Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
File: 323830343a376562303a3a2f33322d313238203d3e20323731363431.roa (raw, json)
Hash identifier: c2i1lwNtBHwC6Epls9deH0WlsPvLAAKfUK6lmZNxPXw=
Subject key identifier: 0A:12:B6:E6:EF:18:39:72:1B:4D:A6:6E:F4:70:FB:12:7E:29:51:01
Certificate issuer: /CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Certificate serial: 59C94BD89ECE1F75EC7D07A4AF4E22706E0A2F31
Authority key identifier: D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
Signing time: Wed 03 Apr 2024 23:57:34 +0000
ROA not before: Wed 03 Apr 2024 23:52:34 +0000
ROA not after: Wed 02 Apr 2025 23:57:34 +0000
asID: 271641
IP address blocks: 2804:7eb0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c9:4b:d8:9e:ce:1f:75:ec:7d:07:a4:af:4e:22:70:6e:0a:2f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D
Validity
Not Before: Apr 3 23:52:34 2024 GMT
Not After : Apr 2 23:57:34 2025 GMT
Subject: CN=0A12B6E6EF1839721B4DA66EF470FB127E295101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:87:3c:fb:8b:94:5f:42:fa:3d:ad:fb:9b:23:
85:81:21:9a:86:02:20:e6:7e:50:56:96:88:0d:e6:
30:e3:53:b4:e3:04:b3:47:9f:06:26:61:f8:09:40:
2f:dc:9f:78:34:db:2e:c9:80:ab:90:27:06:1a:ee:
ac:2e:4e:62:07:80:93:c6:03:54:e4:42:a1:b1:97:
63:9c:a7:c7:90:44:47:08:ad:3b:05:6c:76:f1:e4:
f9:59:12:17:06:66:25:a2:2a:7c:34:65:85:6f:b3:
98:d6:e4:3e:75:6d:b7:c4:5d:08:e8:84:14:75:33:
ae:86:8b:9a:41:51:80:eb:84:4c:30:85:6e:9d:4c:
71:79:bb:6c:97:a4:73:c2:ed:db:59:da:85:d6:7a:
85:33:51:77:f8:83:99:9d:9f:90:ad:11:8c:6b:d2:
b8:88:53:28:4b:9a:69:c0:c6:9a:62:15:6e:20:5d:
7c:87:93:d6:e1:ea:f8:27:27:43:7e:b4:62:bd:9e:
84:c7:af:71:ba:78:10:bf:ef:11:78:04:15:86:7a:
9a:e9:c1:c6:3f:4a:4a:d3:58:1b:6c:90:69:25:3b:
ac:12:82:16:23:bc:3e:6f:58:d8:15:16:2f:4a:05:
b1:3d:c2:98:84:57:45:a5:fd:69:78:ee:96:00:a9:
24:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:12:B6:E6:EF:18:39:72:1B:4D:A6:6E:F4:70:FB:12:7E:29:51:01
X509v3 Authority Key Identifier:
keyid:D3:9D:AF:EF:E5:B3:C8:70:F9:E1:A8:BD:AE:92:4E:29:EF:1A:99:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D39DAFEFE5B3C870F9E1A8BDAE924E29EF1A991D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7RthyMNCFworcHWCvEwz5AFuiEjwRzbrD9DjmSfefZ5S/1/323830343a376562303a3a2f33322d313238203d3e20323731363431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7eb0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:ce:e0:4f:7f:d5:0f:a5:e7:45:c2:da:57:a5:c0:73:64:e2:
2c:eb:7c:1d:e6:02:28:8d:76:6c:ff:be:3f:38:cc:a3:13:90:
47:0c:26:90:a5:c9:d6:ab:24:95:ad:fd:2e:98:1d:64:62:74:
f3:26:13:5f:dd:5f:1a:69:86:f6:e2:c5:c9:bc:76:6d:3d:a1:
ce:f2:d5:86:95:72:cf:50:71:e0:cf:77:2d:1f:96:27:4e:3b:
53:54:97:4f:d8:a6:50:51:de:0c:52:eb:5d:e0:98:13:8d:8a:
20:7a:f5:1a:ae:77:f6:d8:51:bd:a2:ff:f4:a4:da:c4:99:6e:
dd:dd:d8:e5:6f:c6:7a:a9:4a:6a:d8:a0:74:3d:c7:92:c7:fd:
d6:1f:5d:df:c7:8b:3b:77:ae:1b:51:2b:9b:12:d7:b7:6a:62:
71:67:aa:35:cb:49:4e:95:ee:d7:ba:f1:19:67:6c:c3:15:4c:
03:84:56:30:9f:48:6d:a3:f1:4a:7c:f6:ee:cb:39:12:76:8a:
ea:1c:d0:73:8a:42:8f:d9:68:a0:38:3d:b9:ea:a1:a2:0a:6a:
2e:ed:2a:ef:fe:2b:d5:be:06:e4:f5:8b:ab:c0:c6:d7:44:69:
70:b0:85:8c:a1:f2:33:0f:d7:5d:8a:3a:be:2c:de:0a:98:a8:
ca:e1:02:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:18 2025 by rpki-client