Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa
File: 323830343a386538343a3a2f33322d313238203d3e20323733343331.roa (raw, json)
Hash identifier: AvVcTCA+lyIraklGxLPxL94UnxVE9Ct0Fzl5yeIwNOQ=
Subject key identifier: 0E:82:F7:16:ED:87:6A:EE:C6:9A:59:B4:C2:46:93:94:09:35:70:61
Certificate issuer: /CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
Certificate serial: 7DF231C9BEFB8EADDD7F23EB5F81C105480AC57C
Authority key identifier: 7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa
Signing time: Mon 11 Nov 2024 20:32:57 +0000
ROA not before: Mon 11 Nov 2024 20:27:57 +0000
ROA not after: Mon 10 Nov 2025 20:32:57 +0000
asID: 273431
IP address blocks: 2804:8e84::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:f2:31:c9:be:fb:8e:ad:dd:7f:23:eb:5f:81:c1:05:48:0a:c5:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6
Validity
Not Before: Nov 11 20:27:57 2024 GMT
Not After : Nov 10 20:32:57 2025 GMT
Subject: CN=0E82F716ED876AEEC69A59B4C246939409357061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:90:33:48:45:80:11:92:7f:90:11:74:51:
b0:b5:bb:4f:4d:a6:0e:28:47:88:0e:bf:a3:63:9d:
ef:f2:d5:44:95:de:27:38:1e:d2:19:11:c8:ee:5d:
77:4f:f9:7f:1c:19:46:9f:41:3a:c5:36:34:35:7d:
8a:f7:f7:ee:e7:80:29:d1:dd:45:ae:29:15:ec:5d:
8f:e9:7f:86:85:15:19:6b:cb:58:5e:57:ab:38:7b:
7b:61:b2:e9:78:24:25:fb:19:f4:7a:14:18:6d:e3:
00:d6:b4:6c:2c:68:dd:30:9f:91:08:ee:04:f8:2e:
85:75:a4:2d:7c:b9:6b:b6:5f:a1:cf:89:e0:5e:e4:
dd:b4:1e:de:13:41:02:6d:f9:63:fe:f1:9d:f0:1f:
17:64:0f:75:b3:9c:d1:89:50:cc:c8:bb:af:3f:c4:
c2:4c:e5:3c:2b:47:c8:0e:3c:9c:94:26:36:e9:6c:
b2:9d:b9:4e:14:74:a8:b6:af:01:c7:60:1c:4b:92:
ae:6d:86:f5:67:31:bf:12:8c:49:df:20:33:2f:9a:
7a:67:5f:6d:ba:19:f2:a1:2d:a2:c4:19:e1:b0:71:
03:35:cf:29:e8:eb:ed:c6:dd:4a:da:73:d7:76:4c:
cf:0e:fc:91:eb:65:b4:2f:ce:7a:4a:48:dd:72:d1:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:82:F7:16:ED:87:6A:EE:C6:9A:59:B4:C2:46:93:94:09:35:70:61
X509v3 Authority Key Identifier:
keyid:7D:BF:23:D2:D2:FE:1E:5F:87:E0:2D:AA:39:CF:DE:13:BD:6C:79:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7DBF23D2D2FE1E5F87E02DAA39CFDE13BD6C79C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ipk4eQd9zUucyExLksCYxyK4SqEdvGQsJLLk9MspmFX/0/323830343a386538343a3a2f33322d313238203d3e20323733343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e84::/32
Signature Algorithm: sha256WithRSAEncryption
21:1f:c2:92:6c:cf:cb:ce:c6:c2:60:4b:fa:17:a2:91:d8:e5:
c6:45:3e:c3:e1:c2:1e:72:b3:d3:20:71:3a:4b:be:bd:79:93:
26:77:5c:02:4a:5e:c1:9b:2e:b4:f8:25:2e:54:a7:01:0b:ab:
84:ad:87:85:dd:46:e6:d6:84:b2:20:41:ae:ed:c1:41:20:c4:
74:e3:8e:2e:58:e1:7c:9f:05:ab:0c:84:ff:4a:e7:df:08:6d:
31:a8:e5:6e:ef:88:5a:5d:80:c9:80:34:6a:c0:d5:32:d5:92:
a1:c4:30:42:cb:66:87:08:b8:b8:39:26:c3:88:ca:95:f7:2e:
36:62:15:82:13:40:23:27:25:0e:72:00:02:92:23:a8:77:b0:
c3:9a:1a:4f:e4:99:0c:1a:ff:78:05:1a:1a:e8:d0:45:a0:82:
6c:81:e2:cb:36:99:03:4e:73:d1:6e:48:30:4b:b3:c9:ef:c6:
3d:86:37:0d:53:18:e2:b3:c2:37:ca:f4:1d:81:d5:9a:a4:34:
be:94:fe:e5:b3:e7:25:13:35:e9:1f:8d:a1:fe:35:ba:6f:82:
0a:71:87:bb:64:91:35:4b:f0:7f:49:ad:ca:ed:bd:71:1a:11:
3e:72:99:ba:53:98:c4:3f:26:39:98:eb:06:f8:be:c2:d4:62:
de:90:1e:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:29:00 2025 by rpki-client