Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
File: 323830343a373932303a3a2f33322d3438203d3e20323731323836.roa (raw, json)
Hash identifier: pFAr+8bFChiRuYeGE5Z2wNjNYoeGJuEnIyZjp5zxwEk=
Subject key identifier: 65:03:A3:E8:0E:00:CD:F8:9F:B9:07:E9:33:C2:57:F7:EA:43:DF:97
Certificate issuer: /CN=6689F5CF61182A36307EEB7C011D8636B6340149
Certificate serial: 3E366229F2E89C0DEFE8A520BA0D66D9A61472BA
Authority key identifier: 66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
Signing time: Thu 04 Apr 2024 06:49:15 +0000
ROA not before: Thu 04 Apr 2024 06:44:15 +0000
ROA not after: Thu 03 Apr 2025 06:49:15 +0000
asID: 271286
IP address blocks: 2804:7920::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:36:62:29:f2:e8:9c:0d:ef:e8:a5:20:ba:0d:66:d9:a6:14:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6689F5CF61182A36307EEB7C011D8636B6340149
Validity
Not Before: Apr 4 06:44:15 2024 GMT
Not After : Apr 3 06:49:15 2025 GMT
Subject: CN=6503A3E80E00CDF89FB907E933C257F7EA43DF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:78:10:67:72:09:02:00:43:27:4c:f4:56:
c9:b9:58:01:9b:a0:27:ad:fa:9c:a9:5d:46:c8:ed:
18:db:da:dd:33:61:62:a1:b3:f1:40:38:9f:0f:06:
bb:3d:3d:e8:d6:1f:d3:2b:d9:2b:44:b2:27:b8:7f:
11:6e:be:e5:0a:ce:84:66:e6:8b:e0:02:0a:40:79:
3d:e7:89:da:52:6c:ee:e7:7b:ae:78:08:37:20:ea:
64:8d:1f:e7:bf:1c:f7:00:d7:66:1f:09:a2:b5:b6:
70:b6:d0:60:99:33:a2:9d:6e:00:4e:66:64:17:9d:
f8:2d:08:c8:1a:72:c0:31:39:35:98:54:6e:80:5a:
63:47:86:8f:0b:b7:62:a1:2b:22:ff:d5:6b:d2:da:
70:62:ab:a5:8f:16:cb:f9:23:74:bd:d5:29:93:4c:
6c:9a:9e:d1:41:b5:9e:d3:2e:ca:a3:57:d4:c0:b6:
37:a1:2c:3b:e5:9e:fe:ff:fa:a5:00:b2:97:65:b8:
d8:f8:53:bf:24:b8:f0:1d:5b:60:34:bf:98:ce:cb:
49:97:34:4a:93:78:ae:12:3a:22:91:ec:3a:86:79:
66:f0:54:7f:15:9e:82:b3:f3:5f:a6:57:f3:40:0d:
15:d2:f6:64:28:00:88:08:d7:3e:2e:2a:fa:ed:38:
71:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:03:A3:E8:0E:00:CD:F8:9F:B9:07:E9:33:C2:57:F7:EA:43:DF:97
X509v3 Authority Key Identifier:
keyid:66:89:F5:CF:61:18:2A:36:30:7E:EB:7C:01:1D:86:36:B6:34:01:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/6689F5CF61182A36307EEB7C011D8636B6340149.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6689F5CF61182A36307EEB7C011D8636B6340149.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6W3kFbvnDR5bRQMACWft4zuqXaAX1Y4wc8vJttmd5zsH/1/323830343a373932303a3a2f33322d3438203d3e20323731323836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7920::/32
Signature Algorithm: sha256WithRSAEncryption
32:71:18:0b:be:f3:8d:45:e9:8b:32:3e:03:56:ed:d3:d6:fb:
14:18:15:a6:67:3f:17:90:36:80:28:b4:0b:4f:e5:1e:80:ed:
56:65:b3:43:d6:18:5f:8c:a3:d4:b7:88:ed:d7:b4:03:ad:ad:
df:75:c3:5e:21:d2:30:67:41:88:eb:87:cd:14:c4:14:68:b9:
e4:d1:90:03:60:a5:9c:4c:b5:1f:93:85:1c:ec:8d:d2:7d:58:
c6:de:38:00:7a:b2:46:f0:23:72:db:66:91:fe:aa:90:e8:16:
1c:75:74:a0:63:2d:55:3b:7a:10:74:94:5f:9d:f9:28:e9:3a:
df:91:78:06:50:03:a7:fe:95:08:02:cc:cf:65:cd:94:96:d6:
98:bd:9b:46:90:fa:f9:68:8a:a9:62:cb:06:ba:3f:72:88:f5:
69:7d:4f:78:5d:68:d5:a3:ec:9c:c9:75:d3:90:68:d6:f2:fd:
9b:4f:33:30:e8:81:be:69:69:1e:9e:e9:2d:c2:de:55:5e:60:
b6:f6:e5:92:80:b8:8d:a1:58:a4:a4:63:c2:90:48:98:14:41:
68:62:2d:c2:72:a4:c8:f8:41:a6:a6:ff:26:e5:5a:9c:73:22:
9c:d8:de:8e:a2:99:d7:52:6b:00:75:0c:46:04:ff:90:99:4f:
5a:de:a6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:42:04 2025 by rpki-client