Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
File: 323830343a316332303a3a2f33322d3332203d3e203631363339.roa (raw, json)
Hash identifier: gQGmsBHvSCK/HVD+QEmh63lMrViM5+yNYPTckHGVJEk=
Subject key identifier: 49:B0:B2:48:AB:DD:FD:02:B9:BF:44:51:8D:AD:54:82:2E:03:9A:8B
Certificate issuer: /CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Certificate serial: 344FE87E937AF034B45C40DE075CF85B3508CF4F
Authority key identifier: 0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
Signing time: Wed 03 Apr 2024 18:32:16 +0000
ROA not before: Wed 03 Apr 2024 18:27:16 +0000
ROA not after: Wed 02 Apr 2025 18:32:16 +0000
asID: 61639
IP address blocks: 2804:1c20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:4f:e8:7e:93:7a:f0:34:b4:5c:40:de:07:5c:f8:5b:35:08:cf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B
Validity
Not Before: Apr 3 18:27:16 2024 GMT
Not After : Apr 2 18:32:16 2025 GMT
Subject: CN=49B0B248ABDDFD02B9BF44518DAD54822E039A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e0:58:96:45:15:71:44:ac:ca:53:c0:ac:b8:
aa:3e:d2:29:d2:71:90:b1:9f:93:ca:9e:e6:79:53:
82:e4:ac:ad:3d:cd:ed:da:a8:39:b7:80:5f:4a:8b:
8e:3a:01:69:b6:5d:5c:fc:af:71:8b:25:d4:2e:be:
7c:62:e8:44:da:b8:0d:ff:ec:d9:73:05:39:36:c7:
0f:b6:ce:bd:d5:46:a3:62:4b:65:44:40:0a:20:44:
5a:4f:15:25:ac:5f:07:90:96:58:d5:06:08:bd:ce:
35:cc:c3:22:77:a3:7b:a7:c0:03:5a:65:b7:2e:b2:
f4:5a:db:76:9b:1e:32:7d:f7:5f:db:e7:5a:d5:d5:
29:08:9b:d1:13:ef:98:da:91:cd:88:21:3f:3a:b9:
a8:98:e9:78:6a:0f:66:34:82:3b:d8:8b:17:83:4c:
04:88:db:a5:fb:60:5c:7a:4b:b1:9d:30:a5:0a:f1:
96:4e:1a:8f:6f:69:0d:b6:50:f5:6e:5d:47:94:16:
3c:7d:8f:4c:e3:6f:7f:0a:b7:59:7b:88:02:71:bb:
ab:35:b8:38:f9:5a:30:99:a6:20:59:12:c4:8e:ac:
0d:fd:d5:d8:c1:d4:8d:be:2b:f7:5b:c7:55:0c:96:
0c:96:04:95:03:0e:e3:b7:99:23:ca:42:2a:60:2a:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:B0:B2:48:AB:DD:FD:02:B9:BF:44:51:8D:AD:54:82:2E:03:9A:8B
X509v3 Authority Key Identifier:
keyid:0D:8D:D1:F1:99:2D:55:A1:0F:EA:85:FA:E3:F9:5E:CE:F8:7D:E4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D8DD1F1992D55A10FEA85FAE3F95ECEF87DE42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A1MCPyAycBNffv939xzqVAByTuo7RBjFxtH2n1vxq2vE/1/323830343a316332303a3a2f33322d3332203d3e203631363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c20::/32
Signature Algorithm: sha256WithRSAEncryption
83:90:48:a6:4f:6d:1c:7b:45:9b:cb:47:ef:64:43:fb:31:70:
ac:c2:71:35:94:d9:b2:21:3e:84:1c:93:3a:f6:be:35:40:16:
08:08:dc:12:bd:60:96:d8:19:68:5f:29:87:a4:39:cc:9b:7f:
ce:78:a3:51:13:f9:2a:6e:6e:36:f7:70:ab:f2:f7:30:45:2c:
62:9e:02:e6:22:64:9f:b3:11:98:18:1e:da:01:f9:d5:c5:e7:
39:20:f8:1e:c3:23:07:f1:6c:51:04:a5:8b:fd:e5:ac:29:f0:
6c:17:ce:c3:6d:7b:05:3f:5e:1a:2c:6f:bd:3d:cd:e3:29:da:
76:2a:7f:46:94:cb:7d:2d:38:89:7d:e8:33:71:63:de:fa:e8:
f3:38:fe:3d:8a:d3:d4:7c:32:4e:0d:2e:81:d0:31:f8:af:92:
76:82:2f:09:e8:1b:d9:7d:46:46:f4:1b:13:97:9c:a9:a3:80:
fb:1e:46:b2:a3:a2:f0:3f:05:36:33:32:e3:a8:17:97:8a:44:
72:77:c6:ae:57:80:db:07:ff:3b:e8:89:b4:29:14:0b:94:35:
da:d4:2d:79:6f:74:82:d2:34:28:cd:0f:01:9d:18:4d:58:3d:
2d:b7:65:66:90:ce:90:29:0d:bf:83:83:64:0e:a4:71:4a:d9:
89:81:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 20:20:28 2025 by rpki-client