Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa
File: 323830343a313433633a3a2f33332d3333203d3e20323633333230.roa (raw, json)
Hash identifier: TLSyPFFbcrI0Peikt4mr2TC8ZFmsHOBt/7jRSr+dkak=
Subject key identifier: A2:69:EF:B6:9D:51:84:C2:F8:86:96:AF:D9:3E:B1:58:CC:9B:0C:4F
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 1421552F688BA92EE88386693D9FF43E8F456DA9
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:43:00 +0000
ROA not before: Mon 06 Jan 2025 18:38:00 +0000
ROA not after: Mon 05 Jan 2026 18:43:00 +0000
asID: 263320
IP address blocks: 2804:143c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:21:55:2f:68:8b:a9:2e:e8:83:86:69:3d:9f:f4:3e:8f:45:6d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:38:00 2025 GMT
Not After : Jan 5 18:43:00 2026 GMT
Subject: CN=A269EFB69D5184C2F88696AFD93EB158CC9B0C4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:70:e7:1c:f6:2f:62:cf:90:d4:f0:26:f9:7f:
c0:d8:f1:68:06:81:29:02:f0:b6:b8:75:a5:1b:33:
60:91:02:dc:0d:82:7a:ea:c4:33:af:7a:f8:63:15:
cd:f3:98:24:1f:93:04:40:ee:3a:44:94:f1:5c:d4:
a7:88:db:f3:d1:bf:ef:35:b8:63:70:10:79:90:49:
d6:96:06:79:dd:2f:0a:54:ec:20:33:36:0e:8a:04:
63:44:da:38:ab:ce:6f:37:7e:35:93:3c:fb:10:59:
58:f8:14:5f:be:e4:33:48:00:5c:23:53:bd:cf:10:
9a:3e:11:be:1e:31:12:9a:a4:4e:28:57:3f:c0:56:
8d:fe:50:10:56:4a:9a:c8:1d:2e:1c:0c:ff:08:f8:
1c:78:72:d4:69:7d:61:13:d7:00:df:d9:0a:e8:0d:
41:fc:db:2a:de:d7:d9:38:e9:8a:7d:8a:d6:2f:25:
61:0f:0c:4d:7a:b5:26:86:1d:22:0f:dc:62:e7:9f:
8d:ad:7a:14:22:fb:dc:0a:73:b9:70:5b:7b:cd:d3:
d3:21:29:36:7b:9d:8d:4f:ca:26:03:fe:09:c7:13:
92:9d:ac:2b:38:5c:d5:11:38:b9:0b:3e:e9:fb:a4:
6b:2f:1b:94:6e:c1:96:f0:1e:f3:0e:75:b8:ce:02:
ed:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:69:EF:B6:9D:51:84:C2:F8:86:96:AF:D9:3E:B1:58:CC:9B:0C:4F
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a3a2f33332d3333203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c::/33
Signature Algorithm: sha256WithRSAEncryption
a6:fc:14:31:99:7d:e1:4a:b9:69:77:69:b8:71:1b:cd:86:7e:
07:cd:0c:4a:71:f6:53:e0:77:7b:fd:db:af:d3:90:2c:d5:7c:
dc:e5:d7:75:dc:7a:5c:09:70:3b:d6:b8:9f:7d:07:06:23:57:
f3:7f:44:90:31:75:2d:0d:7f:d1:10:f2:8b:c9:49:7e:b0:60:
a9:7b:49:7b:fb:35:d5:fd:34:4b:d7:3f:12:ec:64:a5:6b:9f:
b3:4c:36:fe:70:cb:60:51:3f:0d:29:cc:42:05:3c:7f:e0:30:
ab:32:b2:f3:58:34:1d:ee:15:02:2e:30:37:d6:a8:88:60:15:
f6:ea:b8:9b:b4:19:c7:2f:38:d5:eb:b7:16:71:61:03:32:10:
73:24:40:f1:13:93:a2:df:79:36:c6:83:66:b5:d7:cd:37:b2:
9a:4d:a3:b6:e5:33:95:33:22:e5:2a:af:7e:3e:5c:29:c7:2f:
fa:d9:3d:ac:8e:09:b5:8d:56:bf:d7:b9:4c:83:18:a8:f2:a9:
72:34:84:d8:d1:7b:db:14:ec:ae:1e:2f:a1:e1:53:bc:9b:5e:
46:c9:45:4e:51:36:37:15:46:de:21:89:0d:70:12:9b:5b:8e:
20:76:5c:72:1a:6b:19:d5:40:28:35:3b:0e:86:6c:0f:fc:f8:
54:58:28:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:17:18 2025 by rpki-client