Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
File: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier: 3Qu1mFN9echvq143CbadtkATwovytzi4lgmOhi5oYIQ=
Subject key identifier: 6C:BC:FF:8B:21:45:AD:88:DE:B0:8D:60:CD:69:47:94:54:A0:1E:8A
Certificate issuer: /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial: 0E2A013B98876B38EE98C17570979037A90851A7
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
Signing time: Wed 03 Apr 2024 20:51:33 +0000
ROA not before: Wed 03 Apr 2024 20:46:33 +0000
ROA not after: Wed 02 Apr 2025 20:51:33 +0000
asID: 52916
IP address blocks: 2804:2b10::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:2a:01:3b:98:87:6b:38:ee:98:c1:75:70:97:90:37:a9:08:51:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Validity
Not Before: Apr 3 20:46:33 2024 GMT
Not After : Apr 2 20:51:33 2025 GMT
Subject: CN=6CBCFF8B2145AD88DEB08D60CD69479454A01E8A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d0:15:f1:5a:4d:e0:19:42:9c:88:22:1b:ba:
35:74:a8:30:75:24:1f:29:4a:58:b2:64:e2:de:8e:
ee:1c:80:b8:cc:25:b9:fc:6c:3a:3a:66:8d:92:ee:
75:03:65:f1:46:8b:94:79:d7:0b:30:62:4c:d1:bf:
40:59:1b:60:cb:5b:3d:ba:f6:14:cb:dc:b7:1b:74:
a0:18:23:33:28:12:6f:75:99:3f:55:41:fe:bb:63:
6b:ee:06:d5:51:0b:46:5b:65:06:40:15:8b:63:93:
7e:9e:ca:dd:46:23:77:4f:dd:83:3c:83:b7:b6:c1:
7d:db:05:1e:25:34:f8:30:67:da:13:e2:ba:a9:7b:
c4:8e:1e:89:09:c4:5f:9c:8c:c6:19:0e:2b:fc:25:
ee:14:64:f5:81:70:6a:98:5c:f1:fa:78:1e:e3:0d:
29:bc:31:8a:8c:ab:e1:db:6b:ff:34:fc:68:04:bd:
d0:14:86:9b:4f:d1:22:59:32:e3:b2:b3:54:d4:2f:
48:cb:88:2d:90:37:5a:19:53:c5:63:4b:18:d6:39:
80:01:d5:71:b6:fb:29:c3:f2:de:18:c4:8f:ee:b9:
e1:48:72:d4:c7:30:49:7b:ab:f3:2b:48:a7:18:90:
98:7f:59:b7:46:c1:17:b7:4c:75:68:2b:4e:64:9d:
d2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:BC:FF:8B:21:45:AD:88:DE:B0:8D:60:CD:69:47:94:54:A0:1E:8A
X509v3 Authority Key Identifier:
keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b10::/37
Signature Algorithm: sha256WithRSAEncryption
4e:16:38:e0:4c:d4:b2:00:cd:72:80:d0:77:66:82:8d:3d:ea:
15:92:d0:f5:11:db:13:37:69:85:1d:00:44:ad:04:a1:9b:3e:
78:bb:90:af:84:00:d5:7f:8f:8e:4f:b7:c4:67:78:c9:06:d9:
34:1f:3f:fe:c1:55:b6:35:8c:44:3e:93:b2:fa:16:de:32:f2:
cf:07:47:7e:39:ea:43:41:25:cf:98:d5:12:15:77:19:5f:cc:
80:de:41:4a:6a:d7:4f:77:e3:6e:17:5a:96:f8:58:e2:fe:d7:
a2:51:58:0a:60:83:53:9f:fd:5e:79:66:b6:ef:39:20:66:e8:
47:6e:24:6d:53:a8:6b:2a:6a:61:de:1c:de:cc:c9:14:fd:63:
0f:c1:ba:ab:6b:c6:b5:07:5b:a6:40:bd:50:17:12:3d:83:a7:
91:e1:af:2f:92:c0:9c:69:ba:b2:03:8d:c2:10:7c:cf:b7:3f:
7f:06:fe:55:87:74:71:9b:2b:04:1c:a8:8e:cb:ed:ff:59:17:
56:98:a2:61:a7:27:de:96:3f:db:e9:e2:d8:d3:93:12:c7:0d:
3e:f8:51:5a:83:8f:5a:af:dd:72:1b:b7:a1:e1:f4:44:7a:32:
86:ce:9d:8a:43:ac:44:0f:56:04:aa:de:09:81:ad:41:f7:47:
3a:28:c5:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:52:18 2025 by rpki-client