Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier: 0Dc4aDOpbVdATx0nv7pxltq3EkZFivRMs/EwZIguOrc=
Subject key identifier: 00:36:8A:C9:E9:2D:C8:70:3E:58:BD:0B:1B:28:42:CD:BF:E5:05:E8
Certificate issuer: /CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Certificate serial: 1CEBFE59C66C2D0FAE659D1AAC8B778B3EE97993
Authority key identifier: 1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time: Tue 21 Jan 2025 20:53:55 +0000
ROA not before: Tue 21 Jan 2025 20:48:55 +0000
ROA not after: Tue 20 Jan 2026 20:53:55 +0000
asID: 11432
IP address blocks: 2804:138::/32 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:eb:fe:59:c6:6c:2d:0f:ae:65:9d:1a:ac:8b:77:8b:3e:e9:79:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76
Validity
Not Before: Jan 21 20:48:55 2025 GMT
Not After : Jan 20 20:53:55 2026 GMT
Subject: CN=00368AC9E92DC8703E58BD0B1B2842CDBFE505E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b8:00:75:6d:54:7d:69:07:6f:f9:28:ed:f8:
7c:03:71:6a:0b:35:b9:f6:9f:4c:05:49:6c:b7:39:
54:1b:bc:87:54:90:f5:ac:fc:d1:8e:a3:57:81:5f:
33:5c:20:92:79:1d:6b:49:0d:cf:67:74:4d:06:7b:
b5:a3:cb:24:13:b2:c5:88:7a:6e:6e:21:f9:95:80:
48:a3:ca:ae:3d:25:39:50:e7:b7:d1:e1:72:a2:68:
21:6d:8f:9f:d5:e5:a4:04:99:af:99:00:39:73:63:
d6:72:2d:e5:99:34:84:9f:81:7b:df:86:e3:2b:fa:
78:6c:86:d0:e9:fd:04:e3:33:2e:bb:90:13:15:a4:
0f:24:13:b8:e0:35:03:34:ef:76:12:d1:a4:30:56:
98:34:51:8b:03:65:6b:10:b8:20:1e:4e:9b:4e:2a:
7d:97:38:7a:fe:98:9b:30:6f:18:4a:0e:1e:91:26:
0c:3b:ca:2b:3c:ad:67:4f:fa:65:95:47:0e:69:55:
0d:e8:57:8f:56:29:c0:63:34:98:d6:3f:ee:6b:fc:
f1:eb:21:e5:0f:fe:aa:30:97:f1:ec:fe:fc:9d:ad:
fe:e9:80:5e:35:cc:aa:c1:8e:d3:f6:73:08:bc:f1:
12:38:ce:db:83:c1:b0:b9:fd:00:4d:02:c8:8f:4d:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:36:8A:C9:E9:2D:C8:70:3E:58:BD:0B:1B:28:42:CD:BF:E5:05:E8
X509v3 Authority Key Identifier:
keyid:1A:B5:4A:4F:05:4E:3B:FD:78:8B:DC:45:FF:1B:6C:77:39:BB:9D:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1AB54A4F054E3BFD788BDC45FF1B6C7739BB9D76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/0/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138::/32
Signature Algorithm: sha256WithRSAEncryption
23:f2:cb:11:8e:fe:d2:22:17:df:73:71:ef:6f:a5:5a:95:29:
94:23:88:f4:fb:24:d4:c2:5e:6f:0b:83:3c:f0:9d:27:7b:80:
d9:6e:5b:41:22:83:e5:15:d4:ad:64:c1:91:d2:91:73:b9:c1:
3c:49:a0:9f:d1:ce:93:f5:10:81:15:c9:0c:7e:cb:72:67:4a:
7b:9f:dc:a6:c5:cc:75:0a:ef:55:91:49:74:ce:55:ee:79:27:
93:5f:25:6b:23:65:33:4a:da:98:3e:ff:f2:b9:d7:8a:28:2e:
c8:d5:57:5c:ed:41:f3:ce:ed:b7:db:2f:9c:2f:f5:8c:26:8b:
59:24:79:ce:12:f1:6b:a3:62:f6:30:8c:42:95:5b:d2:7b:dd:
70:a8:27:3f:ea:50:c8:60:03:b2:5f:af:b5:48:91:56:7c:1f:
7b:66:0d:21:fe:1b:53:3c:4e:b3:60:31:15:98:f4:2b:6a:4d:
a0:ef:d1:a5:54:2b:41:ec:c2:71:33:d5:32:28:8d:9c:4f:7e:
65:6d:ab:69:11:fe:eb:1b:1a:0b:3e:e5:30:8f:9d:8a:24:4c:
fa:75:5e:8a:62:e5:56:f1:fc:55:c6:58:10:c2:1f:66:b3:0d:
ec:11:da:dc:39:40:4d:e8:a2:89:27:4e:8d:84:25:f2:51:65:
b3:1a:d4:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:39:06 2025 by rpki-client