Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
File: 323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa (raw, json)
Hash identifier: MdMCceHGJYbhOoiFGurHQbOKGX6dNWGx70e77TWs67c=
Subject key identifier: CA:F5:4D:22:18:7A:19:D0:2B:D9:47:A7:D5:99:B9:F5:7E:BA:BF:6E
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 2444ED1B9DDA1DC375056CB3E9BA7F22863AE59F
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
Signing time: Thu 04 Apr 2024 04:37:46 +0000
ROA not before: Thu 04 Apr 2024 04:32:46 +0000
ROA not after: Thu 03 Apr 2025 04:37:46 +0000
asID: 28210
IP address blocks: 2804:56c:2120::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:44:ed:1b:9d:da:1d:c3:75:05:6c:b3:e9:ba:7f:22:86:3a:e5:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Apr 4 04:32:46 2024 GMT
Not After : Apr 3 04:37:46 2025 GMT
Subject: CN=CAF54D22187A19D02BD947A7D599B9F57EBABF6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:9f:84:b5:3c:e7:a0:27:bc:72:b8:36:bd:b0:
ad:b5:17:0b:0c:e8:eb:3f:3c:1a:ed:d2:9b:50:bf:
0b:0d:92:2a:06:bd:21:38:47:dd:46:18:a1:01:54:
86:ac:41:0c:c5:e2:9c:23:a3:52:dd:65:cf:4f:14:
5c:dc:83:df:da:b2:6c:55:6d:03:2b:92:27:d6:e9:
9d:6e:01:27:86:57:05:e1:d9:ae:32:70:2b:cd:5f:
76:09:7d:e2:42:0e:0e:ce:5b:ad:b7:71:8b:31:27:
24:20:1b:bd:86:fe:23:94:41:b8:9c:2d:6f:66:a2:
57:07:ac:cd:55:aa:07:11:a6:d8:e0:6b:a5:9a:4c:
4c:8a:42:da:ad:53:ce:4f:6b:90:31:02:75:98:b8:
d8:6e:2e:5f:f8:ba:8f:18:d8:c4:5e:9c:50:4b:4c:
2e:7e:e8:92:c3:9f:d1:fb:94:9b:9d:e8:c7:6e:65:
cc:97:09:d7:88:48:a4:1b:4c:25:95:77:a8:c6:8a:
2e:34:fa:98:20:55:55:4a:e5:72:15:d8:1f:81:88:
d7:af:82:1f:6c:53:dd:0c:c3:10:6f:94:b5:b0:ee:
9c:0d:43:26:04:a3:22:05:24:7e:56:4b:1f:e9:3c:
14:0b:07:14:94:a9:9f:f9:76:58:c8:e1:20:30:6f:
35:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F5:4D:22:18:7A:19:D0:2B:D9:47:A7:D5:99:B9:F5:7E:BA:BF:6E
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a323132303a3a2f34332d3433203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:56c:2120::/43
Signature Algorithm: sha256WithRSAEncryption
21:b0:14:fc:f5:ee:71:09:a4:43:fc:be:11:d2:24:8d:fd:9c:
da:4d:6a:c9:33:2b:0d:04:ba:ad:b6:1d:58:b4:6e:dc:37:6e:
d8:e0:9c:e0:f1:4b:c2:fd:19:4a:7a:9a:5f:69:da:6e:8d:f6:
32:57:b7:63:d0:90:41:76:a0:13:f7:f2:15:6a:8e:d3:c0:29:
4a:67:a3:c3:22:1e:c2:b5:92:4c:62:b8:b5:a6:a2:5f:21:cb:
4e:8c:2f:9a:9f:f7:c4:19:d2:e6:fe:44:74:b5:a3:a5:4e:51:
d9:80:27:fe:0e:07:b8:fc:21:b8:82:dd:78:4d:f7:47:83:1c:
e8:ce:12:f3:45:8a:da:8c:cc:e4:be:bd:19:3a:a7:94:bb:45:
7c:c8:15:6e:eb:0d:b7:96:09:7c:fd:89:d6:30:6d:cb:31:f2:
9b:e6:4d:0f:1c:b5:23:dd:7f:d8:46:58:b2:e4:2a:8d:a9:1c:
b8:fa:f0:8e:b7:0d:46:05:9d:67:43:c7:e7:b6:f6:f8:ac:2f:
6d:1a:07:c2:32:d7:bc:95:07:fe:de:ef:ce:8c:ad:98:ed:97:
bf:df:d4:55:9c:d0:62:fb:6a:4a:8f:41:2e:65:90:4a:1a:1a:
48:96:c4:a7:e9:c5:be:e2:5f:df:7e:58:a2:aa:88:c3:be:ed:
18:96:71:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:05:33 2025 by rpki-client