Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa
File: 323830343a353930633a3a2f33322d3332203d3e20323638313636.roa (raw, json)
Hash identifier: D/iyPFfl5iccUiCT1Gchl/5GbbujHUm6QVDfI/LWK0g=
Subject key identifier: AD:D0:62:95:AB:5C:5B:FA:62:52:F4:FA:7B:0F:E1:08:43:2E:05:48
Certificate issuer: /CN=944D7F16EF33CF24B63038B95B06199620AA80DB
Certificate serial: 391F3D943517C522507AFB928D6353AD69DB53D8
Authority key identifier: 94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa
Signing time: Mon 18 Nov 2024 18:12:54 +0000
ROA not before: Mon 18 Nov 2024 18:07:54 +0000
ROA not after: Mon 17 Nov 2025 18:12:54 +0000
asID: 268166
IP address blocks: 2804:590c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:1f:3d:94:35:17:c5:22:50:7a:fb:92:8d:63:53:ad:69:db:53:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=944D7F16EF33CF24B63038B95B06199620AA80DB
Validity
Not Before: Nov 18 18:07:54 2024 GMT
Not After : Nov 17 18:12:54 2025 GMT
Subject: CN=ADD06295AB5C5BFA6252F4FA7B0FE108432E0548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8b:65:14:27:59:5a:b7:1a:e7:5c:04:35:a7:
fc:66:95:2a:1d:36:e9:e9:b0:82:91:30:f1:09:6f:
f4:c7:7d:b5:62:36:f8:f7:36:ce:63:b0:cf:15:7f:
4d:67:19:24:59:58:42:ca:da:90:e1:61:34:51:3f:
db:39:4c:cc:99:0a:01:d7:f1:16:a4:c7:0f:c3:82:
f0:76:dc:10:cc:d6:39:80:9e:e2:e4:c6:4f:a2:f8:
e9:0f:ff:97:f0:b0:ea:97:fd:59:7b:9d:03:b6:04:
f2:d7:06:fe:35:08:68:85:a6:cc:92:73:f8:3f:59:
7c:eb:f7:07:6b:82:c3:d6:4c:02:f6:4e:cc:97:ac:
3e:09:5b:bc:52:62:24:fe:f1:77:1f:5b:49:a8:a5:
93:bd:28:1e:ad:aa:98:c8:97:ce:a9:20:a9:c6:12:
5d:20:d3:ea:bb:b6:b4:67:cd:e1:d8:43:f5:e9:d9:
00:6d:30:31:cb:01:5d:9e:be:93:29:d7:a2:83:9e:
83:cc:ab:c9:9a:d4:6d:66:28:d6:80:f9:5f:47:7f:
e5:71:87:9c:e9:6f:b3:f1:b6:f3:9d:bb:ad:6b:33:
79:99:a0:81:cd:29:26:8f:d4:b5:ad:87:f4:e5:59:
fa:47:1a:3f:22:d5:42:4c:0c:21:f5:b7:c9:c4:80:
c5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D0:62:95:AB:5C:5B:FA:62:52:F4:FA:7B:0F:E1:08:43:2E:05:48
X509v3 Authority Key Identifier:
keyid:94:4D:7F:16:EF:33:CF:24:B6:30:38:B9:5B:06:19:96:20:AA:80:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/944D7F16EF33CF24B63038B95B06199620AA80DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/944D7F16EF33CF24B63038B95B06199620AA80DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GpCKTSVVVJcvbyUwoLB5zaQan8w3xTRAFbga5cvSVbQk/2/323830343a353930633a3a2f33322d3332203d3e20323638313636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:590c::/32
Signature Algorithm: sha256WithRSAEncryption
86:b2:67:0e:5c:5c:aa:45:ba:dc:3d:7b:77:01:6c:53:3c:69:
93:65:14:ef:6a:8a:01:a6:65:d0:9a:61:f6:c9:5c:96:dc:4f:
65:63:28:4e:fc:2a:c3:5a:3f:05:2b:81:63:50:eb:bb:c8:5d:
de:ac:27:e7:2a:47:79:44:a3:39:b9:fc:a3:c2:8c:3b:f3:7c:
01:55:f7:8d:6b:20:2d:37:22:1e:52:73:92:a0:03:ec:03:90:
de:61:a5:d1:7b:d9:c6:9a:ca:53:5a:b4:8e:54:b7:75:4d:11:
a3:e0:11:b1:e1:ff:fe:06:30:e8:32:93:70:05:cd:56:f1:e7:
b8:29:11:b7:15:16:07:eb:00:f2:2f:79:04:f4:a7:69:09:25:
b4:99:7a:81:67:20:0b:97:ad:21:de:ea:ec:53:cf:98:b0:7e:
9f:29:7c:d5:8f:2e:81:4e:79:8b:d6:d3:b4:f4:aa:13:af:4f:
4e:37:bb:48:1c:7b:02:18:8f:cf:6a:53:c1:26:c6:53:c3:d0:
32:95:0e:1b:6c:5c:2b:2c:b5:d6:ff:c2:bf:f0:61:09:25:5a:
f3:53:c4:ec:f3:ea:ea:4c:40:2e:45:7e:8f:75:c7:3e:98:a7:
ec:c5:31:7c:3f:10:73:b2:73:c0:7c:b1:67:c2:16:56:6a:04:
22:58:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:48:05 2025 by rpki-client