Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
File: 323830343a333164343a3a2f33322d3438203d3e203533313339.roa (raw, json)
Hash identifier: nKgOGKvOIHWyMaY4C0mcmXmXEF68bswFvWya06cuf+g=
Subject key identifier: A6:2E:52:61:9A:3D:D6:EE:91:06:00:B5:59:4A:12:F2:97:12:F6:8E
Certificate issuer: /CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Certificate serial: 75AE9C8FB4CE9927BBA61084407959303E9B5D4B
Authority key identifier: D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
Signing time: Thu 04 Apr 2024 04:40:47 +0000
ROA not before: Thu 04 Apr 2024 04:35:47 +0000
ROA not after: Thu 03 Apr 2025 04:40:47 +0000
asID: 53139
IP address blocks: 2804:31d4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:ae:9c:8f:b4:ce:99:27:bb:a6:10:84:40:79:59:30:3e:9b:5d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA
Validity
Not Before: Apr 4 04:35:47 2024 GMT
Not After : Apr 3 04:40:47 2025 GMT
Subject: CN=A62E52619A3DD6EE910600B5594A12F29712F68E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:80:2f:0a:5b:e3:e5:6c:89:e8:68:1b:c2:
ee:c4:00:e1:97:69:e3:d2:15:a0:1a:0d:90:4d:88:
61:47:7e:80:be:f6:06:df:57:2f:62:7f:7a:0e:ef:
8f:c7:ff:23:9f:50:28:85:ab:b1:3a:f8:3a:24:08:
32:b5:82:35:f6:81:31:46:1c:6f:82:2b:4d:62:19:
29:45:20:ec:d5:f2:09:cb:b2:8a:9c:37:45:20:11:
13:a9:3a:2e:1a:1d:7d:f6:f0:8c:f5:30:db:ce:00:
5b:dd:96:90:f1:31:da:2e:99:dd:e2:71:7a:10:6b:
f5:cb:5d:dc:77:f9:d8:60:4b:ec:4d:7f:9c:1d:53:
a8:d8:5f:b0:5c:35:f8:34:d7:03:d8:f0:29:1f:5f:
f5:f0:d9:f5:94:dd:cc:87:61:ca:79:5f:84:ab:2d:
60:64:df:8e:a5:b7:ab:32:39:3c:a2:6c:13:67:7e:
56:b6:78:28:8a:df:81:23:d1:40:fa:fc:67:15:53:
b9:77:2d:02:97:e8:0b:c0:cc:a8:7e:11:94:8c:f1:
23:7e:3a:3a:de:d6:b8:8f:86:20:51:a7:c0:2d:05:
3b:03:a7:ff:51:52:81:c9:80:4c:93:75:67:1e:78:
d9:0e:87:58:66:34:19:69:db:79:49:1b:49:40:b6:
81:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:52:61:9A:3D:D6:EE:91:06:00:B5:59:4A:12:F2:97:12:F6:8E
X509v3 Authority Key Identifier:
keyid:D2:24:DF:F1:98:22:C5:B2:7C:7B:CC:16:BF:D8:BE:2A:38:4F:89:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D224DFF19822C5B27C7BCC16BFD8BE2A384F89AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiedU9B7M6NxXr5xQhJdft17HNsjQS3dg6iUHrJZiVAv/1/323830343a333164343a3a2f33322d3438203d3e203533313339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:31d4::/32
Signature Algorithm: sha256WithRSAEncryption
80:67:1e:e2:56:c8:00:1d:84:46:b1:31:47:19:e2:90:8c:46:
6d:38:b1:f7:9f:14:7b:66:b6:0f:c6:20:f1:95:b0:16:10:80:
32:ea:6e:8c:c2:d4:3c:96:f4:6e:59:09:8a:49:93:0e:86:c8:
f9:35:d9:16:4d:07:be:13:62:b5:3e:76:ab:5b:95:d0:36:88:
53:16:38:89:44:8e:90:ba:8f:cb:1f:b6:04:e1:ef:09:fd:63:
d2:dc:8f:ba:05:85:bc:88:15:8d:94:c7:34:e7:ea:5f:63:b6:
22:b8:24:31:ed:4f:6a:16:f3:2c:ed:40:57:f2:82:b6:f0:ba:
1b:75:12:83:34:19:27:68:9e:63:0a:c1:cc:e2:71:2e:c2:a5:
f3:4f:e5:94:86:1e:3b:5b:cd:23:43:d5:93:a4:e5:d3:15:52:
66:41:44:d4:f4:a0:93:94:ff:06:6d:45:09:9d:a3:e2:02:c2:
65:24:1e:e1:b7:16:71:c6:94:2d:9b:d8:b8:a5:f4:73:e3:6e:
cc:ea:2e:33:49:10:08:33:bf:53:51:1a:7f:c4:40:dc:74:a0:
5f:2d:dd:11:b1:fd:30:8a:d9:42:5a:06:d9:dc:ee:5a:f4:32:
b4:a4:fb:0a:8b:6e:a8:1b:ba:62:59:fe:fb:ae:12:9d:3f:3e:
32:11:53:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:58:15 2025 by rpki-client