Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa
File: 323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa (raw, json)
Hash identifier: QcLBn2FW6MS06pj928K1BAwy2EGURY5KlgXU3hN1hmI=
Subject key identifier: FA:23:5D:FC:5E:90:94:F5:A9:B8:8A:EA:C6:28:F2:A0:FD:27:54:61
Certificate issuer: /CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Certificate serial: 04F40187C41ABE7BF3804C438E97A402AFE5167E
Authority key identifier: 1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject info access: rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa
Signing time: Sun 11 Aug 2024 18:10:50 +0000
ROA not before: Sun 11 Aug 2024 18:05:50 +0000
ROA not after: Sun 10 Aug 2025 18:10:50 +0000
asID: 263085
IP address blocks: 2804:96c:8900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:f4:01:87:c4:1a:be:7b:f3:80:4c:43:8e:97:a4:02:af:e5:16:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822
Validity
Not Before: Aug 11 18:05:50 2024 GMT
Not After : Aug 10 18:10:50 2025 GMT
Subject: CN=FA235DFC5E9094F5A9B88AEAC628F2A0FD275461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f5:8e:36:e3:ca:35:b4:77:50:56:d0:12:1c:
0c:98:4e:a3:d1:da:43:b3:50:62:1e:35:b7:af:7a:
77:a8:54:36:57:3e:b7:a0:96:59:1d:78:ee:61:04:
d3:c3:41:8a:f8:53:35:b9:18:60:96:1d:dc:26:1a:
9e:f1:35:a9:5a:e6:31:1c:3f:3d:01:65:4a:03:f4:
fc:8d:73:da:6c:f2:ab:9a:3a:cc:09:b1:ce:fb:77:
04:66:c9:f4:3e:83:47:5f:25:d1:de:a5:32:68:1a:
8c:9b:01:00:fb:1e:61:47:3d:f3:bf:06:a2:08:f2:
13:fe:d4:48:ed:40:82:d1:9b:35:14:0a:27:ee:7c:
24:7b:86:7a:79:f2:83:81:2f:63:13:bc:98:8e:17:
5a:0d:0e:e5:cf:df:7f:76:86:34:ac:d3:47:dc:bb:
7d:a3:2a:ab:d2:d0:1e:74:5d:38:24:06:eb:55:45:
1c:20:b8:5e:9c:f7:b8:e5:b4:0f:dd:d3:5b:25:48:
4f:97:a8:45:b4:7c:a8:9f:47:95:a1:f3:2c:dc:ca:
63:93:de:e3:c6:f8:cd:8d:62:7c:ad:ac:e7:9e:08:
d9:b7:3b:4c:6e:65:0c:6c:09:81:f9:7c:3e:40:6d:
3e:8c:80:af:14:9f:74:c4:1f:63:41:d7:6c:d1:94:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:23:5D:FC:5E:90:94:F5:A9:B8:8A:EA:C6:28:F2:A0:FD:27:54:61
X509v3 Authority Key Identifier:
keyid:1A:9F:A3:7F:39:AE:1F:F5:54:22:CD:1E:A4:DD:C2:2C:7B:D3:A8:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1A9FA37F39AE1FF55422CD1EA4DDC22C7BD3A822.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/fSudM4EMwKHEw9w5iuppyaniE4UEeTe3zAiPrGsxLCY/0/323830343a3936633a383930303a3a2f34302d3430203d3e20323633303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:96c:8900::/40
Signature Algorithm: sha256WithRSAEncryption
3f:09:dc:81:f5:ee:45:8c:30:e4:26:77:88:4c:7d:e9:12:f9:
24:65:d6:e2:aa:88:1b:70:1d:ee:7e:18:d1:9d:29:9b:b4:67:
92:80:94:da:c1:4a:48:be:e9:48:4b:8f:3b:6f:8a:ed:c7:fe:
34:a6:8a:68:cc:2a:8d:50:fb:bf:bc:89:a8:d2:65:4c:0c:39:
80:d0:43:a6:36:63:39:b7:b6:70:d1:75:07:08:c8:15:98:a8:
a0:81:c2:c0:c3:07:0c:fa:e8:20:7b:f1:e4:8b:23:25:32:c1:
13:85:55:b0:38:c8:e1:0b:cc:df:5b:02:3c:92:1c:50:60:c7:
89:07:d1:bd:c9:cb:c1:c4:fd:5d:bd:4d:28:99:9c:37:24:6b:
a9:4c:f5:e7:c1:44:f2:b2:ee:89:4f:fd:bb:ea:4b:fa:d4:36:
0c:b8:2e:92:12:ea:39:70:70:9f:73:38:ed:0d:8d:42:d3:c6:
1e:1c:c3:68:77:37:e9:54:27:0f:a5:0a:17:31:e1:20:34:43:
c8:af:2c:9f:ca:8b:e7:36:35:8f:c0:de:8d:96:0e:60:4c:c9:
91:24:9f:f3:52:55:13:10:b2:3b:f1:f6:0a:25:d3:23:be:41:
8f:ab:df:4a:da:d4:0a:73:5a:ea:67:c2:70:b8:c8:f9:0d:f8:
65:1b:1e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 13:26:54 2025 by rpki-client