Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
File: 323830343a363062303a3a2f33322d3430203d3e20323639313834.roa (raw, json)
Hash identifier: j7kj2AWirqVKKxtGZ6H4BiIVvWwza6fVm6E6c+gtxyI=
Subject key identifier: 9B:AE:2A:EC:73:0C:8B:13:20:B8:85:2A:1D:C2:3F:51:60:DA:37:CE
Certificate issuer: /CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Certificate serial: 5EC13DD7BCA1A6DFD85281F5B228C9596C70E37B
Authority key identifier: 2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
Signing time: Fri 05 Apr 2024 02:12:00 +0000
ROA not before: Fri 05 Apr 2024 02:07:00 +0000
ROA not after: Fri 04 Apr 2025 02:12:00 +0000
asID: 269184
IP address blocks: 2804:60b0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c1:3d:d7:bc:a1:a6:df:d8:52:81:f5:b2:28:c9:59:6c:70:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A9CB99D98C11F7AF1A405B5D0507506E6F808A7
Validity
Not Before: Apr 5 02:07:00 2024 GMT
Not After : Apr 4 02:12:00 2025 GMT
Subject: CN=9BAE2AEC730C8B1320B8852A1DC23F5160DA37CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:8d:89:d1:16:c6:81:f6:17:e9:07:ea:85:61:
fd:5e:c2:a5:f2:3e:36:6c:3d:86:02:42:5f:d5:f4:
e4:ce:e6:e5:e6:b7:79:e1:a5:63:69:0b:55:bb:fb:
92:ee:84:db:91:b3:ab:71:a7:17:94:2e:22:94:97:
48:74:78:a9:ff:87:5b:df:79:c3:47:6b:72:9f:1c:
f3:05:08:20:50:23:21:f1:ed:a7:78:8f:8b:7f:15:
2d:2c:f9:b2:00:a6:49:6a:09:4d:3f:78:04:29:7b:
e0:af:16:78:cc:3f:50:be:25:e3:4d:59:99:e7:1d:
35:c3:e5:ce:7d:56:0b:13:96:bb:d5:a7:ae:a0:4e:
66:d6:aa:79:c5:a2:18:50:8a:97:0f:78:fa:68:9e:
5c:76:50:28:e1:13:2a:bb:1d:f9:51:1e:e2:c2:dd:
24:3b:85:bd:5c:ed:e9:fe:3c:1e:ad:d5:1d:3c:57:
a6:72:db:7e:91:db:8f:93:48:48:82:88:85:09:ff:
12:11:52:1b:18:15:18:11:cd:2e:05:bf:7a:86:67:
0f:41:ef:61:21:2e:fa:4f:c2:3a:03:60:45:72:18:
ac:19:02:d5:72:a9:35:6d:d0:d7:db:24:ef:c4:12:
91:e9:44:54:56:3f:69:27:75:ac:45:40:e8:ae:87:
a2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:AE:2A:EC:73:0C:8B:13:20:B8:85:2A:1D:C2:3F:51:60:DA:37:CE
X509v3 Authority Key Identifier:
keyid:2A:9C:B9:9D:98:C1:1F:7A:F1:A4:05:B5:D0:50:75:06:E6:F8:08:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A9CB99D98C11F7AF1A405B5D0507506E6F808A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GFYJi12UZgjQiEutQwWK7uH3YPHn91Fx6Kpx2cAXdGf4/1/323830343a363062303a3a2f33322d3430203d3e20323639313834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60b0::/32
Signature Algorithm: sha256WithRSAEncryption
30:a6:2d:5b:65:07:e2:16:48:81:3b:ce:fa:f8:06:4f:aa:68:
5e:28:41:ba:f3:c5:b6:15:01:ce:14:b0:bc:fb:1a:44:27:ea:
b1:48:90:4a:09:e3:f9:74:9b:67:d7:42:f4:da:d1:49:09:d8:
d1:64:97:56:c8:7a:7a:c5:03:c4:78:4e:8f:d7:fb:64:9d:3c:
49:0e:e7:57:a9:20:55:d3:22:38:e3:c4:10:c3:54:52:46:6b:
1a:12:6d:0f:68:04:ee:57:ca:79:71:31:d3:5b:ea:f7:dd:79:
d6:3c:33:05:7f:49:ce:54:be:9f:b2:12:fe:82:7d:b6:43:af:
18:cb:b4:c5:89:48:ad:24:99:dc:75:f3:e9:07:38:01:ab:63:
fc:e4:2b:fa:c9:73:95:14:c1:2b:1e:f9:43:ae:c5:1b:16:3c:
a3:aa:e6:da:2a:fb:7a:c9:7c:4e:30:74:9e:d5:55:12:3c:af:
e9:f3:b8:ea:28:44:87:f4:97:34:d8:22:b7:95:0d:9a:39:de:
7b:a7:1d:47:a5:8b:2d:88:0d:97:44:24:40:02:bc:6f:77:a1:
37:10:69:a0:d4:49:a9:89:86:22:11:2e:47:d0:06:47:ef:c9:
e1:bf:d7:0b:09:92:6f:87:7d:c1:d8:1a:f4:c1:2b:a7:e5:67:
bc:e4:3a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:58:57 2025 by rpki-client