Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa
File: 323830343a336637383a3a2f33322d3334203d3e20323635383934.roa (raw, json)
Hash identifier: L35ZBUpJee7y0an8UOVvVEFYhh9tw1griW5lXEx673Y=
Subject key identifier: 91:EF:FA:DC:FA:5E:72:49:81:76:90:79:45:CC:BA:2C:A0:8C:E1:C7
Certificate issuer: /CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Certificate serial: 292AF0ED0DF5B5244C83024D8A94A6C044B1DB59
Authority key identifier: 4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa
Signing time: Tue 21 May 2024 20:14:42 +0000
ROA not before: Tue 21 May 2024 20:09:42 +0000
ROA not after: Tue 20 May 2025 20:14:42 +0000
asID: 265894
IP address blocks: 2804:3f78::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:2a:f0:ed:0d:f5:b5:24:4c:83:02:4d:8a:94:a6:c0:44:b1:db:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AB66EE372C17AF7E98850BE54F8A77444900F94
Validity
Not Before: May 21 20:09:42 2024 GMT
Not After : May 20 20:14:42 2025 GMT
Subject: CN=91EFFADCFA5E72498176907945CCBA2CA08CE1C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:81:7f:4f:83:2e:84:86:05:6d:56:58:4d:
74:42:49:79:e9:59:f8:a7:0c:22:6c:d3:95:ec:2a:
a6:91:0e:29:77:29:76:84:01:ae:b5:b6:db:87:97:
b5:ef:41:a3:24:e1:bd:da:d3:83:12:cc:26:52:a1:
84:64:2f:e1:21:e1:ac:57:94:86:8d:cc:3d:5b:10:
a7:34:b0:4d:17:1a:c4:61:ed:f6:8a:41:08:44:d8:
1a:26:8d:ac:6f:b7:9a:20:52:81:28:a6:45:53:82:
90:b7:ee:9e:c6:ed:03:86:ab:ef:e5:79:8e:cb:79:
12:ce:51:35:1f:bb:eb:d1:50:0d:6c:90:97:bc:77:
31:0e:67:f2:3c:32:6f:40:74:ec:44:5c:89:65:a8:
a7:e6:cc:87:f3:0f:48:ad:98:75:0a:26:97:1f:fc:
42:5d:ec:b5:17:72:d1:9e:7f:ce:ff:30:1f:19:72:
82:14:b8:f1:8c:19:34:bd:9c:eb:a5:93:5c:3c:f9:
74:7f:01:54:44:5f:67:7c:b9:1c:c6:0a:35:c4:9e:
5d:e0:c8:a7:1e:90:49:a3:dc:36:3d:06:87:8e:6b:
3d:36:ce:07:9d:2c:b9:11:c7:d5:2d:43:62:56:64:
db:af:27:80:36:8f:f2:10:e7:9a:88:f4:02:91:ea:
99:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:EF:FA:DC:FA:5E:72:49:81:76:90:79:45:CC:BA:2C:A0:8C:E1:C7
X509v3 Authority Key Identifier:
keyid:4A:B6:6E:E3:72:C1:7A:F7:E9:88:50:BE:54:F8:A7:74:44:90:0F:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/4AB66EE372C17AF7E98850BE54F8A77444900F94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AB66EE372C17AF7E98850BE54F8A77444900F94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7CrjYrup4TjMhDAFim5Duurf4byhrPhqofF8CCKhSFcp/0/323830343a336637383a3a2f33322d3334203d3e20323635383934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f78::/32
Signature Algorithm: sha256WithRSAEncryption
39:cc:06:a0:89:1f:b4:df:dc:1b:82:c2:80:b6:00:32:3e:a0:
44:e5:55:6f:dc:47:1b:7e:ca:ce:ef:ea:82:85:cf:79:be:92:
42:ad:3c:83:3a:a5:66:2d:94:47:8c:3d:c2:59:44:3b:66:49:
aa:ee:e0:4c:f6:2d:70:7a:bc:34:75:fc:d8:0d:a5:aa:e4:c8:
71:69:39:21:ba:d4:1a:e4:67:de:1a:ba:9c:50:36:d2:e6:9e:
ec:00:48:56:5e:5b:af:55:06:7f:a4:3b:c3:0c:e1:a2:45:d9:
9b:8e:a7:17:b0:c6:f2:eb:0e:32:30:ad:66:4e:95:d5:82:73:
ca:00:53:b7:5c:d7:36:b2:4d:4b:80:c1:21:3b:88:0f:2e:0f:
2e:fc:37:bb:f6:59:db:e6:6a:ae:d6:e9:d2:ad:97:22:f0:57:
85:21:17:ce:ba:9d:0d:7c:a2:eb:4d:7c:b3:1a:0e:f9:e1:5f:
b7:13:9b:b2:52:54:6b:66:e2:40:ed:7d:ed:3f:46:2e:61:e9:
05:aa:2e:dc:99:8c:4c:7e:a7:a2:52:57:6a:86:1a:79:2f:aa:
72:88:34:7f:57:02:a7:c8:70:95:d9:0d:0b:e1:b0:fd:5c:b9:
c7:75:ad:e6:5c:41:f1:fe:ac:0a:65:53:bb:90:b3:d3:af:6d:
54:75:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:33:12 2025 by rpki-client