Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
File: 323830343a343031343a3a2f33322d313238203d3e20323635393333.roa (raw, json)
Hash identifier: s5G6Z9jrVoevflU84bZ+yzQEF2Gyexpuwo5a+N4Yd7w=
Subject key identifier: 28:86:59:B0:B5:B2:59:02:49:5D:E6:B3:88:21:F9:53:45:96:5C:5C
Certificate issuer: /CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Certificate serial: 48A205C7F7C54978688B6E298CFDD1CE37DF0579
Authority key identifier: 11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
Signing time: Wed 22 Jan 2025 14:57:08 +0000
ROA not before: Wed 22 Jan 2025 14:52:08 +0000
ROA not after: Wed 21 Jan 2026 14:57:08 +0000
asID: 265933
IP address blocks: 2804:4014::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:a2:05:c7:f7:c5:49:78:68:8b:6e:29:8c:fd:d1:ce:37:df:05:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11CAB655737FE08C031052B869B67F7F82CCE9CC
Validity
Not Before: Jan 22 14:52:08 2025 GMT
Not After : Jan 21 14:57:08 2026 GMT
Subject: CN=288659B0B5B25902495DE6B38821F95345965C5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5e:62:8b:a4:ab:7c:e0:e5:aa:46:da:37:1d:
e4:bc:65:14:90:4e:14:4a:5b:53:9e:c8:6c:60:73:
9c:79:35:4d:12:89:70:dc:48:2a:ca:3f:6e:5d:28:
31:b4:68:55:2a:69:89:06:5b:2c:07:b2:ce:c6:13:
af:4a:5f:f2:bc:a9:b5:5f:d3:bd:2f:6e:7b:19:2c:
70:dc:69:58:d7:50:85:92:96:1d:6e:df:18:ea:60:
4b:e3:03:10:1a:8c:d9:82:39:4e:2e:62:4d:c2:33:
21:70:08:fe:0d:c9:e2:d4:9d:43:1f:bb:b4:5b:39:
eb:30:66:33:97:30:9c:7b:6f:b2:3f:da:b2:f9:7d:
3d:8e:ed:97:2d:df:9b:ba:54:b0:9a:ef:d7:98:e2:
02:16:b0:11:9f:d5:5b:74:a6:27:1f:04:cd:0b:ff:
77:4a:ea:e5:22:e5:a0:ca:c2:67:df:e5:17:04:87:
48:a9:51:8d:c2:dc:4c:c3:52:f9:c7:7e:0c:95:d1:
34:fa:db:04:08:d7:99:5a:e7:bc:da:28:3e:6f:dd:
28:15:e1:ad:a2:e3:aa:70:d9:02:fc:de:b2:f8:f7:
36:d3:7c:b8:5e:b5:4e:93:f8:4c:8f:bc:09:ab:04:
ba:a1:1e:b4:1a:0d:37:da:58:ba:e3:08:51:be:59:
b7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:86:59:B0:B5:B2:59:02:49:5D:E6:B3:88:21:F9:53:45:96:5C:5C
X509v3 Authority Key Identifier:
keyid:11:CA:B6:55:73:7F:E0:8C:03:10:52:B8:69:B6:7F:7F:82:CC:E9:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/11CAB655737FE08C031052B869B67F7F82CCE9CC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11CAB655737FE08C031052B869B67F7F82CCE9CC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/0/323830343a343031343a3a2f33322d313238203d3e20323635393333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4014::/32
Signature Algorithm: sha256WithRSAEncryption
92:46:d6:7a:4c:7e:dd:7e:bd:24:ae:e1:4a:b1:d5:65:b4:75:
d0:a8:e3:05:a8:a9:aa:9e:43:8b:b9:ee:34:f5:2e:aa:2b:41:
4c:53:a9:5a:a6:00:a4:25:fd:e7:08:33:af:0e:70:66:a9:87:
72:a2:49:05:a6:bc:89:de:30:eb:5f:c5:70:6e:73:b8:fd:8c:
86:a6:28:61:44:ec:fd:45:6f:b1:ad:ab:c2:b6:20:55:48:c1:
95:2e:4a:56:32:73:c1:9d:aa:21:42:b9:68:9c:5b:0e:c8:88:
3a:55:06:5f:d6:64:5f:07:fd:b5:b3:23:70:1c:82:81:92:91:
65:65:86:dc:ac:91:dc:e8:d4:78:3e:f0:8d:a0:be:42:3f:7a:
a1:66:d5:fb:dd:1c:4d:46:1d:90:4e:70:36:9b:c3:8f:92:b8:
17:da:31:4f:46:1d:d8:e7:95:35:da:26:d8:b1:04:e0:c3:cc:
e7:5f:41:aa:01:22:60:33:d9:99:c2:83:de:c1:ef:fb:41:7b:
bb:77:3d:1d:3a:07:5d:7f:19:0e:9d:dd:60:bd:23:05:ef:80:
34:19:46:9e:13:d2:6e:23:f4:ac:b7:60:63:e9:b0:a8:9b:ff:
1c:e8:9f:14:30:d8:d0:9a:7c:15:4d:9e:73:0a:70:c5:98:de:
19:80:de:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:45 2025 by rpki-client