Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
File: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (raw, json)
Hash identifier: CtTtJ+jMicWLJgzOVe2HhIGjkg7lMhcB2RxeD2K2fZE=
Subject key identifier: 06:5A:CE:3B:AE:57:9B:99:00:32:BD:DF:DC:41:68:31:52:5A:F1:DA
Certificate issuer: /CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Certificate serial: 4A540C5EC3CA7BFC5B022010EB00AFA9A5FA37CB
Authority key identifier: 2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
Signing time: Wed 03 Apr 2024 22:52:40 +0000
ROA not before: Wed 03 Apr 2024 22:47:40 +0000
ROA not after: Wed 02 Apr 2025 22:52:40 +0000
asID: 270891
IP address blocks: 2804:7308::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:54:0c:5e:c3:ca:7b:fc:5b:02:20:10:eb:00:af:a9:a5:fa:37:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A9F90A6C0E7A9D2C5E1C1688155365346260685
Validity
Not Before: Apr 3 22:47:40 2024 GMT
Not After : Apr 2 22:52:40 2025 GMT
Subject: CN=065ACE3BAE579B990032BDDFDC416831525AF1DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cf:2a:89:12:34:75:43:97:b7:03:77:df:62:
4d:ea:dc:ec:9d:3a:c1:4b:9b:51:16:69:d2:bb:f5:
c8:c3:32:6e:34:74:a4:2b:7d:d4:0e:be:9b:f6:d0:
bb:d1:83:27:72:99:82:51:7d:ed:1b:1a:bb:49:90:
2c:70:27:09:6a:fb:3a:62:44:c5:66:c5:7b:26:39:
e5:b6:06:bf:80:56:9e:be:f7:af:74:b5:d3:19:f2:
60:e3:3e:7e:16:96:b6:e4:53:e2:65:30:f9:0e:c5:
81:51:c8:96:49:45:bb:73:22:f2:c0:de:8c:44:d2:
90:10:46:e1:e7:bb:10:9f:45:c4:7e:65:1f:b5:6e:
fd:eb:2a:d5:62:38:ce:65:ce:c5:e4:62:85:26:24:
74:77:f9:64:97:54:a0:ec:81:15:15:2d:0a:aa:18:
dd:53:c3:0c:29:c1:61:6b:4c:ab:cb:07:82:c3:61:
92:61:44:38:79:e3:33:96:20:64:ea:a6:49:cf:74:
8a:0e:c0:6e:23:35:70:1a:ea:ce:49:3b:f0:bf:50:
4a:20:64:b6:4c:7f:6a:4c:a4:3f:15:06:13:f5:7c:
62:76:69:40:8c:d8:62:18:82:a3:53:63:d3:8f:1d:
5c:4a:b1:e9:73:5e:8e:90:95:1f:01:54:28:6b:ef:
b3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:5A:CE:3B:AE:57:9B:99:00:32:BD:DF:DC:41:68:31:52:5A:F1:DA
X509v3 Authority Key Identifier:
keyid:2A:9F:90:A6:C0:E7:A9:D2:C5:E1:C1:68:81:55:36:53:46:26:06:85
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9F90A6C0E7A9D2C5E1C1688155365346260685.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/1/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7308::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c9:81:61:fe:b7:33:75:16:3f:3d:fe:d6:53:b1:c5:36:e9:
a9:e2:df:f0:f2:4b:7a:86:9d:ba:9b:0f:ff:81:ac:c4:a0:b1:
1a:63:33:f1:38:58:d3:17:dd:fd:32:98:40:16:db:24:ca:dd:
ef:bb:0b:f3:2c:43:52:33:43:00:53:d6:eb:51:ac:62:c2:49:
cd:c2:54:e7:3f:a6:69:bd:fa:07:92:cd:f5:ef:3c:e8:99:93:
e4:d0:aa:53:0e:fe:4f:33:19:99:8b:7e:f0:bc:a8:d1:93:98:
32:15:c7:ef:45:c6:00:08:53:21:ad:16:79:93:8c:0d:ea:31:
32:87:12:f0:71:98:2b:2f:9a:69:5e:81:8c:4c:77:2e:1b:60:
e6:1e:bb:46:60:92:cc:57:a8:9c:14:ee:53:ec:0a:e6:82:ff:
03:2d:3a:e6:24:98:f6:a0:13:6b:2f:9a:83:08:d2:0d:78:4d:
90:5a:f6:70:ec:da:a8:5d:20:75:f6:15:b8:62:9c:39:54:fa:
8a:f2:85:eb:c0:b0:c6:5b:47:ed:e3:8b:b5:0d:41:3d:39:33:
0e:b6:4c:e5:c8:dc:4a:ee:94:e1:c3:13:f3:51:7e:e6:07:12:
dd:19:84:ff:a2:a5:ef:fb:c9:82:32:01:9a:fa:31:8c:c3:db:
2a:c3:84:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 05:59:25 2025 by rpki-client