Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
File: 323830343a316131303a3a2f33322d3438203d3e203631383334.roa (raw, json)
Hash identifier: 3+rniYr+8c+zkHZamebCxvh0I3JX81oGN54a/YxsO90=
Subject key identifier: 54:05:C3:7F:E3:0E:9C:82:F0:9B:08:86:7D:60:31:4B:08:AD:B4:B5
Certificate issuer: /CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Certificate serial: 3C97FE1FBE162203F6F081B3C4E4FD3CAF974F78
Authority key identifier: C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
Signing time: Thu 04 Apr 2024 08:18:43 +0000
ROA not before: Thu 04 Apr 2024 08:13:43 +0000
ROA not after: Thu 03 Apr 2025 08:18:43 +0000
asID: 61834
IP address blocks: 2804:1a10::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:97:fe:1f:be:16:22:03:f6:f0:81:b3:c4:e4:fd:3c:af:97:4f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C336C65AA0BA33C626FAB0B9C26E026EB908454A
Validity
Not Before: Apr 4 08:13:43 2024 GMT
Not After : Apr 3 08:18:43 2025 GMT
Subject: CN=5405C37FE30E9C82F09B08867D60314B08ADB4B5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3a:2c:5a:04:08:6e:eb:16:cc:6e:67:a4:ce:
78:69:b6:e2:23:b5:df:38:aa:86:ee:aa:d9:21:10:
72:7a:ee:d0:d6:42:44:a9:ba:0d:21:07:c5:7a:ec:
16:2d:f8:c3:3f:4a:cc:7b:06:8e:a9:c3:90:49:72:
cb:14:63:8d:e3:de:f1:9a:95:71:a8:8a:2b:9a:94:
f7:f4:74:16:51:1a:92:cb:72:12:ab:56:b3:d3:32:
e6:c7:d3:d4:36:ed:8f:1b:60:16:bd:1c:ac:09:54:
83:13:77:9c:ce:40:c0:fb:32:69:db:d5:51:31:0f:
12:38:df:5d:94:d8:c1:3e:f3:99:2f:ba:6c:88:74:
3e:11:7d:b1:2d:f1:91:18:c6:bc:5f:d9:cd:64:45:
c9:3f:05:ff:d2:d1:61:aa:a5:94:e3:de:06:35:bf:
de:79:59:36:4d:16:ef:62:9a:d6:f1:c7:c5:d1:1b:
22:82:9c:db:db:77:2d:f7:9e:59:60:3f:15:53:3b:
b3:4b:1f:e8:38:56:d9:af:79:ad:2c:16:5f:b0:a3:
81:2e:23:bf:0d:0a:86:eb:64:c6:2b:21:6d:53:aa:
fb:e7:da:85:d0:d2:fc:5f:c7:72:f6:15:f6:cd:7a:
85:1a:eb:77:1d:34:fd:6f:4e:1c:ac:03:ec:4a:6f:
0e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:05:C3:7F:E3:0E:9C:82:F0:9B:08:86:7D:60:31:4B:08:AD:B4:B5
X509v3 Authority Key Identifier:
keyid:C3:36:C6:5A:A0:BA:33:C6:26:FA:B0:B9:C2:6E:02:6E:B9:08:45:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C336C65AA0BA33C626FAB0B9C26E026EB908454A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4pHB1NWnbeWAhBKKUodRkp1Uz1Zr5PT2AJUxkmA31jok/1/323830343a316131303a3a2f33322d3438203d3e203631383334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a10::/32
Signature Algorithm: sha256WithRSAEncryption
7d:ee:9b:0a:fb:df:24:ee:16:67:48:b0:90:d0:31:f5:b9:0b:
4c:be:b9:d8:e9:5e:88:f5:69:7b:22:95:38:06:bf:65:f3:03:
82:39:1c:ae:ed:d2:82:df:cb:5f:8e:96:31:47:30:6e:72:72:
7f:ea:dd:74:e1:f9:9e:06:69:24:f9:e8:4f:36:61:d2:b3:dc:
e4:09:99:78:e1:cb:ef:7d:7d:c7:77:9c:c1:a2:ac:11:40:81:
24:39:10:20:a0:b6:04:88:6c:a1:33:5f:e4:7f:99:6c:b4:de:
16:28:0b:7d:d9:89:cb:53:78:d1:af:cc:cd:02:6b:4e:7a:2f:
60:80:3c:86:0c:ae:66:57:82:fb:c3:c2:02:97:05:fd:07:93:
7b:2a:e6:bc:ec:67:50:1c:5e:0c:30:fc:53:00:ad:58:0d:ca:
1d:00:f2:f2:64:ec:a3:15:7b:67:81:f6:e5:83:32:81:57:b3:
f1:04:e2:f8:ab:6f:d2:01:1c:19:4d:88:35:57:19:48:eb:1d:
15:02:ce:fb:cf:39:7b:d3:c5:74:a8:ab:19:7a:87:57:6c:ee:
0d:6f:ce:de:38:a5:10:3b:af:6d:9b:9f:bc:59:d1:5b:48:23:
8c:aa:ef:c7:50:b6:5c:74:e3:c2:b3:3f:85:95:d0:8b:97:86:
af:f4:59:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:53:23 2025 by rpki-client