Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a3a2f33322d3332203d3e203238323230.roa
File: 323830343a35343a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier: LSAG8ssdqdM2XEgZc82ajO1IQKme/j22+wtyKWl7F4o=
Subject key identifier: B8:66:41:C8:58:04:48:98:DD:66:8A:33:AC:43:AF:1A:E0:C2:CA:57
Certificate issuer: /CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Certificate serial: 4CC2E3DC062A0A4C8130C24812E8B07AF27FD2E6
Authority key identifier: 36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a3a2f33322d3332203d3e203238323230.roa
Signing time: Mon 08 Apr 2024 20:05:21 +0000
ROA not before: Mon 08 Apr 2024 20:00:21 +0000
ROA not after: Mon 07 Apr 2025 20:05:21 +0000
asID: 28220
IP address blocks: 2804:54::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:c2:e3:dc:06:2a:0a:4c:81:30:c2:48:12:e8:b0:7a:f2:7f:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3690C92F4666D7240C14B1F115D3032C6CC0CED0
Validity
Not Before: Apr 8 20:00:21 2024 GMT
Not After : Apr 7 20:05:21 2025 GMT
Subject: CN=B86641C858044898DD668A33AC43AF1AE0C2CA57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:16:d9:dc:f6:df:3f:ef:4a:e6:7d:01:f1:c6:
20:75:f0:38:70:dd:34:d4:59:4e:c6:90:87:bf:bb:
ff:8b:cd:1e:f0:c3:74:88:f4:00:54:ca:1b:d4:78:
de:f2:50:bb:d3:df:b2:24:0a:0d:5f:56:2c:dd:3b:
85:09:e5:4b:fc:a0:5e:89:c4:50:e6:3f:0c:dc:4e:
2f:79:9a:fc:4d:7c:d5:77:a9:cd:de:31:c1:03:30:
19:93:a3:a9:70:ae:82:0d:47:bd:2b:63:b3:3f:ee:
f8:71:52:26:80:04:e7:e8:6b:f2:be:53:32:ad:ed:
21:30:c2:e2:91:c9:5c:3c:cc:ee:90:bb:23:62:ef:
0e:2c:d2:3f:e6:e6:67:49:12:bf:dd:f7:c8:06:34:
a9:15:06:c8:e6:cb:5d:f4:d4:90:58:1d:6f:90:96:
dd:59:08:d0:7a:93:35:31:ee:83:4a:94:6a:4b:b7:
93:90:c6:56:3c:68:aa:1d:50:82:68:42:84:66:77:
69:93:c8:d5:3a:ab:40:af:3a:72:80:5f:1a:69:9b:
9b:b5:67:2d:07:0a:98:e0:a0:6b:f4:69:5d:e8:c3:
44:62:5e:10:13:b9:64:04:cb:a1:40:a3:42:d6:1e:
84:34:4c:81:55:f4:5c:c8:f6:4b:86:3b:76:ca:17:
b1:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:41:C8:58:04:48:98:DD:66:8A:33:AC:43:AF:1A:E0:C2:CA:57
X509v3 Authority Key Identifier:
keyid:36:90:C9:2F:46:66:D7:24:0C:14:B1:F1:15:D3:03:2C:6C:C0:CE:D0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/3690C92F4666D7240C14B1F115D3032C6CC0CED0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3690C92F4666D7240C14B1F115D3032C6CC0CED0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dGAPJP65efeCTUa84hw5RGRbZGPW2qRyTvgahgjxEeB/1/323830343a35343a3a2f33322d3332203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:54::/32
Signature Algorithm: sha256WithRSAEncryption
42:a8:1c:18:10:e9:5f:99:3b:19:a3:b0:9b:59:dc:d7:51:1c:
0f:b8:92:6f:5b:01:22:45:bf:2c:88:68:9e:55:1c:ab:c8:e6:
fb:1d:68:4d:60:1e:a3:73:95:88:64:46:ad:06:f0:be:5b:a7:
76:4a:f9:67:47:35:ba:5f:86:59:70:9d:44:aa:5e:99:66:9d:
69:d1:32:f5:3f:bf:dc:f8:f3:c5:03:23:cb:5b:54:fa:9a:40:
28:f8:04:c3:59:1a:61:c0:81:98:75:63:57:40:f0:c6:65:1e:
19:06:0a:df:b9:40:07:ab:d3:b1:c8:fe:d6:37:ff:a1:c8:15:
75:d5:34:1d:4a:2b:2b:a1:54:f1:6d:cb:4a:2d:c2:8f:12:b2:
f3:ca:3c:4b:d8:f8:12:17:6c:a4:af:f3:19:4a:26:fb:4d:16:
59:84:1c:b1:5d:5d:19:e2:32:69:ba:4e:c3:18:db:e5:0c:5e:
f8:b3:52:52:53:12:22:a9:82:d7:8a:66:bd:43:c0:49:14:55:
3e:48:0f:54:ea:55:48:f4:fb:b5:96:f9:ff:58:ed:cb:d9:4c:
83:57:87:60:b4:07:8d:49:e7:bf:dc:60:53:ca:5d:79:dc:f5:
a4:f7:e0:fa:67:c7:81:64:c6:25:1d:e2:5f:d7:c9:6c:3f:9a:
1a:a9:d3:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:27:52 2025 by rpki-client