Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3438203d3e203631363034.roa
File: 323830343a373735343a3a2f33322d3438203d3e203631363034.roa (raw, json)
Hash identifier: 9HhCtQf/FhJjMSIQTTm0/zP5bOk+hCXNZvURg/qoUTE=
Subject key identifier: DF:5B:DB:49:81:2F:8E:DC:F4:1C:E5:7D:8E:DC:C7:7F:06:D3:EF:F9
Certificate issuer: /CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
Certificate serial: 4265753E2E03A4D838FD31CF59A59C29F6374354
Authority key identifier: A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3438203d3e203631363034.roa
Signing time: Tue 24 Dec 2024 19:08:42 +0000
ROA not before: Tue 24 Dec 2024 19:03:42 +0000
ROA not after: Tue 23 Dec 2025 19:08:42 +0000
asID: 61604
IP address blocks: 2804:7754::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:65:75:3e:2e:03:a4:d8:38:fd:31:cf:59:a5:9c:29:f6:37:43:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD
Validity
Not Before: Dec 24 19:03:42 2024 GMT
Not After : Dec 23 19:08:42 2025 GMT
Subject: CN=DF5BDB49812F8EDCF41CE57D8EDCC77F06D3EFF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:30:42:d4:b5:3b:ac:53:86:a8:3a:72:ad:
17:fb:b5:9d:64:8f:97:a7:03:8d:ef:f7:c1:b4:4b:
a1:74:26:77:47:07:19:c5:e2:99:7f:9e:35:8f:b4:
e6:1d:c3:e9:a3:e0:a4:9a:4f:2f:57:e7:45:ef:c6:
fe:e2:1b:ff:8b:fd:f7:28:b2:52:f7:e1:77:45:33:
9a:2e:53:26:f8:72:cf:5d:e6:b1:12:e8:eb:3c:9c:
85:bc:dd:73:07:5d:40:71:c7:84:ed:99:36:6a:04:
7a:30:e5:e6:01:3e:5c:23:46:b3:f4:77:ea:70:e0:
a7:3f:b1:41:c9:ce:d4:a4:f4:39:bd:02:62:a5:1c:
ae:8c:ef:64:e2:e4:c7:c2:41:bc:3d:e7:9f:c1:10:
63:d5:91:c8:e8:a6:9b:4b:72:0d:3c:d0:a5:dd:70:
d3:01:41:68:de:05:3e:74:11:a1:24:49:9e:c6:0f:
26:e7:38:80:60:f0:f5:8e:de:bb:48:0e:f3:64:56:
3d:d9:97:af:45:57:e4:e9:12:b0:16:c1:51:12:b8:
0c:88:47:b9:11:f2:a5:db:45:f1:bd:c1:8b:d2:3d:
f9:d8:7f:fd:34:9e:2b:ee:8b:d9:26:fb:63:b6:6c:
59:fa:a3:8d:29:e8:d3:b1:aa:2c:ee:03:68:ea:58:
7f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:DB:49:81:2F:8E:DC:F4:1C:E5:7D:8E:DC:C7:7F:06:D3:EF:F9
X509v3 Authority Key Identifier:
keyid:A2:51:AB:5E:09:E5:D3:EE:16:5B:0B:E5:1F:6A:FC:8C:B2:15:04:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A251AB5E09E5D3EE165B0BE51F6AFC8CB21504AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQd4q7BpstcLLmLkarCYKaDWeu9CpnSwYWbaBsNEVRLg/0/323830343a373735343a3a2f33322d3438203d3e203631363034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7754::/32
Signature Algorithm: sha256WithRSAEncryption
3c:40:d1:e5:3a:5a:b8:92:91:54:3e:1e:7a:48:0a:29:b8:54:
b9:ea:8e:a1:0f:62:64:ab:32:23:da:f7:80:3a:98:bd:eb:95:
9a:3d:80:5a:bd:e4:9f:17:8c:aa:2f:ab:a2:af:cc:c6:ef:fb:
a4:3c:99:c0:24:c5:c6:c6:bd:d5:59:b9:93:48:e8:35:da:df:
e3:06:82:cf:6a:04:77:1c:1a:e8:8a:1e:ba:58:55:95:f7:41:
4c:10:60:58:b1:59:92:0f:73:ec:ac:3d:87:4a:b9:8e:6b:8f:
1d:89:33:22:ec:32:b2:3b:1c:9c:b5:92:70:b2:1f:d3:6f:5b:
94:b1:5c:96:da:b2:93:34:9b:8e:8e:e9:80:7a:4c:5c:ab:71:
fc:af:32:2b:36:72:7c:bf:b2:9e:07:cd:14:ed:b1:b5:50:d4:
7b:57:10:0a:9d:57:17:79:75:3c:e8:f8:b6:14:81:75:a9:c0:
fd:78:08:bf:cb:96:90:58:3b:05:cc:58:29:66:25:a3:ff:2a:
e4:c2:44:ce:c0:e6:55:bc:cf:1c:75:f5:7c:88:5c:02:19:57:
6b:8e:bb:f7:d9:25:7b:45:0a:63:2a:8e:3c:fd:54:5d:b5:2a:
17:a1:c4:2a:80:fd:49:36:4d:fe:4b:cd:73:34:bb:34:96:4b:
40:9a:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:32 2025 by rpki-client