Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa
File: 323830343a6439303a3a2f33322d3536203d3e20323033.roa (raw, json)
Hash identifier: QNFSmCud9ESuU9Qq0IbyzJ/FAVrlDDi+pQgSw9GKe1I=
Subject key identifier: EE:D9:1D:14:60:9C:80:F2:39:09:BB:9F:3A:F2:6E:50:49:D7:41:8B
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 78C9508729A1CC0D0E9C02A71EFAD4745A4A9E2F
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa
Signing time: Thu 04 Apr 2024 00:30:18 +0000
ROA not before: Thu 04 Apr 2024 00:25:18 +0000
ROA not after: Thu 03 Apr 2025 00:30:18 +0000
asID: 203
IP address blocks: 2804:d90::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:c9:50:87:29:a1:cc:0d:0e:9c:02:a7:1e:fa:d4:74:5a:4a:9e:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Apr 4 00:25:18 2024 GMT
Not After : Apr 3 00:30:18 2025 GMT
Subject: CN=EED91D14609C80F23909BB9F3AF26E5049D7418B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:40:4c:48:5f:23:5c:33:19:0a:d9:e7:a7:95:
bd:f1:41:24:b5:aa:93:37:a6:ea:08:e3:eb:bf:af:
01:01:43:34:10:8b:66:fb:cb:d0:73:61:01:40:d9:
77:bd:0a:6c:bd:d2:0d:27:96:49:9d:53:13:5f:6a:
6c:a0:3a:64:f5:fa:55:7b:b6:92:4f:e8:56:e7:a1:
53:51:3f:05:e7:9d:b8:b0:cf:f0:15:30:7a:72:12:
c8:ee:07:6d:65:24:c7:af:fd:9b:bc:ec:58:19:73:
f4:9c:ca:af:4b:46:c6:5c:61:9c:41:fd:26:89:6b:
cc:4e:b3:b2:9e:aa:f0:30:c8:ba:24:bd:67:33:9b:
c4:94:e4:43:93:cf:53:3a:39:79:29:42:fe:04:a9:
b7:2f:15:39:63:b7:a7:4e:e0:9a:35:1f:30:c0:c0:
fd:d3:6e:6d:e5:0b:04:0a:06:57:ca:60:3a:cf:40:
fe:2f:d9:01:ba:f9:6a:4c:27:d6:02:68:4d:d2:77:
5a:be:41:7e:47:f7:63:ad:96:97:55:60:d9:3c:6c:
9d:04:2c:6e:ff:a7:c3:86:14:63:d3:47:42:0c:89:
8e:d4:e2:33:8e:a1:31:6b:ef:2e:a4:de:8f:13:da:
20:5a:c5:c4:75:73:cc:57:83:a9:3e:bf:83:5f:07:
b9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D9:1D:14:60:9C:80:F2:39:09:BB:9F:3A:F2:6E:50:49:D7:41:8B
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d90::/32
Signature Algorithm: sha256WithRSAEncryption
00:6b:47:d1:95:4e:3f:aa:19:91:14:f5:b8:05:88:57:4e:48:
17:6c:4e:4a:ba:c6:a6:dc:3e:0c:58:87:dd:32:0c:87:71:5c:
63:da:9b:66:c2:2a:72:8e:8c:fd:02:5d:a1:c7:4b:f8:c1:37:
70:00:8a:09:69:d6:24:c5:df:50:3e:81:47:cf:6f:d1:4d:59:
0e:78:13:c4:5c:10:25:0f:1b:7e:a8:8b:aa:59:74:1b:57:e8:
f8:c2:c5:24:57:6e:81:22:41:5d:bf:f3:75:83:f8:85:0d:fc:
63:10:a4:fa:af:ae:bd:05:b6:d5:c3:1b:d3:ea:a3:f7:2b:a3:
74:b8:47:1a:58:26:ad:10:88:94:db:d2:df:2b:99:53:82:2b:
05:5a:67:fd:17:01:62:51:f7:cb:72:ff:5d:49:48:42:6a:71:
b0:fa:44:aa:3f:cc:eb:44:8c:be:a3:80:86:d8:a6:d0:7f:f4:
77:d3:4b:77:e2:65:f4:8c:0a:14:82:1d:a8:68:c3:93:6e:c8:
43:f3:41:29:86:c1:66:dc:9f:e6:25:4c:b3:a2:0f:0a:34:31:
0c:aa:9a:4f:3b:9d:b6:f6:6f:22:62:20:8d:b0:8a:16:5a:ca:
f3:e7:bf:41:49:f1:99:eb:88:c4:17:8c:3f:e3:6c:b3:e3:55:
cc:aa:56:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:21:34 2025 by rpki-client