Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa
File: 323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa (raw, json)
Hash identifier: F95tPxHEMBCcGbEhNDIkHKGQkc7oENbb2hUiB5hk7LY=
Subject key identifier: B3:D0:E3:80:4B:57:5A:2E:5A:E2:72:AA:3D:BD:2E:BE:AB:6E:0B:A3
Certificate issuer: /CN=7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF
Certificate serial: 08EF086B2CF9642EE6E36029C840C45EA6197550
Authority key identifier: 71:42:B3:14:CC:CE:4C:B1:7D:8A:D2:BB:C9:0C:BB:C1:5A:88:BB:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa
Signing time: Sat 11 Jan 2025 20:13:33 +0000
ROA not before: Sat 11 Jan 2025 20:08:33 +0000
ROA not after: Sat 10 Jan 2026 20:13:33 +0000
asID: 268850
IP address blocks: 2801:80:3540::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:ef:08:6b:2c:f9:64:2e:e6:e3:60:29:c8:40:c4:5e:a6:19:75:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF
Validity
Not Before: Jan 11 20:08:33 2025 GMT
Not After : Jan 10 20:13:33 2026 GMT
Subject: CN=B3D0E3804B575A2E5AE272AA3DBD2EBEAB6E0BA3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ad:2a:60:49:b9:3a:06:09:7b:27:47:d5:21:
36:4d:3b:ba:34:cf:e5:39:49:57:ad:50:e7:d2:f2:
e8:bc:9e:9f:f2:94:fc:43:f9:c3:66:d4:62:aa:72:
bc:55:92:83:90:f4:81:55:58:75:73:38:9d:86:a2:
9e:d2:20:8d:c5:b9:ad:b5:5a:91:e1:35:3e:fa:4e:
bf:6c:1c:91:a6:23:21:18:07:53:b0:a4:e8:93:04:
37:c8:6b:d8:f5:cc:e6:23:c7:3e:7c:a0:cf:ef:2e:
b9:98:1f:78:d5:fc:0c:b9:f2:6e:55:83:98:36:01:
0f:a7:c7:75:85:b9:f1:25:ed:14:5d:d8:0a:16:69:
e1:8a:06:b2:b9:a3:70:e3:58:98:76:68:9d:45:43:
54:95:8c:31:0a:f6:37:37:1d:84:d8:96:99:7b:3c:
94:73:97:7c:e1:2a:78:d3:76:36:e4:16:0c:4e:8a:
4b:b5:0b:81:8e:8d:7b:cc:12:a7:1f:b3:a4:29:f9:
64:1a:27:92:ea:1f:bd:d3:c8:f8:aa:94:e7:11:51:
6e:b0:2a:41:c7:03:d0:39:a9:d6:87:92:26:be:ea:
ce:a5:8f:dc:ca:20:cf:b6:04:c3:92:ac:9c:e5:91:
fc:35:fa:05:d3:96:96:3d:a3:c8:c4:5c:68:8c:f2:
45:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D0:E3:80:4B:57:5A:2E:5A:E2:72:AA:3D:BD:2E:BE:AB:6E:0B:A3
X509v3 Authority Key Identifier:
keyid:71:42:B3:14:CC:CE:4C:B1:7D:8A:D2:BB:C9:0C:BB:C1:5A:88:BB:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7142B314CCCE4CB17D8AD2BBC90CBBC15A88BBAF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Er2sAPFTxrFBTUh1eQdQPYusZAcpGzsQNVukehPZEEkV/0/323830313a38303a333534303a3a2f34382d3438203d3e20323638383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:3540::/48
Signature Algorithm: sha256WithRSAEncryption
92:2c:7a:c4:8c:2f:fb:1d:96:76:12:00:2d:1c:90:43:b1:b0:
6a:2a:70:f5:90:1b:30:3d:4d:09:13:41:05:f8:7c:17:37:11:
b0:d7:a9:d4:c0:0b:d3:e1:a4:3e:55:eb:d8:12:0f:a7:4c:13:
ed:de:6f:13:07:a8:2a:98:6a:fd:c8:8a:ed:95:0d:8b:90:13:
77:e0:a4:60:3a:b8:ea:d7:ec:a9:b5:2d:29:9a:85:02:1e:ad:
81:f0:14:f6:30:09:85:3d:24:7a:4e:53:92:5b:82:42:ea:25:
b7:5c:f4:67:08:89:97:1a:16:7c:27:c7:8d:2d:39:15:46:c0:
81:05:5d:cd:05:63:2e:7e:8b:75:54:a7:08:75:a7:bc:5a:ed:
ef:16:3a:01:ae:02:e8:62:f2:7e:13:b0:91:f7:0c:ea:e8:da:
ca:60:ba:06:99:92:c6:58:99:57:2e:b8:5b:34:d2:aa:5e:d6:
01:5d:93:e4:ad:64:30:86:2b:a5:00:97:ab:5d:39:4e:42:74:
4d:0a:d9:a1:ec:16:24:20:c4:de:09:5d:01:f6:d0:1c:7f:6d:
f6:7b:df:2b:39:e7:83:d1:13:32:f2:34:64:b4:55:f3:1b:2d:
54:c2:9e:e5:ef:49:bf:96:10:cc:a5:34:ce:83:ee:31:97:57:
90:85:b8:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:24:38 2025 by rpki-client