Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
File: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (raw, json)
Hash identifier: QExSczG77rM6Jzqz9t4t0Zx+qETXFMD2QgmpGyI57y0=
Subject key identifier: A7:C7:DD:FE:CF:11:F0:C8:46:AE:E5:3D:C9:BD:1D:9A:23:9F:C5:97
Certificate issuer: /CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Certificate serial: 333D02AB90C8657DD612EBFD0FDC4F129A4B7EA3
Authority key identifier: 2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
Signing time: Thu 04 Apr 2024 06:28:08 +0000
ROA not before: Thu 04 Apr 2024 06:23:08 +0000
ROA not after: Thu 03 Apr 2025 06:28:08 +0000
asID: 268874
IP address blocks: 2804:5be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:3d:02:ab:90:c8:65:7d:d6:12:eb:fd:0f:dc:4f:12:9a:4b:7e:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB
Validity
Not Before: Apr 4 06:23:08 2024 GMT
Not After : Apr 3 06:28:08 2025 GMT
Subject: CN=A7C7DDFECF11F0C846AEE53DC9BD1D9A239FC597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:84:c4:67:88:f9:f6:a9:1c:ad:24:7a:a8:b6:
95:97:db:60:29:f4:e9:da:cc:80:1a:af:64:35:7a:
72:cf:87:a8:27:20:e9:60:21:19:aa:ff:fb:9b:7e:
67:1c:2b:42:bb:d6:3b:20:d9:29:f1:53:a4:19:19:
1d:62:e6:5e:fd:15:8a:5c:47:1a:a9:e1:86:2b:99:
73:10:05:61:d4:41:4c:dd:28:1f:31:48:a7:10:36:
52:12:fe:31:5b:ea:72:58:f3:e6:21:2f:3b:bb:d1:
2e:dd:49:36:ab:9e:01:1f:bd:57:0e:2c:5c:bf:0f:
d8:be:09:76:7b:00:d6:7f:70:8b:1a:93:a0:61:81:
36:56:81:98:a7:ea:fb:c1:69:b8:0a:0e:e9:68:4c:
c1:76:c5:e6:0a:f3:08:b0:c3:42:50:d1:df:28:91:
fe:7a:fe:6a:2c:d9:9d:5e:ff:63:f1:99:1c:49:a0:
38:d5:e2:ee:fc:12:70:d4:86:f1:47:12:3d:7d:43:
42:60:c5:67:82:57:9d:a0:92:c0:e1:cf:25:45:e2:
bc:00:e5:31:4f:d8:d3:72:de:df:fe:30:48:28:47:
8c:c4:58:d8:75:25:82:51:9f:14:d7:c3:e4:6d:f2:
7d:22:10:9b:a2:42:22:51:84:3e:bc:da:e5:dd:0d:
d2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:DD:FE:CF:11:F0:C8:46:AE:E5:3D:C9:BD:1D:9A:23:9F:C5:97
X509v3 Authority Key Identifier:
keyid:2A:07:DF:4D:61:C2:A8:0B:9E:0A:6B:E4:F5:D7:A8:09:30:C7:35:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A07DF4D61C2A80B9E0A6BE4F5D7A80930C735CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/1/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5be0::/32
Signature Algorithm: sha256WithRSAEncryption
6e:7d:7f:fe:a9:c9:1c:2a:f1:fd:d7:d6:99:74:d2:d6:d0:9a:
b5:ad:97:de:9f:2a:66:77:99:66:23:95:d1:c3:a2:72:2e:56:
36:00:e3:8b:c7:86:e1:6e:15:28:d7:30:d3:c4:d6:2d:e5:d4:
34:55:c7:e9:25:05:20:97:77:c2:6b:fa:96:21:2c:be:78:21:
7b:0b:30:8a:32:52:95:7c:5f:e4:6a:d7:31:f0:83:db:29:2b:
77:5a:b4:f1:12:9e:cf:db:c4:b6:32:0e:53:ef:00:08:79:8a:
88:4f:f4:a4:5c:de:d9:48:25:fa:40:bd:5e:fd:15:96:e6:35:
61:25:42:3f:df:90:a1:02:51:f1:ed:e0:0e:a4:e9:ad:d3:15:
12:11:27:d1:b7:56:4d:25:ca:37:f3:97:df:33:13:a1:0c:57:
9a:72:12:e0:a1:b0:c5:b6:fa:3f:0d:ca:21:38:92:31:aa:00:
48:27:ea:23:97:c5:e3:e7:5a:01:7c:ee:ac:b5:c1:0a:62:43:
64:d7:b1:13:8d:0d:03:25:bb:d6:11:86:95:ac:ca:2c:c7:f5:
e9:14:c4:fe:6f:47:b2:0a:26:c3:7a:a8:5f:3d:f9:d4:9a:7d:
0b:81:32:db:c9:0f:e4:70:f7:56:b6:3e:24:79:e8:b5:28:32:
f8:e0:ed:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:25 2025 by rpki-client