Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
File: 323830343a3334383a3a2f33322d3438203d3e203238313333.roa (raw, json)
Hash identifier: Cq/sQgps/ggeiNVymn6ZiJRe0Y/B5EvRI/FUXJ+9Ox4=
Subject key identifier: 6D:6C:59:74:5A:CB:13:D1:6B:70:85:C7:4E:00:0D:58:56:53:89:56
Certificate issuer: /CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Certificate serial: 3264DE1191C7B28FEEC930FAD7961E320FCB8A13
Authority key identifier: 57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
Signing time: Fri 05 Apr 2024 00:05:06 +0000
ROA not before: Fri 05 Apr 2024 00:00:06 +0000
ROA not after: Fri 04 Apr 2025 00:05:06 +0000
asID: 28133
IP address blocks: 2804:348::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:64:de:11:91:c7:b2:8f:ee:c9:30:fa:d7:96:1e:32:0f:cb:8a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57293D96DAFC56E0450C22FBEE7A673DF7BB26B8
Validity
Not Before: Apr 5 00:00:06 2024 GMT
Not After : Apr 4 00:05:06 2025 GMT
Subject: CN=6D6C59745ACB13D16B7085C74E000D5856538956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:8f:7a:9e:50:e8:49:91:1b:54:fa:85:00:
ae:ac:c1:b2:41:bd:70:46:9a:8f:74:5b:ee:d7:c8:
b2:a0:8a:7e:18:66:9d:67:62:75:b5:f6:54:3c:58:
ca:7f:f5:30:55:3f:b2:41:91:06:d4:03:c2:6f:24:
9d:a4:ae:b3:c2:50:d3:86:dd:5f:c6:14:17:ff:69:
02:c8:d4:d4:f8:ed:8a:d3:6f:19:b9:04:19:80:bb:
4d:e1:88:28:65:35:66:db:67:fc:fa:50:fd:b6:e3:
dd:87:c9:0c:ba:bf:8f:48:66:09:43:2c:7d:9d:c9:
a5:91:a3:aa:cc:3d:b0:39:7f:ea:3e:03:53:4b:8b:
3d:79:b2:90:7d:d9:1b:6d:5e:ca:11:86:68:d0:e3:
98:f6:5b:89:6b:d2:4a:ca:76:d1:08:43:03:d4:eb:
d0:f9:f6:24:21:2b:7a:e2:a4:4b:50:45:17:46:0a:
2d:48:3f:46:68:98:87:34:35:ca:c3:a1:77:65:59:
fa:73:60:c4:66:2a:68:07:5f:0c:2d:d0:2a:93:c6:
a6:19:e3:57:07:d7:92:c2:5a:f1:68:45:2a:44:cc:
12:7b:24:6b:2b:49:85:1c:c6:53:b6:e8:d9:37:0b:
05:74:d8:d7:4f:8a:13:4f:42:0c:4c:a4:ed:61:0c:
5e:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6C:59:74:5A:CB:13:D1:6B:70:85:C7:4E:00:0D:58:56:53:89:56
X509v3 Authority Key Identifier:
keyid:57:29:3D:96:DA:FC:56:E0:45:0C:22:FB:EE:7A:67:3D:F7:BB:26:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/57293D96DAFC56E0450C22FBEE7A673DF7BB26B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/1/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:348::/32
Signature Algorithm: sha256WithRSAEncryption
2d:e3:bf:02:4b:be:1b:18:bd:5c:f7:3c:f1:c4:ac:9a:8c:6a:
20:1b:97:1c:14:01:ca:bc:a0:83:1d:6a:5a:18:b0:3a:42:66:
a5:19:08:3f:34:ec:0e:8e:ce:0d:44:0f:3e:f2:b6:f7:04:41:
cf:67:78:dd:20:a4:75:94:70:29:92:4a:13:ef:db:76:3c:f9:
9b:30:8e:79:8c:19:84:f9:66:ea:bf:35:47:65:90:78:c8:67:
07:27:dd:45:89:0a:ae:d1:e8:15:64:2b:0b:6e:d5:3d:0e:76:
13:06:d1:f0:af:68:6e:87:bc:ba:9b:b3:c4:79:c9:88:2f:7b:
0f:97:e6:47:3d:21:30:ce:87:c0:e2:f9:52:ba:73:67:9d:59:
cb:eb:9e:6b:a5:0c:67:d4:41:4d:6c:aa:08:5f:1e:c1:1b:18:
a0:ac:df:ba:1e:5c:ec:9f:32:8a:45:9d:38:f5:68:70:97:2d:
ed:64:55:a6:95:fb:02:df:48:c2:5c:18:ad:0e:db:fe:9b:76:
8d:06:72:5d:3e:56:02:c7:f7:fe:5a:ce:60:d5:ba:8b:f1:8b:
42:cc:c0:a0:53:b7:23:d5:f5:1a:72:f0:27:f0:d9:e3:82:73:
16:64:96:98:8b:22:b8:59:a1:24:50:cb:8b:2a:d0:ac:30:18:
28:87:96:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:44:47 2025 by rpki-client