Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa
File: 323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier: s7GHftJgmnb0Ox5u7yZ1ooWguJ3TedA38LPFU5a+UD8=
Subject key identifier: C4:D7:7F:02:FC:BD:BA:83:DB:E0:AB:BB:E4:0B:4E:D4:90:FC:9D:55
Certificate issuer: /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial: 3194FAC840334A6898780DB3DF275208993D2168
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa
Signing time: Tue 30 Apr 2024 22:05:40 +0000
ROA not before: Tue 30 Apr 2024 22:00:40 +0000
ROA not after: Tue 29 Apr 2025 22:05:40 +0000
asID: 264525
IP address blocks: 2804:20fc:300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:94:fa:c8:40:33:4a:68:98:78:0d:b3:df:27:52:08:99:3d:21:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Validity
Not Before: Apr 30 22:00:40 2024 GMT
Not After : Apr 29 22:05:40 2025 GMT
Subject: CN=C4D77F02FCBDBA83DBE0ABBBE40B4ED490FC9D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:55:17:24:5e:4b:88:56:6e:dd:a9:5e:9e:22:
c6:12:08:4e:64:47:93:b0:82:eb:ff:2b:34:ea:e4:
ca:81:84:f1:36:d8:22:de:76:b2:a4:1b:c9:cc:f0:
90:7f:e0:6c:ff:cf:d0:72:a0:8d:91:9e:22:3a:51:
02:17:ed:00:89:7e:23:21:88:2c:b3:23:8c:b5:fc:
f6:f0:ba:de:2d:88:17:f2:34:af:79:e7:59:00:c2:
71:40:42:3b:ac:6d:b8:a8:4e:ed:c8:b1:05:eb:02:
45:bd:d1:ce:c1:57:38:40:88:5f:e0:b2:f9:be:59:
6a:e2:18:7b:8d:01:bf:1f:b3:e9:14:9d:e1:1c:6f:
3e:bd:aa:0b:44:fe:f9:dd:08:b1:f3:bc:c5:7a:c4:
ef:1c:82:92:fc:6c:66:b2:68:33:bd:1b:63:b1:6f:
e3:28:48:6b:41:01:65:dc:29:a2:e4:bc:08:38:c6:
a9:f4:88:f9:d6:f7:c1:90:26:32:c2:e3:34:dd:d6:
4e:6c:fd:cb:4f:48:d7:e4:20:be:91:19:3b:fb:c0:
f7:20:0e:9c:6b:27:13:b3:2a:c3:fd:cb:b1:33:51:
a2:44:13:60:e3:14:68:c9:cd:53:97:80:95:a7:5f:
a4:1d:5f:a1:41:7e:0b:8a:88:dd:46:a8:cf:a6:cb:
6a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:D7:7F:02:FC:BD:BA:83:DB:E0:AB:BB:E4:0B:4E:D4:90:FC:9D:55
X509v3 Authority Key Identifier:
keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3330303a3a2f34302d3430203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:20fc:300::/40
Signature Algorithm: sha256WithRSAEncryption
0a:6a:82:db:58:1e:85:4b:99:c7:ef:df:b1:cf:ef:5a:b0:90:
28:20:6e:9a:4e:3d:01:33:44:f5:0a:07:a7:43:34:3f:0d:09:
7a:15:2d:d1:00:2c:f7:9c:21:ba:39:ca:1e:de:d0:d0:b0:d2:
ab:35:2f:eb:3f:a7:1d:dd:48:a8:41:2f:0d:e5:dc:9b:c1:40:
34:c5:97:ee:95:b4:25:b2:29:3a:24:1b:c0:07:b0:da:df:a5:
03:f7:18:e8:5a:ed:fa:2b:76:51:ba:2b:5d:ae:97:05:c9:e4:
f2:3a:48:a4:c5:32:23:9a:60:24:2f:86:10:05:78:c8:5b:b7:
31:b5:50:64:55:98:17:02:47:20:39:fa:44:af:3a:65:c9:64:
34:1d:8f:e4:e3:bd:31:14:31:89:6f:4f:45:cd:a0:ba:47:7a:
bd:d7:f3:19:2e:da:39:1a:09:12:3f:9e:81:99:8c:53:8b:6a:
83:6a:5a:5a:0a:25:3b:a9:c0:db:5c:eb:d1:7b:c0:d8:95:dc:
3c:26:42:68:72:34:97:42:90:9c:43:26:88:6c:84:76:a6:72:
47:ea:47:f6:56:a9:74:c6:6c:70:9f:24:17:ad:ac:8b:25:00:
3f:dc:80:ed:9f:07:5e:18:ad:49:07:fb:38:bb:02:38:a7:a0:
e3:70:3b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:03:49 2025 by rpki-client