Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa
File: 323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa (raw, json)
Hash identifier: jRtXyIUqwhEs3fAyNEUmav/tsgXyh0U+oDJA+F03eok=
Subject key identifier: AF:7E:51:1B:48:05:EB:4C:39:30:B6:C4:69:46:05:9F:CF:64:22:F0
Certificate issuer: /CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Certificate serial: 46C76B811B1FDD0EA85ADDDB1D8F3AA3E6080ACF
Authority key identifier: B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa
Signing time: Mon 15 Jul 2024 13:42:24 +0000
ROA not before: Mon 15 Jul 2024 13:37:24 +0000
ROA not after: Mon 14 Jul 2025 13:42:24 +0000
asID: 262729
IP address blocks: 2804:16d8:6800::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:c7:6b:81:1b:1f:dd:0e:a8:5a:dd:db:1d:8f:3a:a3:e6:08:0a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017
Validity
Not Before: Jul 15 13:37:24 2024 GMT
Not After : Jul 14 13:42:24 2025 GMT
Subject: CN=AF7E511B4805EB4C3930B6C46946059FCF6422F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:65:9c:78:7d:35:c0:df:24:e2:56:6d:f1:
7a:25:3d:9e:9c:13:57:4d:93:f1:2c:67:6b:ca:43:
fb:76:8e:3c:a0:5d:b5:4a:8e:a5:41:24:b0:46:a7:
d8:3f:da:33:99:53:64:01:a7:1b:87:7b:82:8a:54:
ab:4c:3a:88:74:41:35:83:b4:1f:4a:dd:6f:8e:c6:
18:48:20:b4:d2:b1:54:96:e3:09:cd:5d:14:63:aa:
35:ba:c6:a1:ad:53:c8:d2:28:b7:9c:cb:9c:be:17:
a2:b6:ff:a6:7d:2e:28:d5:00:7a:02:b4:c4:69:2f:
f0:35:5c:c1:d1:92:b8:92:34:27:0b:f8:ce:76:76:
e4:63:02:19:b0:9f:32:ea:7f:8b:d3:1c:e3:aa:ac:
d3:62:46:05:18:72:cb:5f:94:e5:45:46:1f:a0:2b:
81:21:9a:9c:57:46:7f:b5:af:60:a8:39:fc:28:fd:
3d:e7:54:8a:93:03:19:d3:2e:8e:fd:41:98:f4:90:
f1:14:01:8f:04:22:60:0f:b3:f1:e9:30:f1:c6:e0:
52:55:a2:15:b8:67:95:59:ec:88:51:e4:bf:24:13:
b0:e8:20:35:aa:2d:1b:c0:f6:92:cd:30:87:60:cd:
65:3c:c6:33:dd:94:e0:09:2f:e2:e8:1a:ff:12:e5:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7E:51:1B:48:05:EB:4C:39:30:B6:C4:69:46:05:9F:CF:64:22:F0
X509v3 Authority Key Identifier:
keyid:B9:DB:1B:58:DC:D4:6C:2E:74:6D:8D:DE:AA:7F:49:83:31:DD:B0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB1B58DCD46C2E746D8DDEAA7F498331DDB017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D5fPEUrca3mQUoa5ULKzF5PzY7YdLUJGWm4bG1teFg9k/0/323830343a313664383a363830303a3a2f33372d3337203d3e20323632373239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:16d8:6800::/37
Signature Algorithm: sha256WithRSAEncryption
4f:ca:2d:96:89:ae:36:3a:fc:57:a5:75:27:c9:c4:7c:9c:f2:
27:90:53:44:5e:1a:75:52:90:35:a9:58:84:79:4a:56:b9:fc:
43:65:26:28:09:a1:59:86:e4:1c:b8:c1:13:63:e7:eb:00:c3:
d2:dd:d8:89:0b:9c:6f:9f:ba:98:16:e0:db:3b:ea:bd:fc:e4:
25:6b:87:fb:f1:3f:e5:5f:1b:25:9a:44:0b:22:6a:f1:9b:5f:
92:35:52:aa:08:4d:55:9d:db:e7:c1:69:5b:72:f2:45:e4:06:
22:f4:64:e6:47:df:ec:ba:d0:36:a1:5b:fe:d5:ca:75:d5:0e:
61:b5:5b:ac:a4:97:c4:7a:5d:e6:23:aa:90:a8:a7:cd:79:88:
a1:73:69:8a:6e:ce:8d:bd:f0:42:d1:73:5d:19:9b:5e:2f:6b:
7d:eb:b2:ae:cb:70:03:37:14:cb:33:f0:d1:2c:e9:11:77:9f:
d0:66:31:04:a3:17:51:f6:c7:d6:4f:14:09:32:1a:2a:8a:bf:
03:ff:32:cc:63:0b:c4:d1:12:c3:5e:59:ca:73:67:ec:b9:58:
17:e0:3f:d8:63:3f:ac:8b:b2:0e:28:1c:4e:a4:c9:4c:eb:07:
23:02:6f:77:55:8f:0d:37:c8:e0:27:a5:15:93:b4:d9:a4:f3:
40:2d:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:38:08 2025 by rpki-client