Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
File: 323830343a6632303a3a2f33322d313238203d3e203532373431.roa (raw, json)
Hash identifier: QPBwVZLibnBWuGBc5bUfKhVoOKRZn2Ysqz47y2J1lts=
Subject key identifier: 88:1A:45:EB:A8:EE:21:6C:FA:69:67:07:0D:5C:8A:FD:74:C0:EC:A2
Certificate issuer: /CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
Certificate serial: 476A65D718089730D3BCE3443AD2EC7118C86569
Authority key identifier: 7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
Signing time: Fri 17 Jan 2025 19:55:57 +0000
ROA not before: Fri 17 Jan 2025 19:50:57 +0000
ROA not after: Fri 16 Jan 2026 19:55:57 +0000
asID: 52741
IP address blocks: 2804:f20::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:6a:65:d7:18:08:97:30:d3:bc:e3:44:3a:d2:ec:71:18:c8:65:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7FD5C7957E68877AE72AEF66ED2FEA315201BF3E
Validity
Not Before: Jan 17 19:50:57 2025 GMT
Not After : Jan 16 19:55:57 2026 GMT
Subject: CN=881A45EBA8EE216CFA6967070D5C8AFD74C0ECA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:29:0f:60:c1:6c:5a:78:61:da:fc:b7:36:
4a:97:fd:c1:f1:72:6b:41:4f:aa:92:c8:82:69:f5:
5e:f1:c0:46:da:88:43:88:a9:3c:95:c4:6c:51:e2:
18:db:08:9d:82:0f:27:ff:0c:de:59:47:16:54:13:
13:f0:30:57:85:18:dd:d1:08:89:ab:cb:71:42:f9:
b0:ca:57:31:09:72:6d:ed:d4:5d:0c:63:b2:c4:d3:
61:00:34:35:84:e5:b8:f2:b1:da:5d:ff:90:14:68:
70:57:42:11:9c:3e:34:4c:d6:e4:0a:d3:c9:d0:30:
07:19:39:1b:c2:f9:73:01:2b:df:54:2b:52:79:85:
61:06:0d:83:03:7b:7f:02:d9:3b:d9:03:19:f5:96:
ed:7c:59:d3:97:97:78:54:0d:0e:cc:d8:37:56:2c:
16:f7:6b:9c:4b:f8:96:f0:ea:07:74:f3:1f:fb:9f:
78:99:c2:63:f6:f2:2d:ee:cf:90:16:e5:72:72:83:
d2:56:c3:c0:3d:72:e7:f2:3b:9f:3f:10:47:7b:bc:
20:55:bf:c4:22:1f:63:99:00:d6:a5:de:a3:7f:37:
fb:0e:9d:75:12:b8:a5:1a:8e:fa:d4:08:b1:da:cb:
de:2d:00:70:87:93:3a:66:79:60:6b:67:ac:65:43:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:1A:45:EB:A8:EE:21:6C:FA:69:67:07:0D:5C:8A:FD:74:C0:EC:A2
X509v3 Authority Key Identifier:
keyid:7F:D5:C7:95:7E:68:87:7A:E7:2A:EF:66:ED:2F:EA:31:52:01:BF:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7FD5C7957E68877AE72AEF66ED2FEA315201BF3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HyyjtrCkQaPmypFyjdxHAwCBs1ZFUM97YeNCc5pe54Un/0/323830343a6632303a3a2f33322d313238203d3e203532373431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f20::/32
Signature Algorithm: sha256WithRSAEncryption
01:7a:81:d3:36:4a:74:d3:87:03:89:b0:88:81:3a:32:35:da:
b6:48:76:28:95:75:43:14:09:49:54:c2:99:e0:ec:dd:b3:d2:
96:70:11:bf:92:78:87:df:14:12:b1:cc:79:5f:ea:64:5e:c2:
53:f3:ae:fc:b7:21:4c:aa:80:12:97:7a:26:9e:0b:64:5d:b3:
ac:89:31:ba:16:30:09:1f:d2:d7:3a:b9:3f:4d:44:ec:b1:b7:
cf:e0:92:a8:f3:22:49:f5:23:b0:67:a2:04:37:35:3e:c7:6e:
3b:33:da:ab:54:65:bf:2b:86:e2:05:1e:0a:fa:62:2d:c9:99:
d7:c3:2d:2e:5d:fd:b3:eb:2e:b1:b7:da:68:6a:ee:3f:9f:4f:
47:99:e9:d7:68:3a:dd:d1:30:09:13:f3:a2:db:94:25:d2:5e:
e1:e1:78:ce:6b:09:4c:46:d3:00:c7:dd:06:f9:35:d0:71:43:
c3:63:41:1b:31:dc:e9:d6:56:58:86:72:b5:7d:fa:fe:2e:e0:
7f:f6:31:6b:0b:a4:1c:e2:7a:08:b5:ab:c3:3c:c9:bd:f9:75:
23:2b:28:e8:9e:14:57:63:19:ae:73:67:14:65:0c:e7:5e:97:
13:eb:5a:4d:71:f3:9e:1d:62:a4:87:74:9e:eb:31:6e:a9:e9:
0c:70:85:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:39:48 2025 by rpki-client