Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
File: 323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa (raw, json)
Hash identifier: UFxm0EcE6d0BKJqu3rw3MiPgU8eMIQHW0Plbsv1p2QE=
Subject key identifier: D6:08:CB:A4:69:A0:8E:4F:1A:F5:A4:DF:51:8F:7D:40:ED:87:02:F3
Certificate issuer: /CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Certificate serial: 5D508AFFCC7C157468DD7B29D6CB77C28D7EC267
Authority key identifier: 35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
Signing time: Wed 03 Apr 2024 23:25:46 +0000
ROA not before: Wed 03 Apr 2024 23:20:46 +0000
ROA not after: Wed 02 Apr 2025 23:25:46 +0000
asID: 273814
IP address blocks: 2804:8cac:2100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:50:8a:ff:cc:7c:15:74:68:dd:7b:29:d6:cb:77:c2:8d:7e:c2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3583862D781B71B103E9FA8D726C4D02380ACEE3
Validity
Not Before: Apr 3 23:20:46 2024 GMT
Not After : Apr 2 23:25:46 2025 GMT
Subject: CN=D608CBA469A08E4F1AF5A4DF518F7D40ED8702F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:43:97:14:60:86:9a:7c:b7:e6:79:77:0c:5f:
96:9f:d0:9e:c1:cb:35:70:72:8f:bd:5d:7d:85:ca:
ac:32:bb:d6:50:e7:c3:c4:09:3b:0b:8c:d9:81:99:
58:12:bb:8f:9b:13:7f:21:f0:98:a0:f4:30:a6:bd:
2b:d2:b1:43:ec:1d:f1:e7:0e:6b:be:e6:d1:c8:48:
b5:6b:0a:13:99:8e:18:7f:72:0f:f9:39:04:f1:4c:
46:69:e8:81:ad:88:1f:1a:51:4e:9b:4f:41:5e:de:
6d:80:42:3a:f3:e4:1d:3c:9c:30:3e:51:0b:54:d2:
49:d2:b2:a3:cf:73:73:e5:44:b9:07:a3:24:31:b1:
39:a2:7d:b4:a9:36:10:62:33:96:c6:cc:02:3b:95:
4e:b5:6d:43:a9:9f:0c:41:bf:43:07:51:cb:1a:d2:
9f:df:a4:f2:64:fe:b0:b5:8d:33:b9:58:2f:ab:2b:
24:f8:af:f5:cc:9c:3f:75:3d:49:c3:38:a8:3d:73:
70:2e:1c:05:5f:87:40:f0:8b:27:a8:ac:30:ae:30:
7d:69:a1:ce:8f:6b:74:c3:c4:87:24:20:a9:f9:b3:
59:f5:41:d4:fa:7a:49:2d:f2:58:9d:da:b7:27:d9:
3c:7f:a3:d4:e3:71:57:eb:eb:48:fd:1d:88:3f:d8:
20:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:08:CB:A4:69:A0:8E:4F:1A:F5:A4:DF:51:8F:7D:40:ED:87:02:F3
X509v3 Authority Key Identifier:
keyid:35:83:86:2D:78:1B:71:B1:03:E9:FA:8D:72:6C:4D:02:38:0A:CE:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3583862D781B71B103E9FA8D726C4D02380ACEE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhq6oX3bxxknXtcfB1rtYyTjkmk2DvFomoR5G4j66PLK/1/323830343a386361633a323130303a3a2f34302d3430203d3e20323733383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8cac:2100::/40
Signature Algorithm: sha256WithRSAEncryption
4a:90:01:8d:ae:61:d9:76:82:e4:87:e1:fa:23:37:c6:6a:02:
6f:c7:d2:55:90:5c:0a:15:4e:e9:7e:f1:95:cf:49:d3:9a:d0:
d3:4d:36:38:3e:b9:88:4e:48:af:4d:45:3d:df:11:fb:2d:47:
d8:89:83:55:07:f6:4c:a9:b2:c7:4f:61:75:fc:c1:dc:b0:aa:
f0:b2:18:89:8c:a5:7c:cc:7f:5e:64:1c:3b:7e:e7:bf:71:26:
a7:9d:23:f1:6d:07:fb:ae:b2:22:a7:28:e6:d3:23:64:12:52:
67:0d:a7:b3:d9:1f:71:ce:43:e3:0e:07:d0:c5:67:e3:f4:83:
8f:d2:83:3d:60:3c:65:31:8b:82:45:34:49:0d:ce:cc:c1:5b:
6c:25:a3:08:6a:b3:d2:00:db:f4:3d:cf:a2:1c:3d:b4:ce:68:
ad:49:d2:34:c3:8c:70:21:28:45:0b:f3:23:11:42:b9:72:05:
64:a8:66:73:e9:31:73:b3:66:73:c0:b8:e0:d2:f9:17:e0:a7:
99:d1:8a:dd:81:f3:81:71:da:43:26:12:4c:60:10:dc:30:0b:
0c:e6:da:89:3b:c8:41:5c:6b:0d:b1:d2:9d:51:78:87:ed:22:
71:39:e4:1f:87:9c:65:c2:8a:fb:0b:59:b4:63:8d:89:8f:8d:
01:de:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:02:22 2025 by rpki-client