Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
File: 323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier: ocHx++B3yvY3KwXAwraH6HMj3guz4KXqkyxtlEnlJHE=
Subject key identifier: CA:53:77:71:94:9E:FF:99:24:C5:CE:D6:30:58:97:D4:22:59:81:87
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 645A40EB9D91AC662424D818FF93D3EF47159059
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 00:44:37 +0000
ROA not before: Sat 21 Dec 2024 00:39:37 +0000
ROA not after: Sat 20 Dec 2025 00:44:37 +0000
asID: 11097
IP address blocks: 2801:80:1400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:5a:40:eb:9d:91:ac:66:24:24:d8:18:ff:93:d3:ef:47:15:90:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 00:39:37 2024 GMT
Not After : Dec 20 00:44:37 2025 GMT
Subject: CN=CA537771949EFF9924C5CED6305897D422598187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:61:04:b4:dc:7b:69:51:53:79:f7:75:cb:0c:
22:de:44:4c:3b:0d:cd:62:29:c1:da:db:4c:f6:42:
15:de:db:16:19:d0:c1:9c:60:59:4c:f2:ae:2f:1b:
48:99:b8:f5:e4:ed:ee:63:f4:a4:f0:50:ee:19:81:
9b:86:2f:99:e1:ab:c5:54:8a:a1:32:40:90:4b:e4:
66:d3:aa:33:ca:40:8a:6d:06:0a:01:7f:a1:0b:38:
8e:41:39:01:5f:3b:8e:9a:43:2d:f4:50:5d:00:8f:
62:48:c1:7f:a3:4d:5f:26:9a:0b:da:af:0a:3b:2f:
34:a7:a6:25:b7:03:b7:fd:f4:7e:7f:b3:55:ad:28:
19:63:4a:92:91:32:4c:47:9c:8d:42:d7:ac:b7:df:
88:45:98:b6:cb:a8:22:15:73:67:f9:24:29:13:63:
3b:e9:4f:f8:4a:68:d4:88:e9:18:e9:e2:85:e0:57:
fb:03:64:1c:cf:87:c3:aa:cc:7a:54:37:50:8c:6b:
07:4a:db:23:e7:70:4e:dd:17:4a:6b:f7:cc:81:4e:
c9:5b:77:26:4a:83:37:35:e9:af:c9:72:1a:09:fe:
20:ed:da:27:0c:de:8d:35:e5:c0:7f:27:3b:4e:cd:
ed:8b:ab:b6:84:00:0c:0e:27:d6:d7:28:3a:ef:a5:
f0:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:77:71:94:9E:FF:99:24:C5:CE:D6:30:58:97:D4:22:59:81:87
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430303a3a2f34382d3438203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:1400::/48
Signature Algorithm: sha256WithRSAEncryption
00:54:eb:b1:9e:f8:77:4d:61:86:8f:93:ce:1b:d7:bb:52:90:
9e:7b:cd:b3:1e:6f:6a:71:16:cc:9c:c3:81:ce:27:98:15:12:
e0:4f:bc:e5:de:9c:13:cb:60:4a:2a:94:77:7b:36:f6:04:1c:
67:b6:f0:25:4e:00:35:3d:5a:8b:22:b7:25:e7:1f:eb:fb:b7:
86:7a:4d:06:1a:e6:4b:ae:10:e4:29:b5:77:1c:a3:97:8a:1e:
bc:00:f1:c3:b2:92:5c:cb:58:ff:ef:18:98:7c:08:7e:97:db:
6c:5e:63:39:33:b2:d5:7e:9a:35:3f:e6:d2:17:62:46:03:a7:
3c:3f:89:a1:83:27:74:32:b4:cd:be:ae:2d:f1:3a:0e:db:99:
cb:29:d7:04:7a:73:36:39:34:e2:30:b2:a5:2a:ee:4e:16:68:
16:d5:bd:9e:84:88:af:73:2e:76:4f:1d:72:83:bb:4e:6c:cf:
15:c4:81:f5:06:c8:03:ef:23:79:e2:fd:2c:94:c7:e7:26:ca:
df:56:f1:95:bd:a9:ba:b8:98:1e:94:2e:9b:ce:00:62:aa:37:
72:d8:0a:ef:82:92:cc:b3:39:7f:e0:ad:4b:59:7e:ee:e7:bb:
1c:c6:05:d5:6a:10:ab:3c:d3:18:00:14:07:85:62:87:48:3c:
52:53:c5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:38:08 2025 by rpki-client