Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa
File: 323830343a363336343a3a2f33322d3438203d3e20323639333538.roa (raw, json)
Hash identifier: VI296uwuood9h+Wd5yWEBNZhOIon7U/ZPdTISOXmtE4=
Subject key identifier: 31:1D:7A:7C:1D:67:3F:5F:0F:F6:DC:67:11:F2:FE:08:1D:03:FA:0E
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 7C6F5F91552FD2266B426A93E91515FD5890E46E
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa
Signing time: Fri 20 Dec 2024 15:04:55 +0000
ROA not before: Fri 20 Dec 2024 14:59:55 +0000
ROA not after: Fri 19 Dec 2025 15:04:55 +0000
asID: 269358
IP address blocks: 2804:6364::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:6f:5f:91:55:2f:d2:26:6b:42:6a:93:e9:15:15:fd:58:90:e4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Dec 20 14:59:55 2024 GMT
Not After : Dec 19 15:04:55 2025 GMT
Subject: CN=311D7A7C1D673F5F0FF6DC6711F2FE081D03FA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:ac:e6:c4:62:a2:9c:9c:6c:bd:f8:c0:6a:
a7:fb:18:1d:33:f4:9f:7e:63:b5:77:0d:63:fe:fd:
e7:6b:ce:12:42:c7:fa:d4:cc:2d:22:23:a1:78:34:
b2:c9:b7:13:48:96:9d:ac:bf:e1:12:af:16:3b:71:
3f:58:0f:fa:64:cf:fc:5e:04:a2:7f:31:b9:4b:66:
bb:94:e3:a1:e3:ad:24:be:b5:5d:99:99:56:7a:9d:
e3:21:78:9a:93:48:4b:ed:dd:e1:32:2a:7b:55:69:
7a:69:ce:4a:a3:3f:87:77:8e:03:83:47:ef:a5:2c:
36:c5:14:06:38:6e:8e:c2:93:48:59:1b:6a:b5:79:
cd:78:4e:d1:0e:4a:22:cb:09:98:79:f6:2a:53:68:
c9:96:de:07:4f:30:46:56:d4:f1:26:6d:c7:02:93:
9e:af:31:7d:a1:57:78:46:c0:8f:b3:07:03:f3:2e:
05:d1:29:94:76:a5:63:66:be:48:b5:a3:e4:f8:85:
1a:7b:f4:b2:8c:33:52:94:fc:fe:00:25:ab:c2:92:
70:e6:95:5b:70:7f:2c:7f:41:87:e6:0a:7b:41:ab:
77:d2:a8:4a:0f:1b:50:dc:f2:e0:af:b2:53:b5:f4:
cb:3d:a6:97:ec:de:e3:35:05:ab:91:db:e3:04:1f:
b2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:1D:7A:7C:1D:67:3F:5F:0F:F6:DC:67:11:F2:FE:08:1D:03:FA:0E
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a363336343a3a2f33322d3438203d3e20323639333538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6364::/32
Signature Algorithm: sha256WithRSAEncryption
4f:3c:54:0b:e5:8b:d8:70:83:75:50:9b:79:4d:53:e6:93:ae:
86:7e:9e:31:85:ee:87:78:a7:a1:54:c7:4c:b6:3d:ff:c7:97:
ba:96:05:01:81:35:9c:ce:7b:b7:de:d8:46:36:75:8e:11:36:
77:90:c0:86:10:76:aa:d4:10:a4:da:ec:73:46:dd:5b:5c:83:
28:01:36:ce:c4:00:9a:eb:e8:ca:23:4f:27:77:af:08:e2:72:
20:c1:19:19:b8:99:6c:9c:4f:bb:9b:b6:2b:a8:86:1e:c0:2c:
6a:1f:e3:0b:3f:e4:8e:63:c3:73:38:dd:a5:0e:a3:52:80:e2:
23:4f:69:ae:f5:8b:11:7e:74:f1:ec:af:dd:dc:12:4e:70:51:
e5:76:99:4b:e3:70:a4:67:96:51:ab:0c:34:f7:3c:29:0e:80:
f3:a5:64:b6:6e:ad:c8:72:1a:98:c5:d2:bc:35:72:3e:13:ae:
dd:ae:17:9d:23:cb:33:4b:8d:c4:1c:ee:79:10:25:5c:8b:b2:
4c:23:a4:c3:4f:22:d5:52:b5:98:65:27:91:6d:ab:89:c6:7b:
a5:81:0c:79:7f:ac:89:36:79:7c:ce:c1:5e:e6:94:0a:2a:62:
c5:1b:0b:16:99:9c:0b:43:b7:80:e8:59:f3:49:60:89:f7:d3:
00:49:2f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:22:41 2025 by rpki-client