Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f33322d3438203d3e20323634353235.roa
File: 323830343a323066633a3a2f33322d3438203d3e20323634353235.roa (raw, json)
Hash identifier: u8bA8o/+fLdK2R65qXMmeq/8v+VxzaXmGkUnNOOemQk=
Subject key identifier: 64:76:7E:6B:E8:31:F6:BB:95:65:20:D2:F5:A3:D1:C9:08:F3:3B:FE
Certificate issuer: /CN=4766F3CA43125EDED2BA274155576386D9101EDC
Certificate serial: 4BA4BDD818AFEB74AA38FA23ED25F15F5C15FFBB
Authority key identifier: 47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f33322d3438203d3e20323634353235.roa
Signing time: Mon 03 Feb 2025 20:34:14 +0000
ROA not before: Mon 03 Feb 2025 20:29:14 +0000
ROA not after: Mon 02 Feb 2026 20:34:14 +0000
asID: 264525
IP address blocks: 2804:20fc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:a4:bd:d8:18:af:eb:74:aa:38:fa:23:ed:25:f1:5f:5c:15:ff:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4766F3CA43125EDED2BA274155576386D9101EDC
Validity
Not Before: Feb 3 20:29:14 2025 GMT
Not After : Feb 2 20:34:14 2026 GMT
Subject: CN=64767E6BE831F6BB956520D2F5A3D1C908F33BFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b6:36:f9:4d:13:9b:40:de:6f:44:d0:78:39:
0d:b2:5e:8a:1b:0e:a3:db:43:3a:43:9b:66:c3:43:
42:4f:50:43:9a:06:77:de:e4:4a:21:da:81:90:93:
d2:7a:aa:ea:a0:6d:c8:62:48:ef:d6:93:e7:85:d5:
97:4b:bd:5a:cc:b7:f7:06:5c:52:09:38:4c:9a:82:
92:28:f5:4d:73:dd:bb:27:10:8d:da:9f:92:5c:e4:
36:77:14:82:05:fe:7c:4b:8e:93:17:9b:54:0d:09:
4b:21:aa:4b:b0:86:7a:60:63:a6:c0:ba:b0:5c:17:
52:3d:38:2d:1f:bb:bc:74:cb:a1:83:ad:82:8e:6c:
4a:f8:c6:1e:35:94:91:1e:70:68:38:bc:0b:ef:78:
ad:84:58:24:6d:44:19:78:55:3f:5f:15:e2:e7:2a:
c1:39:a4:ee:3a:97:9f:40:89:16:10:3f:5e:f2:8c:
41:fe:6c:74:52:e7:81:a6:d6:fd:79:aa:43:4e:f8:
f7:58:85:dd:16:ed:cb:92:df:2a:3f:41:0d:ec:1b:
ee:a4:a5:4e:5b:76:a0:cc:d1:1e:c4:ae:79:70:9c:
89:18:ef:15:8e:d4:c2:11:4a:85:a7:8d:f8:7a:6c:
4e:28:5f:8e:c5:8d:c2:c7:3b:b5:71:8c:9d:8c:42:
7b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:7E:6B:E8:31:F6:BB:95:65:20:D2:F5:A3:D1:C9:08:F3:3B:FE
X509v3 Authority Key Identifier:
keyid:47:66:F3:CA:43:12:5E:DE:D2:BA:27:41:55:57:63:86:D9:10:1E:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/4766F3CA43125EDED2BA274155576386D9101EDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4766F3CA43125EDED2BA274155576386D9101EDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f33322d3438203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:20fc::/32
Signature Algorithm: sha256WithRSAEncryption
91:4a:cf:8a:2a:33:f2:b4:38:ec:0f:39:26:d6:93:e2:a8:6f:
90:74:1c:7c:e7:2c:73:34:c7:93:fb:7d:fb:a7:9d:63:b4:d4:
b5:f5:40:33:2f:b9:8c:6a:c5:c4:f7:75:da:80:22:9c:44:96:
2e:96:51:2d:24:40:89:f2:7c:6e:a2:16:00:9d:76:9c:aa:61:
3f:c3:71:3e:00:26:aa:44:08:1d:8b:8c:e8:e0:0d:7e:65:b1:
f3:3e:f8:cc:42:9b:f0:dc:fa:50:dd:7a:0f:96:3b:9b:12:5b:
b4:ed:59:f8:e5:49:3d:ff:bc:d2:60:85:f2:f6:2f:87:cb:12:
05:75:16:82:20:1f:92:cd:03:1a:f0:f1:f1:3a:60:1d:6c:ba:
32:18:ee:11:ab:06:1e:77:68:37:14:57:46:62:c3:5e:cb:5c:
72:27:4b:6e:44:bc:6b:36:14:da:5b:8b:5a:df:7c:c4:c2:5d:
ae:e9:f8:b7:5d:5c:d6:f2:a9:13:f4:dd:74:c6:3b:32:e4:af:
70:1a:dc:48:bd:3b:c6:51:6e:61:b7:5f:6c:f4:c2:16:3a:07:
41:d8:1c:4c:36:87:1d:09:11:5b:17:74:f2:19:3a:66:63:4d:
82:6f:83:e5:cf:58:a3:5f:dc:4d:0e:1d:85:92:ff:26:75:5f:
28:76:f2:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:18 2025 by rpki-client