Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33352d3335203d3e203631353837.roa
File: 323830343a333330303a3a2f33352d3335203d3e203631353837.roa (raw, json)
Hash identifier: MKbtkOnChXYlXjPpJQKMilPTz38ikN7SysjmVKbiS6Q=
Subject key identifier: D9:CB:B1:E1:3E:8A:A5:85:BC:52:F6:C5:8A:99:AD:91:9C:B5:E6:A2
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 6C04E40806656265E7CC6FD00C2B50B55AB437C5
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33352d3335203d3e203631353837.roa
Signing time: Wed 10 Jan 2024 13:01:33 +0000
ROA not before: Wed 10 Jan 2024 12:56:33 +0000
ROA not after: Wed 08 Jan 2025 13:01:33 +0000
asID: 61587
IP address blocks: 2804:3300::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:04:e4:08:06:65:62:65:e7:cc:6f:d0:0c:2b:50:b5:5a:b4:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Jan 10 12:56:33 2024 GMT
Not After : Jan 8 13:01:33 2025 GMT
Subject: CN=D9CBB1E13E8AA585BC52F6C58A99AD919CB5E6A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:cd:1a:d7:b9:0b:a8:75:23:de:8e:2a:19:
c4:36:73:cc:2e:7c:35:16:62:fd:7f:71:33:8a:4f:
40:7c:fe:49:d6:2b:c7:05:04:fc:75:fe:a4:5c:3c:
9b:7e:2c:c9:c0:08:9a:aa:2a:d9:71:a1:bc:21:80:
c5:cd:17:fc:0d:3c:38:87:c0:10:f2:32:6a:e6:c9:
75:cf:c6:9a:7e:73:78:24:ff:94:2f:f9:0b:de:17:
66:de:25:a5:a4:30:c8:38:8a:04:3a:dd:4e:72:81:
78:a9:c4:0d:48:e6:ed:56:de:0f:96:28:20:64:93:
ca:df:db:99:1a:89:c8:ae:ce:49:8f:eb:17:ff:fc:
3d:04:f2:be:b0:a7:b5:dd:61:fe:ee:46:5d:52:8f:
49:a4:0d:9d:18:1e:79:a7:69:d4:15:4f:d2:30:b6:
a1:84:ab:46:27:51:93:33:74:31:2c:b2:9f:5d:c1:
6e:9d:d3:75:f1:a5:9b:40:79:13:5c:fa:53:04:41:
81:4c:4d:9c:b5:07:8c:9f:ae:e7:ed:30:56:84:3b:
ad:1b:7a:12:a2:95:55:bc:7e:39:e2:5a:db:3e:c0:
f7:b3:4f:ec:6f:b5:3a:fd:65:0e:5e:1b:c1:f6:a2:
41:d3:a8:9f:d0:37:d4:d2:0f:9f:aa:b5:85:0f:c5:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:CB:B1:E1:3E:8A:A5:85:BC:52:F6:C5:8A:99:AD:91:9C:B5:E6:A2
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a333330303a3a2f33352d3335203d3e203631353837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3300::/35
Signature Algorithm: sha256WithRSAEncryption
30:51:0a:a8:f6:54:ad:98:b7:13:56:bc:5d:29:dd:bc:1d:9f:
78:c8:f2:fd:8f:94:50:d5:13:27:ef:70:81:d2:1b:43:40:14:
e0:25:ec:a2:6f:98:ae:0b:1e:1a:52:fe:cc:c4:f4:92:53:46:
0c:46:0e:0f:d1:69:8f:af:dc:4a:5b:8b:fe:dd:50:4b:a0:d7:
ef:44:e3:1e:58:4c:fc:3b:85:0b:78:d9:52:71:a1:eb:32:1d:
69:e0:a4:39:db:1d:fb:c4:82:07:61:75:01:37:6a:cc:b1:f4:
ba:f4:e0:08:ec:82:91:95:10:7c:a2:e8:83:b2:a0:b5:bf:7d:
c6:7c:9b:42:a5:4c:f3:8f:98:d4:23:d9:e0:21:08:32:f4:cf:
d2:a5:19:10:15:29:15:bc:a7:5a:90:5a:f4:e9:95:f4:76:c5:
bc:cd:49:69:a7:e2:38:c1:53:d2:7d:ae:61:6b:a7:d1:60:94:
05:fc:71:6a:58:df:37:93:7d:7e:a3:ca:84:85:45:79:61:a1:
8a:eb:2c:30:fa:56:d7:53:c6:d3:36:8a:32:51:0d:c9:cc:3d:
23:1a:a1:13:f3:35:8e:e0:16:57:35:af:33:1b:e1:ed:05:7c:
5a:76:b1:db:9d:ac:af:f0:14:65:55:93:59:de:76:84:da:ed:
dc:57:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:19:56 2025 by rpki-client