Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa
File: 323830343a3961343a3a2f33322d3332203d3e203233303734.roa (raw, json)
Hash identifier: /dcalrkbfWH0Qj2cDGJrYzAmbGbhrzkHfyWDwf8aXUA=
Subject key identifier: 09:9B:95:3D:E8:E8:C7:BD:16:EA:50:DD:99:B6:AD:F4:2D:1D:DF:0B
Certificate issuer: /CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Certificate serial: 1D05128032CC696458FBAFF82196AF8DDF330A4C
Authority key identifier: D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa
Signing time: Wed 22 Jan 2025 14:04:25 +0000
ROA not before: Wed 22 Jan 2025 13:59:25 +0000
ROA not after: Wed 21 Jan 2026 14:04:25 +0000
asID: 23074
IP address blocks: 2804:9a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:05:12:80:32:cc:69:64:58:fb:af:f8:21:96:af:8d:df:33:0a:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D
Validity
Not Before: Jan 22 13:59:25 2025 GMT
Not After : Jan 21 14:04:25 2026 GMT
Subject: CN=099B953DE8E8C7BD16EA50DD99B6ADF42D1DDF0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:19:6c:e2:cf:8c:4c:33:70:4f:03:e3:12:a3:
56:ac:62:9a:d5:cf:18:91:75:80:87:99:2e:40:a7:
84:3b:1a:bd:22:82:12:05:7d:b0:6a:33:8a:96:4f:
4e:e4:5c:10:44:28:61:23:e2:95:be:e1:bb:6f:9d:
04:5f:d0:c0:96:59:19:54:f0:a0:59:1b:bb:2b:48:
57:a0:70:2c:60:5f:42:21:f4:5f:e2:5b:ce:cb:b8:
99:fc:56:70:d3:cb:2d:20:5d:10:8d:b0:4b:3d:b7:
6d:59:9d:93:6c:8d:1e:7c:bb:60:92:f9:40:6f:02:
7e:1b:dc:ae:a4:ca:c4:52:a1:22:f4:41:8e:f6:29:
0a:da:ae:a3:b1:6c:9b:4a:d1:0b:89:7e:39:62:7d:
6f:af:a8:f8:ae:5a:7d:4b:dc:05:84:98:d8:9c:cc:
2f:44:3f:7b:c8:f4:c0:6f:aa:66:7a:c0:fe:14:a5:
fd:b1:ca:65:7c:22:b4:15:53:01:f4:24:4f:7c:14:
c4:df:20:b3:b0:87:ea:28:7a:ac:f1:83:ec:b7:e1:
7c:4e:09:ac:ee:7e:2f:2c:8b:c2:0d:4a:22:4a:63:
47:ec:5f:b7:48:4d:9a:cc:00:73:82:33:8d:1e:ac:
d0:f1:83:c8:48:53:9d:97:96:b7:b9:81:5a:c3:a9:
61:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:9B:95:3D:E8:E8:C7:BD:16:EA:50:DD:99:B6:AD:F4:2D:1D:DF:0B
X509v3 Authority Key Identifier:
keyid:D0:C6:14:E3:FA:A2:5F:31:A5:6E:9C:F2:FE:A4:79:B1:CF:08:09:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D0C614E3FAA25F31A56E9CF2FEA479B1CF08095D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKx88Nf3tLPEpZEK63Q7SkXQSPNbzfw7RHN8mKGJgg1W/0/323830343a3961343a3a2f33322d3332203d3e203233303734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9a4::/32
Signature Algorithm: sha256WithRSAEncryption
12:73:fd:1f:f5:10:99:c7:59:06:cd:ad:60:4f:8a:28:5f:2b:
de:99:bd:37:e1:c5:62:71:5d:97:19:70:89:d8:ad:13:6d:d7:
7f:35:71:0c:70:f3:78:92:98:6f:12:30:5b:89:0f:30:1c:8f:
7e:99:2c:60:1e:d4:19:82:2e:f0:17:b1:7c:f9:ae:3d:ae:00:
a8:09:28:43:11:ec:92:eb:fa:0a:dc:68:a8:0c:4d:96:a3:32:
50:e4:b7:ea:e0:48:f2:39:1e:81:9d:2b:e9:c5:a6:23:12:60:
ec:fd:bf:f9:08:26:42:cd:64:dd:f4:cc:ba:70:a4:0f:5f:0e:
a1:c4:74:d3:73:5c:23:7c:86:6a:3f:93:fe:8e:b6:b7:ee:4b:
f7:08:04:6d:56:c6:b5:9f:e6:cb:f6:6b:8f:74:18:7a:8e:3a:
e2:bc:ff:5e:f8:08:1b:32:62:87:da:66:6c:8c:ea:00:a5:92:
1a:18:1d:9e:bf:3d:07:1e:e4:43:0a:ea:d3:3d:97:d1:f6:c7:
4a:ff:96:10:3f:bb:22:35:07:8e:ba:de:fb:7a:db:91:44:36:
6a:61:3d:58:35:c2:37:25:8c:b8:0a:41:e4:42:09:20:25:cb:
42:7f:eb:24:6f:e4:df:0f:bf:c8:84:46:de:19:bc:9b:8c:11:
b9:58:43:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 18:23:15 2025 by rpki-client