Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
File: 323830343a376339303a3a2f33322d3332203d3e20323731353034.roa (raw, json)
Hash identifier: POhHOy4/4dPpMwH0lxIKm+jJIkomBOuEK8eTJWb73/Y=
Subject key identifier: 93:40:34:0E:B5:76:B0:19:3F:74:FA:C0:73:7E:C0:D2:2F:0E:92:88
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 6ABF93C00A671376E5B2F00FC2E22A5A750DA5DB
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:43:35 +0000
ROA not before: Tue 21 Jan 2025 20:38:35 +0000
ROA not after: Tue 20 Jan 2026 20:43:35 +0000
asID: 271504
IP address blocks: 2804:7c90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bf:93:c0:0a:67:13:76:e5:b2:f0:0f:c2:e2:2a:5a:75:0d:a5:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:38:35 2025 GMT
Not After : Jan 20 20:43:35 2026 GMT
Subject: CN=9340340EB576B0193F74FAC0737EC0D22F0E9288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:53:e4:2e:8b:d0:6e:29:37:3c:2a:d0:82:5d:
34:88:d3:74:96:6b:1a:7c:34:89:c4:f3:73:d2:33:
87:3e:da:22:4b:d7:f5:e3:7d:47:58:2b:37:f2:b9:
11:69:59:dc:07:a2:4b:e5:bf:45:98:b6:a8:4d:4d:
24:7a:fb:4a:0e:ff:dc:78:10:7b:96:8c:6d:90:01:
b3:0c:99:fe:c0:93:f2:0b:e2:40:5b:c1:f5:fa:8c:
43:50:63:b2:bf:f5:19:b8:91:08:ee:1d:58:99:16:
57:14:f2:5f:32:f7:9b:6c:26:14:42:55:4d:50:a2:
d7:a0:35:64:41:db:ab:76:e6:d9:41:fc:23:c0:1f:
c5:69:39:a1:76:47:c3:f9:80:58:db:fb:14:fd:08:
f0:73:f7:56:3d:3f:28:43:ce:b7:2a:a8:ea:69:9d:
82:c3:1e:fe:4d:83:69:fd:78:11:b4:f9:3c:3c:69:
e8:93:16:52:89:54:ca:0a:ac:e0:4f:f4:ec:49:0c:
76:65:ad:62:0b:cb:c0:2b:5f:38:ee:31:28:22:d9:
54:37:b0:24:44:b0:83:25:39:f3:f1:98:1e:12:35:
1a:6b:e7:60:30:32:57:f1:5b:70:5c:f2:76:7e:a9:
91:f8:00:35:93:17:fa:f6:e9:e1:76:44:04:b0:64:
a3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:40:34:0E:B5:76:B0:19:3F:74:FA:C0:73:7E:C0:D2:2F:0E:92:88
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33322d3332203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90::/32
Signature Algorithm: sha256WithRSAEncryption
1d:e4:06:48:4e:1b:ef:e6:28:96:ee:1f:2f:c4:10:a8:02:68:
a8:28:37:cc:3e:27:b9:fa:b8:c0:44:5e:68:90:cd:78:f5:26:
e9:69:af:38:07:a5:6c:0f:79:ed:2c:67:0e:1f:71:e2:21:c5:
81:4c:e9:4e:dd:86:cb:9b:14:66:67:83:fa:c2:cf:99:a7:c4:
58:78:1c:ff:3c:09:87:f9:0e:e8:f4:9d:29:55:d1:3a:a0:b1:
d2:3c:08:2c:cb:74:dd:c8:84:48:1b:be:0d:35:42:34:f7:22:
a2:58:bd:f4:d5:29:4b:e4:c4:67:53:a7:d7:9e:57:71:b6:de:
7e:29:f6:3e:8d:26:1e:e5:be:86:2f:b4:8d:36:21:b2:b9:54:
b9:aa:55:75:c5:19:05:ae:67:72:7c:70:08:8f:18:57:89:b4:
eb:b2:d6:75:22:7d:6a:ac:5f:d8:3a:8a:62:31:00:ec:67:39:
e0:c9:c6:82:38:c9:90:b9:1c:aa:7e:b5:dd:29:e6:e0:78:7a:
19:4d:da:78:e3:d6:ac:47:4a:39:01:53:75:a6:ff:d7:d6:2c:
19:7c:cb:19:7f:34:81:94:d3:6e:6e:45:f9:64:ab:16:eb:ae:
d3:35:19:94:2c:e1:4c:ff:28:72:8b:19:a4:23:52:51:93:57:
49:76:5a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:12:27 2025 by rpki-client