Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa
File: 323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa (raw, json)
Hash identifier: teAFLG3nDyDPr64SUPKrWdnhhjX0RpDm5U5I+PO4UAQ=
Subject key identifier: D7:22:55:3C:D0:D8:E6:D6:5D:F0:73:16:09:F9:36:51:7F:72:74:61
Certificate issuer: /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial: 7961F68C555B21A8F25678F4514E5574A0459499
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa
Signing time: Mon 13 Mar 2023 15:52:37 +0000
ROA not before: Mon 13 Mar 2023 15:47:37 +0000
ROA not after: Mon 11 Mar 2024 15:52:37 +0000
asID: 267451
IP address blocks: 2804:41b4:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:61:f6:8c:55:5b:21:a8:f2:56:78:f4:51:4e:55:74:a0:45:94:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Validity
Not Before: Mar 13 15:47:37 2023 GMT
Not After : Mar 11 15:52:37 2024 GMT
Subject: CN=D722553CD0D8E6D65DF0731609F936517F727461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:94:f6:c9:92:2b:78:0c:79:30:75:17:24:
b2:17:61:f2:9c:6d:67:60:98:3e:7e:a1:3f:97:41:
c8:ad:34:46:91:7b:f7:f2:d5:d2:33:49:6a:59:82:
30:fe:a2:6b:cc:56:28:5e:83:7e:00:8b:3a:be:0b:
ea:10:c3:b1:cd:38:6e:b5:db:88:37:17:25:1a:63:
6b:c9:f2:fd:5b:41:6c:47:28:f6:cf:37:d4:d3:b7:
5c:81:42:c0:da:b8:a4:a2:2c:8b:5d:73:5d:bc:87:
80:9d:64:09:1c:80:9f:fc:e3:a2:b6:0c:8a:ee:e0:
60:ff:1c:5d:e0:cf:31:0a:a4:6e:e0:91:82:52:70:
13:b0:81:0b:1a:b9:70:90:ed:a8:a5:c9:b2:c6:b3:
e6:49:9c:3f:ac:9b:62:84:51:62:a9:08:64:e3:82:
68:b1:54:3a:9e:86:63:07:ac:66:b4:84:a5:9b:25:
47:6a:18:97:64:84:58:a5:2d:45:13:9c:a0:72:bd:
9a:ea:a3:b8:c0:b9:78:d2:12:c0:ce:ad:b7:c3:2a:
1d:57:a9:b9:84:83:a7:6b:cf:13:89:d9:b3:3a:da:
9a:89:46:b2:05:40:b6:b8:0c:4a:cd:92:54:12:ca:
d3:cc:71:c0:04:e3:3d:ee:14:b3:cc:e2:88:15:f6:
c1:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:55:3C:D0:D8:E6:D6:5D:F0:73:16:09:F9:36:51:7F:72:74:61
X509v3 Authority Key Identifier:
keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a343030303a3a2f33342d3334203d3e20323637343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41b4:4000::/34
Signature Algorithm: sha256WithRSAEncryption
45:61:45:1d:39:bd:45:02:f1:da:15:d5:3b:6a:17:d2:c5:b1:
2d:d4:c2:64:50:d6:9f:da:af:83:42:fb:fa:7c:be:42:3a:60:
79:63:a6:0d:bf:15:1d:11:9a:c6:f1:cb:4e:23:0a:2d:58:ad:
d7:7d:1f:8b:f0:b0:24:bf:76:f5:ac:b5:c7:9b:52:58:02:83:
d3:34:f8:83:6d:56:de:14:a5:85:d9:56:c2:de:f9:f5:22:e3:
c4:df:fe:d8:04:51:15:33:a9:d3:5e:b7:b8:5e:3d:eb:03:4d:
7c:cf:24:3a:1b:74:7f:d8:09:0e:5d:18:46:63:cd:78:ea:99:
83:30:ba:3c:1b:5d:f5:9a:84:48:b2:02:45:13:22:44:c2:63:
7c:54:97:7a:06:db:66:0a:94:a1:1f:66:ea:55:ed:69:ca:bc:
af:c0:8e:3a:70:cc:dc:bc:df:47:32:7b:92:26:a5:03:16:4e:
68:ea:f2:a9:5e:cf:b7:f9:b3:38:93:aa:3b:57:ef:cd:26:7f:
7d:b3:ac:e0:10:57:11:f2:88:2c:8f:82:c8:95:d7:11:86:78:
e7:78:67:cc:04:5f:a8:b1:c6:1b:13:4e:d5:63:e9:1c:2b:51:
65:f6:b8:19:1c:0f:d3:42:38:37:e3:17:8f:3c:61:ab:c6:20:
e1:63:9f:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:28:42 2025 by rpki-client