Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/323830343a313331343a3a2f33322d3333203d3e20323633353134.roa
File: 323830343a313331343a3a2f33322d3333203d3e20323633353134.roa (raw, json)
Hash identifier: zsXGkNB8Vv/gFNdK0IauPdFh9YeNmS2SBtxUFL/HBLc=
Subject key identifier: FB:76:1D:9D:93:F4:CA:9B:55:4D:06:7D:4E:EF:BB:0D:78:10:85:4F
Certificate issuer: /CN=593735A2ABA6B3848108C26014737D33DED5064B
Certificate serial: 677B61991E6082323749C4D6A9DE3FDCE4683A15
Authority key identifier: 59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/323830343a313331343a3a2f33322d3333203d3e20323633353134.roa
Signing time: Tue 07 Jan 2025 19:33:19 +0000
ROA not before: Tue 07 Jan 2025 19:28:19 +0000
ROA not after: Tue 06 Jan 2026 19:33:19 +0000
asID: 263514
IP address blocks: 2804:1314::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:7b:61:99:1e:60:82:32:37:49:c4:d6:a9:de:3f:dc:e4:68:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=593735A2ABA6B3848108C26014737D33DED5064B
Validity
Not Before: Jan 7 19:28:19 2025 GMT
Not After : Jan 6 19:33:19 2026 GMT
Subject: CN=FB761D9D93F4CA9B554D067D4EEFBB0D7810854F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:de:b6:85:25:69:82:a3:12:10:48:47:a1:ed:
15:97:cb:5b:aa:41:c6:3e:f5:5c:14:c4:94:95:91:
2a:49:8e:0a:e3:56:b9:53:a3:67:b3:3c:9a:40:bb:
e3:ee:ad:20:28:ea:cd:07:23:b7:a3:29:0f:70:06:
28:d8:c6:1d:27:15:d8:03:1e:37:1d:53:60:f3:e8:
14:81:ad:10:85:41:1c:84:40:0c:70:bf:61:f1:9d:
5c:29:1c:58:0d:50:31:0d:1a:31:0b:7b:23:24:7c:
7e:c2:0a:49:e6:1f:21:a7:1f:88:7f:1a:2c:c4:28:
1b:03:5f:72:b2:30:b7:95:9a:11:e8:87:15:9a:a4:
92:af:d3:2e:26:c4:dd:30:22:0d:14:55:fa:6f:b0:
60:15:fa:a4:5f:4a:75:5b:b0:d3:41:3d:41:ab:3b:
eb:1e:f8:4c:26:4b:f3:74:35:17:14:f3:94:f9:cb:
ce:e1:bc:49:dc:ee:bb:1c:08:7f:cf:49:f9:3b:73:
ee:77:1f:bd:49:d2:e9:ee:b9:8f:3d:ff:f3:64:72:
c3:99:60:63:ed:74:fa:0c:40:cd:01:27:32:f6:bf:
53:b2:ae:9e:9e:3c:65:94:e8:86:9d:8e:78:ba:3d:
1b:ae:2b:3b:01:9b:cd:88:b5:ec:a1:3d:37:ff:0a:
e0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:1D:9D:93:F4:CA:9B:55:4D:06:7D:4E:EF:BB:0D:78:10:85:4F
X509v3 Authority Key Identifier:
keyid:59:37:35:A2:AB:A6:B3:84:81:08:C2:60:14:73:7D:33:DE:D5:06:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/593735A2ABA6B3848108C26014737D33DED5064B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/593735A2ABA6B3848108C26014737D33DED5064B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/UB4wBhtiqddoLnXwp4byW51JUK4ypn3TppvizN1SU97/0/323830343a313331343a3a2f33322d3333203d3e20323633353134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1314::/32
Signature Algorithm: sha256WithRSAEncryption
b7:66:5c:54:b8:94:b2:0f:0c:5d:af:e1:73:85:33:a1:f8:61:
03:ef:f6:76:ea:1d:18:a2:1d:b3:10:b4:5e:0b:54:9a:87:7a:
44:25:f6:66:9a:27:8d:b3:70:79:9c:d7:87:c1:ae:48:2e:00:
71:53:13:a2:23:b4:a4:f1:46:f0:15:3f:9f:f6:de:87:98:c4:
b3:95:ae:54:f9:c3:f0:a1:a3:2a:89:5a:d0:4f:6b:ab:85:9b:
63:09:9b:6f:68:44:24:33:ba:98:a0:1a:b6:9d:7a:8c:93:62:
c7:10:ad:ad:1c:59:1a:f5:87:f5:5d:7d:1e:02:fa:8a:85:b4:
69:65:f1:b1:ec:de:e4:9f:9b:bf:ed:7b:34:a4:fa:8a:d8:95:
b6:65:b7:ea:b4:31:de:4b:fa:01:13:f7:af:e0:7a:73:85:07:
13:f8:62:8e:41:2b:55:ce:24:8b:36:04:c5:bf:a8:82:fc:8a:
cb:68:dc:27:7e:3c:eb:bb:d8:1a:09:fb:1b:78:59:0b:60:d1:
3c:46:54:4e:22:2a:95:16:99:a3:dc:e7:92:97:88:0e:9b:e8:
60:3f:3f:4a:ee:b1:ed:a4:29:41:02:3d:5e:fb:80:fc:82:43:
aa:b3:1f:39:27:4b:90:0a:92:84:35:63:46:cc:46:8f:5e:34:
66:b6:0b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:58:26 2025 by rpki-client