:fe:1c:6a:
da:69:8f:17:9c:6e:1e:0b:40:f3:bf:0f:2b:86:bc:03:4e:b2:
59:b6:d4:5d:0f:72:2b:30:0c:ca:59:eb:ab:d6:c8:ba:a8:bf:
3f:ea:6a:94:69:e7:5a:dd:56:19:ac:00:6c:89:2b:2e:0d:37:
74:3c:60:5a:5c:64:b8:70:ed:91:75:cb:3f:80:c5:69:c4:23:
d1:bb:03:06:d1:1c:5a:2f:ab:1d:70:e3:a7:95:2e:d1:6c:26:
4b:23:95:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:42:02 2025 by rpki-client