Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33342d3334203d3e203238363130.roa
File: 323830343a6463303a3a2f33342d3334203d3e203238363130.roa (raw, json)
Hash identifier: 9fjfLBp17f+9znjUr6eJlqr8i9554ll1qgr8bDTf4mQ=
Subject key identifier: F6:6E:D3:16:8F:83:DD:31:1A:75:BB:CF:9B:33:4D:DB:FB:16:4A:13
Certificate issuer: /CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
Certificate serial: 2FBC1361FF2B35F9D73D92D40D035EB68C8C4C39
Authority key identifier: E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33342d3334203d3e203238363130.roa
Signing time: Wed 27 Dec 2023 17:35:16 +0000
ROA not before: Wed 27 Dec 2023 17:30:16 +0000
ROA not after: Wed 25 Dec 2024 17:35:16 +0000
asID: 28610
IP address blocks: 2804:dc0::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bc:13:61:ff:2b:35:f9:d7:3d:92:d4:0d:03:5e:b6:8c:8c:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A
Validity
Not Before: Dec 27 17:30:16 2023 GMT
Not After : Dec 25 17:35:16 2024 GMT
Subject: CN=F66ED3168F83DD311A75BBCF9B334DDBFB164A13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:68:5a:35:b5:24:6b:e1:97:48:11:bf:a7:75:
04:f4:65:96:8c:3e:c0:f1:bc:24:60:f2:2f:25:1a:
3c:ac:82:9a:2e:f3:5d:0c:42:fe:35:2d:c0:c5:8a:
d5:08:66:55:3b:32:6b:6b:b1:29:68:39:c0:49:74:
56:b8:f4:d8:59:20:01:0e:ac:6c:9c:10:0f:b7:70:
30:92:ff:58:6e:43:1c:4a:84:6c:c9:3d:c2:9f:89:
2a:05:1a:6b:05:2b:b2:c1:1b:f9:50:e2:c8:21:6f:
d8:65:25:6e:de:38:75:e2:a3:14:77:5b:03:39:f9:
e0:df:ac:00:9c:49:2b:35:f8:f8:4b:62:c2:35:00:
11:b1:97:28:8e:1e:60:15:5c:cf:06:31:9c:a9:50:
ea:16:92:cf:45:9e:a3:06:09:cc:5f:cb:4d:44:56:
bf:2a:82:44:16:ff:d6:91:f3:8b:39:f2:ba:7c:81:
04:12:ac:1e:5e:41:a2:02:c4:ff:e2:84:1c:5e:0f:
14:77:44:b9:54:7b:09:f4:b4:ae:e9:f3:af:50:9e:
a8:b6:b0:d3:22:bb:87:a3:1d:e3:d8:55:bc:73:85:
8a:d2:b8:d6:e4:84:b8:ba:ef:39:52:33:8b:c6:dd:
80:d5:8c:cd:cd:53:ed:0b:f6:88:f3:05:43:a2:75:
8e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6E:D3:16:8F:83:DD:31:1A:75:BB:CF:9B:33:4D:DB:FB:16:4A:13
X509v3 Authority Key Identifier:
keyid:E3:0F:23:C8:79:2C:39:E2:DA:52:F7:E0:AD:9F:88:64:F1:3B:5E:7A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E30F23C8792C39E2DA52F7E0AD9F8864F13B5E7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2f2wkF9wXYaDpFJbBZifR25kFGU6EDkCY5GKdi86gZkH/0/323830343a6463303a3a2f33342d3334203d3e203238363130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:dc0::/34
Signature Algorithm: sha256WithRSAEncryption
20:fa:a1:af:4c:fc:bd:4f:13:04:41:25:e4:6e:1b:c9:19:5a:
05:b4:62:4b:67:23:71:3d:d3:74:ee:97:e4:60:6e:17:ba:58:
a4:80:c7:16:12:5c:37:62:01:2a:27:25:98:25:09:4b:98:8f:
e8:ba:00:db:22:8f:eb:94:96:a6:cf:fd:b7:9d:33:f0:4b:89:
60:d6:e7:67:2c:b8:47:78:56:8c:79:60:7b:34:dc:d4:8f:5d:
60:36:bc:af:e6:44:d9:11:22:93:3a:33:c9:b0:c4:9a:4f:c6:
58:9a:21:fa:82:82:d5:49:9c:24:58:48:b1:e8:31:95:31:6f:
c4:63:6b:c1:cd:1d:81:bb:8b:09:ff:51:53:95:18:ed:3f:d7:
7e:69:aa:7f:c6:16:be:6b:02:63:86:0b:8e:69:6e:3b:cc:76:
a3:66:5d:b6:8e:a7:d8:7f:c2:9b:69:a3:96:88:a8:3a:94:58:
96:a9:da:91:ee:f8:08:d3:26:f8:9c:5a:d7:b6:49:be:9a:75:
a7:6b:2e:82:85:46:b6:49:30:5f:f2:b9:30:4b:28:00:34:12:
ca:1a:f2:f4:f2:dd:84:87:ab:77:9a:99:9b:48:8f:d4:bb:08:
f2:13:06:33:08:48:9e:b5:e5:38:e5:dc:1f:03:b5:45:d7:fa:
cf:14:e8:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 13:12:09 2025 by rpki-client