Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
File: 323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier: hM7RiTy/3XICUGtb8UBMEuHjxIlIoL2zo6wNbX8QPhs=
Subject key identifier: 9D:0D:7C:E3:34:C5:FC:70:98:B9:5B:45:E3:79:20:A8:E6:24:75:6A
Certificate issuer: /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial: 2AC6741300FFE43D421F653629EFF338B0ABCABC
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
Signing time: Fri 31 Jan 2025 12:34:33 +0000
ROA not before: Fri 31 Jan 2025 12:29:33 +0000
ROA not after: Fri 30 Jan 2026 12:34:33 +0000
asID: 272182
IP address blocks: 2804:8330:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:c6:74:13:00:ff:e4:3d:42:1f:65:36:29:ef:f3:38:b0:ab:ca:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Validity
Not Before: Jan 31 12:29:33 2025 GMT
Not After : Jan 30 12:34:33 2026 GMT
Subject: CN=9D0D7CE334C5FC7098B95B45E37920A8E624756A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:93:b2:db:2e:69:8c:37:63:fe:b9:0b:db:c1:
b1:3f:7c:18:93:fe:31:c0:9c:62:11:a0:14:f2:0e:
1f:8d:72:b5:40:33:e1:cd:b5:a5:4a:ef:4a:27:22:
b1:41:a9:fe:ed:6a:35:9e:33:e3:fe:40:4b:db:5b:
d7:7e:e1:96:9e:64:12:8b:31:9f:63:5d:52:7d:02:
fb:da:6a:b8:17:1f:8f:21:ff:87:ce:3b:d5:65:94:
fa:d4:5d:6f:93:b5:0d:3b:6a:18:e6:b6:77:a0:7b:
a6:bc:f1:a7:e3:05:3e:53:34:5f:6e:bf:6f:11:82:
e3:3a:8f:7e:ce:49:e3:80:03:de:90:ad:e5:19:0c:
8a:44:21:36:ba:55:3a:1b:b9:c7:f6:12:22:94:68:
42:2e:ad:8f:66:80:bd:10:00:a4:8c:03:36:6f:84:
e9:82:b1:d6:92:34:a2:a7:0a:74:39:a4:f4:42:04:
39:44:e0:66:cc:60:50:b3:41:7c:73:b8:ad:57:f7:
51:f3:ca:6a:c3:4a:a3:bd:ff:1c:67:74:61:f6:0c:
c9:f2:52:ec:0f:60:6a:e4:51:2c:3f:6f:39:a3:f1:
36:7e:a5:e7:59:ea:b1:70:39:77:e6:31:3d:82:d5:
08:f4:82:88:5a:17:3e:89:d3:f8:d9:76:1b:d5:91:
94:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0D:7C:E3:34:C5:FC:70:98:B9:5B:45:E3:79:20:A8:E6:24:75:6A
X509v3 Authority Key Identifier:
keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a383030303a3a2f33342d3334203d3e20323732313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8330:8000::/34
Signature Algorithm: sha256WithRSAEncryption
ec:18:99:13:0b:76:a2:20:c7:46:e9:81:81:7c:d8:10:97:4d:
b8:d0:e4:0f:f7:17:85:d8:7f:4d:2a:4c:ee:77:8d:4b:2a:62:
98:17:a6:37:bb:6e:b0:ac:93:2e:6e:6d:d3:04:ea:43:b2:ce:
88:11:96:84:df:cd:26:2c:53:95:13:91:27:7a:86:17:9e:e2:
bb:34:91:6e:9f:29:ca:1a:8d:76:35:9d:44:bd:68:03:bc:e3:
8c:48:8e:0a:25:02:49:f6:2e:22:4b:26:8a:54:03:15:5b:3d:
82:58:93:60:c9:dc:7f:fc:a0:e7:22:d5:07:c5:0f:73:1a:79:
66:ab:7b:54:90:88:13:05:3e:30:2d:45:f7:7b:0e:e9:da:a9:
16:95:be:40:82:86:a4:af:17:60:5f:54:bb:6b:08:cf:e3:01:
05:84:23:74:be:6a:0e:86:d1:6f:83:3b:49:97:01:79:be:05:
95:ac:7b:72:e0:77:6a:cd:c6:55:0d:c2:17:8b:b5:30:bc:d0:
40:28:fb:f7:9d:b5:1f:4e:e0:b5:b9:6b:82:29:c7:eb:fa:ea:
dc:f5:4e:7c:6c:53:89:5c:71:02:49:1f:20:e1:c4:32:49:db:
6e:82:50:4f:0a:df:c8:bd:d2:a5:3e:1f:8d:68:ff:d3:0b:29:
c2:de:89:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:17 2025 by rpki-client