Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
File: 323830343a6433383a3a2f33322d3438203d3e203533313538.roa (raw, json)
Hash identifier: ITX9zf4dR+WNiA0LigOZZoVUW70WV9yvBVhLZO4GzXk=
Subject key identifier: DE:DD:96:16:E6:AE:66:D9:44:62:CB:96:9B:46:96:55:2A:36:9F:2B
Certificate issuer: /CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Certificate serial: 1BD9466CDA56A37865FAF2050476C38DCF46F83A
Authority key identifier: 3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject info access: rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
Signing time: Fri 20 Dec 2024 14:57:35 +0000
ROA not before: Fri 20 Dec 2024 14:52:35 +0000
ROA not after: Fri 19 Dec 2025 14:57:35 +0000
asID: 53158
IP address blocks: 2804:d38::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:d9:46:6c:da:56:a3:78:65:fa:f2:05:04:76:c3:8d:cf:46:f8:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B60C03C0834984570E58DB9BDE5D3DD976B0717
Validity
Not Before: Dec 20 14:52:35 2024 GMT
Not After : Dec 19 14:57:35 2025 GMT
Subject: CN=DEDD9616E6AE66D94462CB969B4696552A369F2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:88:eb:05:a6:3a:52:46:68:bf:cc:9a:4c:24:
f8:18:8c:dd:cd:5d:8b:a4:94:31:e7:08:77:58:70:
0e:1d:34:3c:f5:e7:19:92:d6:06:7b:af:19:16:46:
4d:40:5d:26:9c:2a:a6:fc:a4:6e:ec:5c:05:5c:8c:
af:96:66:90:73:82:d4:57:e7:57:80:7d:a8:20:72:
eb:fd:5e:2a:a8:35:ba:dd:b7:7b:63:df:9c:54:dd:
e2:83:00:9d:bb:21:74:f4:1e:ab:af:df:ba:c8:02:
73:69:86:b5:c7:0e:40:34:68:f6:7d:1a:51:26:0b:
72:f8:53:2e:ba:11:1d:6b:e8:33:34:5f:9d:04:9a:
2f:b4:ab:73:34:2b:69:4a:e1:d0:6a:12:e2:7a:fe:
2f:61:7e:0a:3e:b8:9f:6f:63:6f:71:45:6e:24:0a:
69:a5:fd:70:73:5f:38:cc:a4:4e:8e:cc:cd:a2:41:
96:28:7a:01:0b:1e:a9:98:38:cd:c3:bd:31:87:f9:
ce:42:2c:d5:35:a0:bf:d3:53:7f:ac:f8:ef:38:8b:
fa:52:96:f1:65:8a:6a:56:72:b3:5d:91:41:b7:72:
aa:c0:c4:ce:55:7a:8f:28:28:1b:2d:c1:fe:0e:a9:
03:bf:e9:78:fe:23:b1:5c:c2:85:2c:8c:77:05:c1:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DD:96:16:E6:AE:66:D9:44:62:CB:96:9B:46:96:55:2A:36:9F:2B
X509v3 Authority Key Identifier:
keyid:3B:60:C0:3C:08:34:98:45:70:E5:8D:B9:BD:E5:D3:DD:97:6B:07:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/3B60C03C0834984570E58DB9BDE5D3DD976B0717.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B60C03C0834984570E58DB9BDE5D3DD976B0717.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/gEWT8a4Gecs2fY56qQd9i1UrKTnedyqLZsReYjuXw4e/0/323830343a6433383a3a2f33322d3438203d3e203533313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d38::/32
Signature Algorithm: sha256WithRSAEncryption
ab:b2:b5:68:58:1f:26:88:e4:a8:6e:41:32:13:d1:76:7d:b1:
72:ec:18:10:c5:fe:16:00:45:4d:44:a7:b6:6c:7d:c1:4f:25:
7d:68:52:c4:4a:00:00:8c:a3:fd:13:07:40:70:a6:4b:5a:b4:
f5:df:ec:a9:ce:6c:bc:dd:d5:62:6d:cb:fc:64:f0:58:8a:55:
63:86:8a:92:48:f2:46:2f:99:9a:c2:96:65:6b:07:6b:1b:27:
5a:5a:fc:45:91:2d:bc:3c:6a:f7:df:15:4e:03:4b:02:51:fc:
26:28:7d:84:fc:16:35:04:64:52:15:51:7d:c8:0b:61:7d:63:
d6:c8:06:33:0a:ee:60:44:06:0c:1c:8b:48:8d:1e:71:ef:0b:
11:cd:0d:b1:d4:a7:02:7f:17:75:3e:82:bb:7b:ed:3b:37:c3:
f0:db:56:14:96:c3:7c:af:41:c7:f6:bb:b5:b4:93:92:b7:54:
75:3f:40:33:e0:62:bf:5f:c7:fc:75:c4:3f:b2:1e:66:6a:23:
12:26:84:c2:b4:ef:2a:66:0b:59:86:ff:d1:88:ae:4b:0d:1d:
5e:67:cd:8c:71:b9:7c:0b:a7:0e:57:a5:7a:dd:7d:ae:39:31:
85:f0:de:71:05:73:3e:c9:9f:f7:02:37:2e:1f:8c:62:be:26:
51:ac:01:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:57:15 2025 by rpki-client