Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa
File: 323830343a326330303a3a2f33322d3432203d3e20323635313837.roa (raw, json)
Hash identifier: RrHcCYXQ8Xp8vNv84YyfCnia5ExBbApKrg/hYtwt0GY=
Subject key identifier: A4:EE:47:6B:32:9A:D8:89:36:F4:8D:CD:49:C0:54:5B:07:84:40:8C
Certificate issuer: /CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Certificate serial: 3971393A665AF251103F336D528509B53906E42F
Authority key identifier: F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa
Signing time: Thu 23 Jan 2025 09:50:09 +0000
ROA not before: Thu 23 Jan 2025 09:45:09 +0000
ROA not after: Thu 22 Jan 2026 09:50:09 +0000
asID: 265187
IP address blocks: 2804:2c00::/32 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:71:39:3a:66:5a:f2:51:10:3f:33:6d:52:85:09:b5:39:06:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F455D0BE5138AE552B4857270EED2A7CE5B5C6F2
Validity
Not Before: Jan 23 09:45:09 2025 GMT
Not After : Jan 22 09:50:09 2026 GMT
Subject: CN=A4EE476B329AD88936F48DCD49C0545B0784408C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:79:76:f1:ea:60:c1:7a:ed:1c:e6:10:f9:
ee:fe:05:3a:7f:7c:fd:c6:01:6d:bc:ec:94:a0:3b:
09:3e:dc:66:6c:80:f4:14:3a:ff:45:48:99:9e:0b:
bd:25:5b:24:f2:c3:4b:9d:a8:34:5a:59:61:22:0d:
42:8c:04:cd:7f:f9:f3:8e:8a:53:cf:b5:d3:2f:9c:
21:3a:13:d8:2a:70:2f:fd:93:f9:63:d5:66:98:77:
d6:97:2f:fc:27:02:65:4b:09:21:b5:73:1d:8e:1f:
73:c2:b1:9c:c7:a5:2f:04:fd:4e:87:37:84:87:9b:
44:55:9b:55:fd:02:98:9a:0f:83:30:74:0f:54:e1:
f8:20:2f:90:6e:3f:83:b5:3a:f6:c1:89:b3:12:2f:
98:64:26:40:e3:fb:b7:32:af:fe:53:ff:ac:1b:c3:
79:a3:85:15:30:04:66:7e:47:a0:d1:d8:79:8c:20:
b2:52:4a:25:4b:e8:24:0c:7a:74:e2:68:b2:8d:db:
4f:cc:59:cb:ce:19:33:60:b8:45:f5:88:e3:ba:47:
6e:87:17:a5:70:b8:ea:d2:67:2d:1b:54:f5:72:f1:
0e:a9:a4:0a:f1:e4:b0:fe:98:e8:10:3e:b8:ef:81:
26:6f:72:c5:f8:28:bb:79:45:93:a1:13:77:8a:50:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EE:47:6B:32:9A:D8:89:36:F4:8D:CD:49:C0:54:5B:07:84:40:8C
X509v3 Authority Key Identifier:
keyid:F4:55:D0:BE:51:38:AE:55:2B:48:57:27:0E:ED:2A:7C:E5:B5:C6:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F455D0BE5138AE552B4857270EED2A7CE5B5C6F2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D7FHQ7bY37VxVJo3dEVjpPapxpbzHkMLgQKTznGbQaxb/0/323830343a326330303a3a2f33322d3432203d3e20323635313837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2c00::/32
Signature Algorithm: sha256WithRSAEncryption
03:f8:3b:61:49:85:27:b3:c8:a0:0a:af:87:37:5f:16:4d:91:
74:3c:11:1e:14:cc:fa:89:46:e0:9d:82:53:a9:2a:2f:fe:c6:
63:8b:ff:08:1e:3a:3a:0f:aa:ce:b8:2c:4a:62:a5:86:59:d5:
54:69:f4:e9:90:30:d3:49:a0:08:62:7e:39:32:b1:ed:4c:d3:
c5:a2:50:73:b0:96:b6:9f:c1:32:89:c4:39:92:76:50:a9:cd:
0c:86:92:2a:e1:25:76:c4:0d:b2:b4:3f:9e:a2:b8:95:ae:c5:
36:15:1c:5b:9d:73:8e:dd:6e:24:c9:49:5c:a9:35:f1:fb:5a:
5f:11:4a:37:3b:3a:97:47:bd:c6:40:8d:8b:2b:c5:21:bd:c5:
1c:8c:a1:89:22:a7:2d:fc:2a:5d:69:ef:0e:f6:b0:09:58:b7:
9c:bb:81:fa:fa:c2:ff:5d:25:86:b6:1f:3c:69:ca:19:ad:7a:
b4:f9:b1:c1:06:90:e6:fa:27:21:38:be:c3:07:62:bf:38:2e:
f7:ec:5d:2a:c2:28:70:9d:34:28:a3:1a:ba:3c:db:98:a6:53:
c5:57:a1:50:e8:57:e5:33:d2:60:c5:5c:03:3a:55:11:86:7b:
ed:59:1b:08:58:6d:38:4e:c3:97:fc:0b:5f:f9:fd:d2:de:91:
31:75:2d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:24 2025 by rpki-client