Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa
File: 323830343a316235303a3a2f33322d3332203d3e203631373139.roa (raw, json)
Hash identifier: fU1Q8QvvtL0h2YV8u9C9o9TI9d4T2xpRqPo2OnTtEVU=
Subject key identifier: B6:9D:6F:9E:C5:6C:45:EB:82:DE:87:7C:C5:52:F5:14:DD:94:59:08
Certificate issuer: /CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Certificate serial: 7FA97A6B550F464D5DA9BB848DD91C28585C817C
Authority key identifier: 57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa
Signing time: Wed 11 Dec 2024 11:15:58 +0000
ROA not before: Wed 11 Dec 2024 11:10:58 +0000
ROA not after: Wed 10 Dec 2025 11:15:58 +0000
asID: 61719
IP address blocks: 2804:1b50::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a9:7a:6b:55:0f:46:4d:5d:a9:bb:84:8d:d9:1c:28:58:5c:81:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573658E4241F21CAB22CB9FC150BF6FB898271EA
Validity
Not Before: Dec 11 11:10:58 2024 GMT
Not After : Dec 10 11:15:58 2025 GMT
Subject: CN=B69D6F9EC56C45EB82DE877CC552F514DD945908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:98:0b:72:38:24:de:c9:ff:ff:96:55:1b:51:
f1:de:c5:9a:f3:e3:d4:51:e2:03:18:65:fd:22:96:
fe:d8:fc:fa:4a:42:ad:d3:e6:37:8b:e5:05:d0:d3:
f1:16:54:a6:d2:79:4c:a4:98:61:32:4a:a5:41:15:
b2:61:ad:b9:94:10:75:00:a6:a1:13:ed:13:69:33:
47:d8:4c:d7:30:d6:95:21:7f:4b:af:35:bc:fc:fe:
a4:e4:94:5e:ae:ed:ce:a6:38:90:30:85:50:ca:af:
ad:e0:af:28:53:05:d2:92:4b:67:73:19:61:01:d1:
94:f5:d4:f7:0e:cf:b1:79:10:ea:5f:fb:20:63:9f:
a6:f7:fb:ba:a2:c5:04:c6:0a:09:bc:e6:96:bf:27:
2c:7a:cf:46:dd:04:6a:70:9e:84:b9:06:fd:3d:87:
39:f1:07:6b:40:87:f3:de:c5:db:a2:3c:d9:91:9d:
38:6c:05:7b:30:f4:c6:83:e4:ca:ae:b1:17:65:0c:
b6:05:55:6d:25:82:18:78:88:00:03:e2:9b:89:15:
63:46:b2:26:6d:ae:b3:12:c6:68:29:17:c5:ed:1e:
61:80:9b:ad:ee:aa:f3:0e:4a:53:1d:3a:87:59:b6:
21:e3:ef:c3:44:a0:b5:d0:d2:22:d5:5d:90:51:08:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:9D:6F:9E:C5:6C:45:EB:82:DE:87:7C:C5:52:F5:14:DD:94:59:08
X509v3 Authority Key Identifier:
keyid:57:36:58:E4:24:1F:21:CA:B2:2C:B9:FC:15:0B:F6:FB:89:82:71:EA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/573658E4241F21CAB22CB9FC150BF6FB898271EA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573658E4241F21CAB22CB9FC150BF6FB898271EA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3KDprR9CDiXu13j6nzEzhWcTnJNdCFQN32j4bT6hJ3S/0/323830343a316235303a3a2f33322d3332203d3e203631373139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b50::/32
Signature Algorithm: sha256WithRSAEncryption
37:18:41:fe:59:06:41:bd:f0:01:ca:c1:56:d5:f8:ed:98:16:
c5:38:31:13:6f:0e:9c:b9:6b:bd:a1:ec:f9:2f:a3:99:74:5d:
71:84:85:57:ad:9e:ed:e1:a8:6c:38:11:c5:b7:87:2b:24:97:
22:91:0c:d9:2b:76:a5:06:14:94:2d:9b:43:46:2f:15:4a:0c:
e3:01:0f:60:bb:0c:10:fd:43:9f:ab:c5:5e:f0:e5:46:73:3c:
d7:42:0a:62:53:3d:63:18:26:8e:f5:d3:41:3b:65:ce:78:72:
24:aa:2f:87:61:87:12:5f:30:94:43:78:80:ab:6c:df:29:61:
7e:62:00:68:a7:d6:2f:cb:76:ad:2a:38:cc:65:9f:49:ea:34:
b5:f4:3d:79:86:f6:09:30:0a:63:12:24:90:ef:0e:74:c9:27:
76:47:6d:8d:b2:fc:ba:86:43:e3:a4:ec:04:ba:60:1c:11:c6:
e8:db:f3:27:bd:ef:ad:f2:a5:1b:13:80:96:a5:d3:85:76:8c:
48:32:4c:4a:16:02:eb:41:ee:fa:94:66:76:cc:3c:cd:03:cc:
bc:3f:bd:c8:af:4e:e1:2c:d1:69:57:06:c2:cb:d8:8e:94:ec:
92:c3:b8:36:c9:9e:21:30:71:e7:16:41:a5:13:80:3d:81:e4:
e7:25:ba:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:04 2025 by rpki-client