Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
File: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (raw, json)
Hash identifier: APpYZh1bOsyUsTgN56ABlu9jHRKo/ALFTxeFdy83+wY=
Subject key identifier: 80:E7:23:B3:5C:D1:E0:F5:3A:77:45:76:B1:68:B1:AE:2C:BF:67:1C
Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial: 022D0CD32FC3320806C1D6C7C87B1C77BFF32A1A
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
Signing time: Thu 04 Apr 2024 20:53:31 +0000
ROA not before: Thu 04 Apr 2024 20:48:31 +0000
ROA not after: Thu 03 Apr 2025 20:53:31 +0000
asID: 267589
IP address blocks: 2804:43c8::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:2d:0c:d3:2f:c3:32:08:06:c1:d6:c7:c8:7b:1c:77:bf:f3:2a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Validity
Not Before: Apr 4 20:48:31 2024 GMT
Not After : Apr 3 20:53:31 2025 GMT
Subject: CN=80E723B35CD1E0F53A774576B168B1AE2CBF671C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:2c:58:cb:1c:1a:bc:52:33:e1:5e:37:26:
68:d7:3b:e5:54:cf:d9:41:ce:1e:68:2c:ee:32:de:
89:c7:6f:df:32:fa:e1:3a:a2:eb:a2:31:b9:d2:eb:
95:e4:58:1d:bd:6f:57:04:da:09:98:1f:a1:ab:e4:
7d:f0:18:0b:15:27:cf:e0:c6:c1:eb:f1:14:16:20:
ab:44:1c:12:45:cb:01:16:53:9c:34:8b:e2:82:e5:
58:10:6d:fa:f3:6c:a1:60:60:c7:f6:8c:d2:cc:8b:
c5:dd:10:fd:4a:a4:fa:a7:bb:6c:ed:27:89:90:4c:
0a:75:7a:e3:d0:8b:b3:55:35:83:01:6e:fd:82:7b:
f2:85:0d:79:93:3f:22:e5:48:ba:d7:8d:c7:bc:46:
e3:dd:14:6f:23:f2:cc:d6:db:11:25:e0:af:92:fa:
d6:2e:c6:e7:cf:52:02:75:91:59:af:ee:f0:8c:a5:
7d:24:b0:3c:f1:79:ef:a4:06:a3:63:30:a7:94:cc:
cc:58:cf:d5:7d:29:f1:66:98:20:8a:54:34:d3:2f:
51:35:a6:a8:29:d9:6f:68:53:f0:e6:0d:f0:80:c2:
67:1f:2e:81:b9:49:56:0a:d2:d3:0c:7b:38:da:94:
fe:fa:45:4c:43:96:23:bc:e8:ab:cd:bc:5f:26:e5:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:23:B3:5C:D1:E0:F5:3A:77:45:76:B1:68:B1:AE:2C:BF:67:1C
X509v3 Authority Key Identifier:
keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:43c8::/32
Signature Algorithm: sha256WithRSAEncryption
8d:0a:8d:90:ae:12:85:9b:2e:f2:e3:a3:8e:cb:58:6d:c0:bf:
38:ef:c4:2f:52:ae:32:4b:2e:37:17:69:78:f9:06:74:8e:ec:
50:a8:dd:57:ac:98:86:7a:07:19:72:9f:57:80:1c:93:06:1a:
64:a0:f6:0e:4d:6b:39:65:1f:67:73:82:58:82:dd:d6:2b:8e:
7a:f8:bf:b7:47:92:88:5e:91:23:8a:94:fa:0c:aa:e4:e0:43:
85:1b:fc:3b:c2:39:aa:e2:85:82:ae:da:23:1d:d5:4e:b8:7b:
c3:de:4c:e6:5f:71:b2:42:3d:3a:0b:87:a2:53:75:f2:23:e6:
10:cc:2e:b5:33:fa:ee:7a:53:a4:20:8b:72:78:66:82:2f:4a:
11:09:58:63:b1:56:0b:bb:4c:63:ae:cf:8d:cb:f2:9b:7f:c7:
3b:22:5f:74:54:3e:b1:03:28:99:9b:0e:d8:ba:81:bf:57:c5:
82:d4:cf:51:6a:2a:48:fc:6a:32:ba:80:0f:37:1e:fd:af:1e:
6c:09:80:89:46:67:c2:06:31:56:f4:62:f6:26:97:04:e3:c4:
8f:80:d3:41:ad:bf:8e:a5:b1:32:1d:67:e5:ac:8d:d3:5e:fe:
3a:4f:24:6f:4e:ee:0b:3e:a5:4c:54:32:f4:ad:50:e5:01:42:
56:39:ef:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:38:50 2025 by rpki-client