Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa
File: 323830343a316363383a3a2f33322d3332203d3e203631363735.roa (raw, json)
Hash identifier: h0sAlKSBteG5e9UspnLUj4TrJvUGL24yn03JgzFpoR0=
Subject key identifier: 16:0B:95:A2:AA:E8:84:64:26:A7:AF:67:6A:30:B8:8A:64:48:E7:CD
Certificate issuer: /CN=117560A27F42885C52E66148007C2989B0339DAD
Certificate serial: 2E88D9F6B96FDD29B0A5C29A940100FAB5479FBD
Authority key identifier: 11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa
Signing time: Sat 25 Jan 2025 16:15:23 +0000
ROA not before: Sat 25 Jan 2025 16:10:23 +0000
ROA not after: Sat 24 Jan 2026 16:15:23 +0000
asID: 61675
IP address blocks: 2804:1cc8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:88:d9:f6:b9:6f:dd:29:b0:a5:c2:9a:94:01:00:fa:b5:47:9f:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=117560A27F42885C52E66148007C2989B0339DAD
Validity
Not Before: Jan 25 16:10:23 2025 GMT
Not After : Jan 24 16:15:23 2026 GMT
Subject: CN=160B95A2AAE8846426A7AF676A30B88A6448E7CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:d5:bf:05:cf:47:0e:06:79:37:3e:e4:bf:
c9:3c:20:e7:39:40:f3:9a:d3:36:50:4a:58:67:59:
b5:7c:93:6e:d8:ad:53:26:c0:44:a3:3d:cf:b7:fc:
c6:42:4a:d1:49:ee:91:ad:54:c7:ca:94:52:d3:a2:
33:c3:8d:c5:71:c5:b3:7b:36:d5:94:25:53:07:3f:
9f:0e:5c:0e:b3:ac:da:8b:02:4a:67:e4:38:9d:b0:
6a:24:e4:02:40:96:b0:6b:6d:63:f2:93:71:52:4a:
8a:8b:a2:ff:07:59:b2:5d:79:16:19:82:a3:6f:f3:
22:be:c8:ee:b3:84:99:7c:7b:38:a1:1f:7c:37:e8:
86:c6:00:3f:d9:6e:d6:51:59:78:a5:02:14:f6:36:
76:b7:8c:7b:49:3e:69:24:3a:09:41:f2:c3:ec:d0:
42:72:16:62:76:bd:11:10:f5:98:4d:31:d1:2c:9c:
f3:f8:7f:82:3f:0d:4d:bc:29:68:e1:b2:e6:bc:d9:
8b:29:be:03:2b:78:c3:b4:c5:9a:f2:3e:0b:e2:0a:
fd:21:33:a5:30:3a:28:c9:c5:a4:80:17:fc:02:6c:
e2:2a:42:3b:73:a2:21:bb:25:98:3c:f3:ae:e4:33:
68:15:3d:30:ca:b8:96:53:71:bf:7f:22:8f:fd:79:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0B:95:A2:AA:E8:84:64:26:A7:AF:67:6A:30:B8:8A:64:48:E7:CD
X509v3 Authority Key Identifier:
keyid:11:75:60:A2:7F:42:88:5C:52:E6:61:48:00:7C:29:89:B0:33:9D:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/117560A27F42885C52E66148007C2989B0339DAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/117560A27F42885C52E66148007C2989B0339DAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XTRhcLGjncW9Jt58nqtkpZcfovoduUaWbaZGNzGBT5W/0/323830343a316363383a3a2f33322d3332203d3e203631363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cc8::/32
Signature Algorithm: sha256WithRSAEncryption
28:89:30:95:94:6a:6a:e3:78:c6:64:21:e3:b2:a6:65:30:91:
29:75:ee:b5:c0:a1:cf:ab:34:8e:fa:97:9e:92:1a:a0:63:c5:
fb:db:9b:29:19:81:f4:c4:87:d5:8d:05:3d:26:9b:8f:51:f6:
3e:34:15:c4:69:ae:7b:16:f4:d4:e5:14:1b:87:ab:de:49:7b:
33:29:e9:a5:f5:9e:c1:96:26:38:63:47:c6:73:3b:a9:ab:97:
57:eb:ee:9b:9a:23:66:23:1f:54:e9:55:d4:1c:6a:e7:c7:65:
75:a6:b7:39:e7:1d:9a:6f:ff:88:d8:03:8e:96:65:db:48:5c:
e9:b2:f3:3f:60:0f:a0:6f:c7:3f:be:56:46:0a:34:a6:92:5d:
dc:af:6a:97:39:1c:8e:be:20:79:36:97:cb:34:85:71:c7:84:
f8:47:db:65:6b:cf:b6:9c:3a:27:74:b6:67:19:17:c7:75:2e:
03:78:2e:cf:e0:35:9b:58:e7:c9:2d:0c:fe:d1:0b:90:95:5b:
71:1a:c9:ec:b7:55:3e:13:a0:c9:37:f4:76:ad:71:f2:71:ae:
53:cd:a2:71:19:84:a8:c5:6e:aa:09:ce:2e:a3:50:54:eb:a6:
b6:37:10:8f:97:89:6f:b1:85:d7:1e:88:56:89:cf:5c:b0:30:
53:99:95:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:05:33 2025 by rpki-client