Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
File: 323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa (raw, json)
Hash identifier: fCeUJ15HbikpdjE1ii8tfw/dnGlKibGFdCNxI/Yy46U=
Subject key identifier: 3B:0F:74:24:51:ED:40:6E:D4:76:A0:28:B5:AE:1E:9D:32:28:B2:3F
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 11346B8D6385D5697B706A376412F8A918367F66
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 00:22:08 +0000
ROA not before: Sat 21 Dec 2024 00:17:08 +0000
ROA not after: Sat 20 Dec 2025 00:22:08 +0000
asID: 11097
IP address blocks: 2801:80:140c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:34:6b:8d:63:85:d5:69:7b:70:6a:37:64:12:f8:a9:18:36:7f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 00:17:08 2024 GMT
Not After : Dec 20 00:22:08 2025 GMT
Subject: CN=3B0F742451ED406ED476A028B5AE1E9D3228B23F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ec:c8:a6:c3:71:63:85:b6:c1:0b:4c:8e:06:
13:62:a3:3d:3a:bd:93:29:2f:8f:f5:c9:2d:a1:52:
33:27:61:a1:f7:13:06:6a:aa:86:09:57:8e:ac:2b:
b2:57:77:54:ed:52:11:83:e6:f8:c1:4a:34:c7:80:
a1:de:38:7b:b4:41:a2:88:bf:40:7a:c7:e7:91:32:
d7:e0:52:05:be:47:f4:05:26:34:dc:7d:e6:f7:b3:
56:45:00:00:40:e5:62:63:5f:22:57:a9:4a:75:1b:
88:03:6b:60:b1:2c:94:a2:84:be:04:95:38:dc:3f:
85:6f:27:15:5d:de:c9:7d:fd:8c:3c:f7:ca:a2:be:
c0:33:a3:a4:e6:6a:63:27:12:6e:85:bf:0d:d0:6c:
85:00:f4:d6:0d:3a:51:2c:af:71:96:ba:f2:f5:cb:
5e:42:48:3d:52:1a:25:21:8a:4a:49:f4:f0:a1:e5:
61:c5:d0:81:b4:d0:69:f3:21:28:29:19:f9:d5:0a:
0f:d9:88:02:fa:e0:7e:ec:59:8a:8c:c3:49:a9:93:
a8:bd:e4:c3:c8:49:89:6b:27:4b:c6:b0:e1:06:bc:
09:1a:f2:68:d3:c4:97:3c:7c:93:36:72:04:09:20:
b1:8c:73:35:af:15:da:dd:cc:40:02:7f:5c:d6:e1:
1d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:0F:74:24:51:ED:40:6E:D4:76:A0:28:B5:AE:1E:9D:32:28:B2:3F
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313430633a3a2f34382d3438203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:140c::/48
Signature Algorithm: sha256WithRSAEncryption
14:b1:d3:1f:c3:48:2b:bc:5f:58:b4:2b:fb:93:21:48:02:6c:
e0:ac:c6:0c:13:49:a7:a8:39:1b:e7:09:02:5f:5f:68:a1:2d:
99:63:03:e5:ae:d1:04:9c:bd:87:10:0e:2e:4e:e4:93:fe:3a:
5e:8d:a7:26:6b:d1:cc:d9:46:cd:75:54:0c:d6:c3:3a:c2:f7:
fa:cb:98:7b:3f:7c:42:fa:f4:84:01:61:e2:97:6c:5e:c9:54:
a9:77:40:94:28:94:01:00:16:57:95:57:15:98:36:cf:f6:19:
01:b9:65:af:dc:42:49:de:99:3f:16:b5:8b:3d:98:da:98:59:
fc:70:42:f2:bc:8b:38:e5:58:25:ee:ed:2b:4f:ca:85:cb:83:
75:8b:67:ec:12:2e:d6:cd:14:d8:86:db:3f:be:a1:ac:9a:33:
b0:14:15:df:a0:2a:c9:81:4d:cf:63:b5:a1:49:4f:92:89:96:
5b:3b:a2:42:03:f8:3f:03:9a:5c:73:13:d1:c6:9b:84:89:56:
3a:a2:79:9c:5f:e9:00:8b:5d:22:b6:2d:e3:5d:0d:cc:a7:45:
4a:02:c7:01:3b:b2:b8:27:24:35:93:5f:45:01:35:73:48:1b:
0f:47:e5:e1:ad:a8:db:4b:5a:36:67:7c:c4:2e:bf:31:52:d8:
e2:99:7f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:27:32 2025 by rpki-client