Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
File: 323830343a313763633a3a2f33322d313238203d3e20323633323532.roa (raw, json)
Hash identifier: k+fcDEgAcH19H2ZMeX8Wy3GyjPtollDjfiUOwCete7o=
Subject key identifier: 11:4F:0E:D2:65:FD:62:0D:EA:81:87:C7:EE:63:89:C5:BC:B6:DC:E0
Certificate issuer: /CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
Certificate serial: 120C832B1C3C92C5DC3083637195A03135487710
Authority key identifier: 23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
Signing time: Fri 24 Jan 2025 13:36:52 +0000
ROA not before: Fri 24 Jan 2025 13:31:52 +0000
ROA not after: Fri 23 Jan 2026 13:36:52 +0000
asID: 263252
IP address blocks: 2804:17cc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:0c:83:2b:1c:3c:92:c5:dc:30:83:63:71:95:a0:31:35:48:77:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23C2D57C49C7C40A3D2573BC3A41D088A1E86C97
Validity
Not Before: Jan 24 13:31:52 2025 GMT
Not After : Jan 23 13:36:52 2026 GMT
Subject: CN=114F0ED265FD620DEA8187C7EE6389C5BCB6DCE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:22:96:62:c0:d9:b8:23:77:a9:d0:86:ac:36:
0a:7e:95:e2:5b:4c:c9:74:2f:71:5f:76:02:9f:47:
f6:ad:3a:e9:6d:28:22:59:94:8f:fe:82:93:4e:78:
cb:e4:a3:c7:56:d8:2d:43:20:fd:8a:24:0e:b0:5c:
4a:a6:fa:82:91:50:d2:66:37:5a:6c:e4:cb:96:d4:
cc:68:0a:fb:3e:56:ed:08:72:cd:ba:69:74:e8:de:
90:27:2b:35:3c:e9:e1:fb:4c:48:58:ea:8e:b1:89:
e0:0d:9f:e0:b6:3e:77:c4:37:42:8e:68:f1:2a:18:
9f:1f:73:19:d3:b3:76:d3:c7:c6:49:69:61:3a:7f:
b9:bb:ee:3d:f9:26:72:93:d1:b6:48:e8:9d:9f:75:
2f:3b:63:4e:98:4b:74:b3:42:f9:8c:e8:9e:b4:8b:
99:82:49:57:35:65:d7:64:a2:d1:76:b5:33:ec:ce:
d9:4f:5f:13:b5:f0:bc:6c:21:95:8a:fe:5f:2f:b4:
7f:85:2c:7f:65:46:2e:11:72:a1:eb:d7:c3:5a:69:
3c:cc:de:11:6b:74:c8:aa:b7:59:e6:7c:17:36:4e:
c0:b7:7c:81:36:4c:2b:06:e1:0e:a5:5b:43:92:62:
f1:bd:bf:0c:12:28:e7:5b:64:aa:c7:69:24:10:83:
28:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4F:0E:D2:65:FD:62:0D:EA:81:87:C7:EE:63:89:C5:BC:B6:DC:E0
X509v3 Authority Key Identifier:
keyid:23:C2:D5:7C:49:C7:C4:0A:3D:25:73:BC:3A:41:D0:88:A1:E8:6C:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23C2D57C49C7C40A3D2573BC3A41D088A1E86C97.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2qosEFHVQbeQvy8iktdNzpWNHKcB1zeV4mSd6F1ea1WN/0/323830343a313763633a3a2f33322d313238203d3e20323633323532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17cc::/32
Signature Algorithm: sha256WithRSAEncryption
2e:2d:03:f6:37:0e:f7:66:c1:5a:c9:5c:aa:0b:1c:72:01:66:
f4:0b:02:39:61:b5:81:7e:36:0c:90:78:d6:9b:20:0d:b5:cd:
d8:34:c8:8a:41:ee:67:43:4e:2c:4e:da:63:dd:78:20:61:20:
0a:f9:3c:8d:3f:cc:ba:c8:a4:d1:88:32:45:05:01:6d:2b:29:
7b:a3:a1:55:76:26:6a:13:06:36:47:50:67:62:9c:ab:14:85:
d6:1f:95:de:d4:e9:22:84:db:b6:cf:b7:65:01:f6:21:90:11:
ed:f1:49:d0:2e:4d:72:a1:9b:47:7f:fd:cb:75:07:b5:a3:32:
ab:24:a2:a0:38:14:ef:90:cb:76:4a:64:b3:5d:07:5e:02:b7:
65:37:c2:ab:9f:ad:3c:e0:ef:7d:de:9e:6b:52:86:48:1b:52:
66:d9:04:60:b3:b0:92:8c:0e:06:20:8f:37:41:41:6c:a9:26:
6a:ce:09:54:ff:d8:05:a3:82:89:20:c4:16:11:15:39:c6:bc:
3c:c8:3c:6c:9b:bf:67:d7:b2:85:0a:9a:bd:25:2d:54:d6:3a:
37:5d:af:46:f7:80:c0:dc:bf:b4:bb:a1:23:92:a6:7b:7b:85:
34:e7:cf:35:9c:54:d0:4c:31:eb:51:d5:a7:e1:58:29:a4:ce:
fe:27:9b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:11:29 2025 by rpki-client