Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa
File: 323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier: RwEtBtq59Y+AF3r6e1r6eIocsKAFIoR/tmKK7VLa2a4=
Subject key identifier: 11:A7:E3:0E:19:A5:25:F9:D1:39:28:BA:09:1B:07:22:00:A2:F9:5B
Certificate issuer: /CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Certificate serial: 0C8768A398AAC45994D7FCF019C209EE099C312D
Authority key identifier: B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa
Signing time: Mon 24 Apr 2023 11:53:38 +0000
ROA not before: Mon 24 Apr 2023 11:48:38 +0000
ROA not after: Mon 22 Apr 2024 11:53:38 +0000
asID: 61589
IP address blocks: 2804:48f0:ffff:f706::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:87:68:a3:98:aa:c4:59:94:d7:fc:f0:19:c2:09:ee:09:9c:31:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8011591E1548C11D84F9CA27D54AEC1DCD4901D
Validity
Not Before: Apr 24 11:48:38 2023 GMT
Not After : Apr 22 11:53:38 2024 GMT
Subject: CN=11A7E30E19A525F9D13928BA091B072200A2F95B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:e7:7e:c0:14:5c:b6:54:96:29:fb:8a:0f:
32:ac:cf:17:b0:af:45:a1:80:88:ba:fe:d1:4c:41:
7a:93:c0:fe:64:87:db:53:4b:52:b6:96:c9:2c:40:
3b:16:5d:3b:8a:fe:d5:f4:41:f4:08:47:2f:b2:34:
63:5a:9a:97:ca:cb:f5:d0:94:c8:a3:5d:7d:d7:2d:
96:6b:bb:da:0e:4e:17:0f:fc:c5:24:fe:c6:2e:9a:
e0:9f:61:11:5c:bd:5a:09:1a:72:56:20:f1:65:2b:
c7:87:93:54:d6:25:e2:65:08:df:a2:fa:38:8b:e2:
c9:c9:d9:14:be:be:19:43:21:48:ba:ec:20:df:b4:
12:53:86:19:c9:88:75:45:fc:a7:1f:46:fa:09:cd:
cf:a0:67:08:af:0d:c5:60:20:9b:fd:8d:58:5b:7f:
22:8d:6d:a0:d0:bd:9d:9b:4e:17:fb:e2:8c:ee:86:
4d:d6:5d:7f:24:bd:c4:4a:62:f4:c2:02:f6:50:ad:
14:ad:10:d8:ca:89:33:3c:f0:2f:19:cd:75:e3:1f:
8a:e3:cc:9b:e9:cd:5c:ec:37:cb:2d:f5:86:56:f4:
6b:13:21:9b:50:37:00:e7:f9:e5:d6:8c:dd:29:a6:
06:66:a0:40:2e:75:43:bc:d2:74:df:f5:27:0c:02:
25:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:E3:0E:19:A5:25:F9:D1:39:28:BA:09:1B:07:22:00:A2:F9:5B
X509v3 Authority Key Identifier:
keyid:B8:01:15:91:E1:54:8C:11:D8:4F:9C:A2:7D:54:AE:C1:DC:D4:90:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8011591E1548C11D84F9CA27D54AEC1DCD4901D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25mazXqyw4UcpcwkPdQbP1WjykwP7khjXFd91wzxLXe6/0/323830343a343866303a666666663a663730363a3a2f36342d3634203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48f0:ffff:f706::/64
Signature Algorithm: sha256WithRSAEncryption
8e:4c:58:c6:a5:e4:c6:02:cb:7d:27:7e:11:2e:9b:65:f6:2c:
06:3b:42:34:bb:8d:de:13:95:57:4a:ae:f6:2e:b5:a3:8a:77:
02:7a:c1:8e:89:8c:0e:f0:f0:d3:34:32:de:d4:5b:a1:6b:72:
ee:34:5a:5b:86:46:0e:b2:e9:18:cf:ff:36:10:f3:47:a3:26:
94:4b:20:97:0a:3c:9b:00:a0:c9:db:38:d5:83:aa:93:44:a6:
89:ce:01:62:96:72:ab:c3:bd:9e:4e:45:ee:52:49:d2:21:94:
3e:cb:dc:6e:2f:21:5b:c5:59:54:9c:6d:62:86:91:a3:d1:59:
6b:4b:3a:50:ca:87:02:65:f6:bd:c6:5c:84:aa:9e:49:6f:9f:
70:8a:88:a5:09:3d:bc:95:1e:c8:27:e9:78:25:3e:e9:86:80:
40:d1:14:62:88:70:5d:c9:33:99:08:48:8e:ce:7d:5d:b8:28:
c5:91:1c:b0:96:8c:1c:42:e2:d5:b2:e2:72:4b:90:37:c5:d9:
23:d3:3e:2a:a8:39:d1:d2:e0:65:f2:7c:ab:70:e1:1b:82:4d:
26:b1:77:d4:14:a7:d2:11:57:fa:2f:11:52:c4:ad:14:9a:a0:
41:8e:1f:b1:9a:1d:6c:10:02:4a:2a:7f:6e:63:e8:05:de:d8:
12:ec:59:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:48:38 2025 by rpki-client