Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa
File: 323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier: 14wQJ+yspPaae8ltY/fDflCfTQYGJZ68MyueBpyH/Mo=
Subject key identifier: F9:97:C0:8F:C2:FD:CE:FF:6C:10:07:84:72:91:9A:59:27:0B:0B:0F
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 6C2D7FA8AB3F6A6EE0624FCD94192E6FADA5D7C3
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:44:01 +0000
ROA not before: Mon 06 Jan 2025 18:39:01 +0000
ROA not after: Mon 05 Jan 2026 18:44:01 +0000
asID: 263320
IP address blocks: 2804:143c:ff00::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:2d:7f:a8:ab:3f:6a:6e:e0:62:4f:cd:94:19:2e:6f:ad:a5:d7:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:39:01 2025 GMT
Not After : Jan 5 18:44:01 2026 GMT
Subject: CN=F997C08FC2FDCEFF6C10078472919A59270B0B0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:68:27:9a:c7:85:41:cb:a8:69:6a:91:fd:6d:
a7:36:77:5e:e5:ec:d0:be:f5:70:9b:e6:e1:ec:23:
27:ff:66:7f:3b:d8:26:44:16:d2:c7:55:71:bc:cb:
b2:8f:12:06:d1:fe:06:68:1f:16:26:34:4d:26:46:
51:20:70:30:d7:75:c7:9b:87:53:8a:06:86:5e:be:
86:74:9e:1d:b5:98:4f:a0:37:b5:c0:d4:2b:d8:0f:
d0:89:8b:67:08:ec:10:44:7c:5d:f0:d5:d8:9a:6e:
ea:46:dc:5a:d1:69:03:1a:26:bd:4d:e3:5e:a7:ed:
df:d4:47:1b:c0:42:6c:cb:c4:ac:9c:0f:bc:33:20:
be:47:b5:78:5b:8d:b7:c1:01:9a:1f:a4:c6:92:81:
68:cc:2f:06:85:d5:6a:94:d0:ff:c3:df:76:e8:94:
0e:f0:53:4d:9e:ee:48:c9:6c:e6:98:d1:e9:16:9a:
12:d5:c5:5f:ba:74:d6:9b:83:6b:a0:94:6b:03:a4:
df:e2:7c:bb:c2:5c:c1:28:04:5c:b0:0a:31:42:44:
6d:46:9b:9a:b3:e0:4a:3c:f1:1c:3c:12:b5:ed:a2:
66:7e:71:f4:f6:ad:c7:38:ed:f2:9e:5a:fa:cb:cd:
8c:79:16:5b:a4:e4:b9:38:16:8d:ed:87:ef:d9:1c:
78:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:97:C0:8F:C2:FD:CE:FF:6C:10:07:84:72:91:9A:59:27:0B:0B:0F
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666630303a3a2f34342d3434203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ff00::/44
Signature Algorithm: sha256WithRSAEncryption
89:6b:12:4d:33:62:37:3e:37:01:24:d3:b3:ce:56:6c:ac:1b:
87:46:b8:0f:d7:7f:6b:b4:03:15:a5:2a:b3:98:70:8b:99:53:
df:a8:a8:95:65:5e:9f:b0:db:9d:9c:41:41:b0:7e:3c:91:31:
86:f4:c8:65:4f:53:5b:8f:07:88:df:76:75:3d:e9:c8:93:c0:
28:ec:1c:23:53:ed:16:81:91:3b:29:f6:d3:9e:2f:2d:2c:3a:
4b:14:df:19:4c:33:e7:62:78:0b:d7:e9:30:61:ef:c4:3f:83:
b7:ec:e6:1a:77:c9:40:13:14:27:b0:96:9f:cb:fb:e5:83:64:
de:7e:77:a0:c9:d3:95:e9:1c:5a:78:e1:bf:96:dd:fa:a3:47:
d5:b9:5e:ec:72:68:94:78:80:fa:6f:dd:5b:7c:a9:b0:75:71:
c4:00:69:87:f8:55:85:13:9c:b7:49:4e:ad:e7:20:13:19:23:
7b:82:ab:4a:0e:e4:82:ab:ee:0a:46:46:ce:57:ed:38:33:ce:
bd:d5:3d:f4:1b:43:cf:cc:08:11:96:78:a8:ec:51:fd:ab:54:
24:55:48:9b:b4:43:ff:cc:cb:30:00:13:4e:61:84:e9:08:77:
3b:48:0c:2f:31:0a:1b:82:dd:42:0e:8a:31:3f:29:96:20:e9:
1d:04:a3:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:20:16 2025 by rpki-client