Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa
File: 323830343a333864383a3a2f33322d3334203d3e20323636353035.roa (raw, json)
Hash identifier: p2TxFej2cuAsJFUKPqYMeqD76Fbn74qb57RPthXetUM=
Subject key identifier: 16:A5:6D:E8:39:B3:65:ED:56:F1:CF:23:5F:45:22:CB:4E:F3:56:F3
Certificate issuer: /CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Certificate serial: 7DAA1D3FD729DF3C2A9DCAE75D2E7401DD132B99
Authority key identifier: CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa
Signing time: Wed 03 Apr 2024 18:30:33 +0000
ROA not before: Wed 03 Apr 2024 18:25:33 +0000
ROA not after: Wed 02 Apr 2025 18:30:33 +0000
asID: 266505
IP address blocks: 2804:38d8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:aa:1d:3f:d7:29:df:3c:2a:9d:ca:e7:5d:2e:74:01:dd:13:2b:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CA9F7609986EAF1A517249B9120F2B69069A604A
Validity
Not Before: Apr 3 18:25:33 2024 GMT
Not After : Apr 2 18:30:33 2025 GMT
Subject: CN=16A56DE839B365ED56F1CF235F4522CB4EF356F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:9d:7e:ae:a4:56:7f:32:a0:99:69:23:83:26:
c1:38:16:f4:00:7c:d6:02:89:1a:29:da:85:4f:8f:
60:87:07:e9:e5:e9:18:61:0d:d5:4d:47:c1:06:1b:
92:f0:2c:98:ca:4b:d7:4e:66:ef:67:a2:9b:35:ad:
44:7e:59:14:cd:f0:0d:4f:1d:82:dd:98:49:37:47:
f0:65:a9:52:29:ae:34:da:6c:5c:08:42:43:18:42:
13:b3:53:72:2e:14:fa:34:0f:b1:dd:4d:39:3f:17:
5f:a6:f5:f1:18:7c:03:cb:aa:61:54:10:56:ab:f2:
0f:7e:21:91:74:18:dd:0a:3b:2c:1d:b2:c6:91:e8:
88:ee:6c:32:02:00:17:0d:8d:57:41:6a:1e:51:ba:
31:84:91:6a:16:5f:b4:b4:85:ea:b6:46:3c:1a:ac:
d0:20:ff:07:b8:57:92:85:ba:ba:12:ff:4b:8a:a4:
6c:a3:c7:0b:ac:ac:68:fb:3e:41:cc:a9:c2:ed:bf:
d0:d8:a0:44:c0:ea:d4:07:2c:fc:61:ad:51:55:d8:
b6:5c:12:63:29:b6:be:7d:8a:8e:ff:c5:14:94:0f:
b4:da:57:ce:48:31:42:0c:d2:a9:27:ca:95:8c:f6:
f3:c3:3d:45:81:0c:6f:a4:5d:f8:90:0d:f9:af:64:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A5:6D:E8:39:B3:65:ED:56:F1:CF:23:5F:45:22:CB:4E:F3:56:F3
X509v3 Authority Key Identifier:
keyid:CA:9F:76:09:98:6E:AF:1A:51:72:49:B9:12:0F:2B:69:06:9A:60:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/CA9F7609986EAF1A517249B9120F2B69069A604A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CA9F7609986EAF1A517249B9120F2B69069A604A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A7ATUe4RD51YqLyvCGuHSvS63iAtrrXaExJjRjrv96Db/1/323830343a333864383a3a2f33322d3334203d3e20323636353035.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:38d8::/32
Signature Algorithm: sha256WithRSAEncryption
b8:8b:91:b1:aa:8e:59:a1:57:bf:7b:dd:95:2a:2f:8f:5d:15:
b8:3a:4d:d6:db:18:76:78:4a:f6:0d:25:01:e8:2e:20:dd:c5:
30:f4:5a:0b:92:f1:a6:6b:c8:de:89:d1:77:d3:93:0a:b3:5e:
04:69:9a:bf:52:a5:5e:b4:bb:2a:21:14:95:fb:b1:2d:d8:d0:
2f:ee:1f:90:9b:49:fe:70:45:f5:b3:7f:8e:11:3b:de:e7:e6:
a4:47:de:59:18:f1:ae:1e:1d:8b:c7:9f:f2:bf:fc:68:c6:6b:
92:2e:8d:43:79:08:f0:20:a7:b3:e9:c6:1e:30:83:40:0c:0d:
7c:91:12:e3:2b:7a:be:b3:17:5c:92:ad:1f:55:47:f0:ee:3d:
8d:41:03:07:d1:5d:9f:c4:84:3a:c5:96:f4:96:21:a2:ae:80:
bb:f7:51:27:87:ee:b8:30:50:09:b1:11:28:a7:df:54:c5:55:
aa:28:9e:b8:23:1f:d1:82:36:1d:fc:e1:eb:46:0e:fa:cc:63:
a2:4f:81:bb:12:7a:bb:f8:ce:f8:f5:24:ba:c6:90:40:d7:ae:
78:9e:3b:8a:80:af:0d:d8:2f:9a:c5:10:57:cb:63:8f:92:9b:
eb:a7:21:20:4c:6d:aa:15:4a:6a:24:8a:92:36:0b:68:b3:30:
ec:dd:1a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:45:12 2025 by rpki-client