Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
File: 323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa (raw, json)
Hash identifier: G2GF2kolgqoQvfNTndqQogl/oR+zFS3PfzHTsbIB/I8=
Subject key identifier: A1:BC:53:AE:FF:48:C2:6E:00:8E:5E:ED:2E:CE:BA:01:7C:47:30:9B
Certificate issuer: /CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Certificate serial: 4B5234EFB29397241B08778E14F5BB0E8E3BA9F7
Authority key identifier: 1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
Signing time: Tue 14 Jan 2025 15:49:03 +0000
ROA not before: Tue 14 Jan 2025 15:44:03 +0000
ROA not after: Tue 13 Jan 2026 15:49:03 +0000
asID: 265393
IP address blocks: 2804:3364:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:52:34:ef:b2:93:97:24:1b:08:77:8e:14:f5:bb:0e:8e:3b:a9:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7
Validity
Not Before: Jan 14 15:44:03 2025 GMT
Not After : Jan 13 15:49:03 2026 GMT
Subject: CN=A1BC53AEFF48C26E008E5EED2ECEBA017C47309B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:5c:c3:2b:c6:db:91:02:22:04:1f:89:dd:ea:
13:93:d0:ca:c7:57:ea:d8:05:46:f5:90:cb:7f:19:
c1:36:d0:61:0e:7d:ea:d0:6d:c0:fd:7b:fe:77:ce:
92:c0:0b:37:ba:94:2b:b2:74:a8:0a:5c:4c:89:1a:
0f:c2:f7:b0:63:78:38:db:9e:4b:55:92:77:8f:7f:
e0:41:c1:21:3a:16:4d:2b:25:cf:86:59:f1:04:3f:
96:30:2b:11:b2:41:3c:e3:60:6d:01:3d:2f:41:21:
ad:95:86:7a:f2:39:17:7e:93:1b:46:c1:3b:48:dc:
09:44:85:de:a4:90:26:b8:0e:6d:66:37:f0:4a:4c:
1f:86:0d:4b:bb:3e:2a:73:65:2d:b8:a9:3d:df:5a:
78:a1:8c:1a:f7:08:84:a7:77:ef:17:95:53:a4:96:
58:a0:90:9a:cd:fd:d1:86:d4:e7:6b:28:cd:da:35:
bf:92:94:d3:c9:0b:19:22:c3:a9:62:4d:b6:1f:47:
40:b1:b9:6e:e0:63:12:a6:17:03:05:50:9d:95:4e:
37:b6:e9:64:f8:3e:9c:48:e4:2e:94:b9:f9:66:24:
3b:a0:f0:04:e1:bc:a0:59:ff:0b:d5:11:74:08:66:
7e:94:ee:71:4e:d4:1c:ea:67:a8:2f:a7:ef:b5:e2:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:BC:53:AE:FF:48:C2:6E:00:8E:5E:ED:2E:CE:BA:01:7C:47:30:9B
X509v3 Authority Key Identifier:
keyid:1A:11:9F:EF:97:A1:58:C2:B8:C8:60:79:AD:0C:32:2A:8E:8A:AF:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A119FEF97A158C2B8C86079AD0C322A8E8AAFA7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7Vhv5c4ZEhaf8ALZANuRtpGjrjY5n3dE4T2xvk6gvqrL/0/323830343a333336343a3530303a3a2f34302d3430203d3e20323635333933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3364:500::/40
Signature Algorithm: sha256WithRSAEncryption
7d:ff:0d:d8:01:4b:d6:6c:c4:eb:c3:9f:3a:82:d7:20:00:d4:
4b:8d:ff:fc:07:f2:b9:c8:0a:3e:63:4d:bf:f8:2b:d8:1e:d1:
06:3e:c1:8f:59:b6:88:e3:0f:e6:ec:67:d0:62:d7:86:b4:71:
f2:00:ba:d6:80:c5:00:c3:bf:e2:87:e1:33:23:69:90:f9:c8:
ab:be:28:c4:f4:ce:3b:7d:1b:5a:fc:2c:55:96:c4:0e:57:4b:
0f:2f:e5:eb:26:73:35:5f:86:1c:6a:40:0b:7a:4d:87:67:50:
31:01:3e:ae:05:dd:e4:4a:b9:39:99:51:fc:91:31:d0:c4:5a:
d0:d5:c4:d7:39:3e:64:49:73:61:39:22:3d:81:88:69:38:67:
87:fb:63:e5:a2:a0:c7:8c:34:53:e9:79:f0:79:22:22:d0:12:
8c:4d:4e:91:78:65:4b:fe:b0:14:59:05:25:3c:6f:df:95:e5:
f8:5f:4d:57:cd:e5:84:9c:79:c5:58:84:80:92:67:7c:2f:db:
b6:ba:e6:8f:cb:79:aa:a5:9f:df:9c:10:88:d3:bd:b9:4b:7e:
e9:bd:dc:18:d7:60:8d:44:06:2d:d5:8b:59:75:6d:35:1a:a6:
7a:a2:e7:db:ce:d2:59:e0:ab:42:c5:35:65:ab:5b:bd:8a:8b:
7c:f2:dd:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:00 2025 by rpki-client