Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3335203d3e20323632363735.roa
File: 323830343a6134343a3a2f33322d3335203d3e20323632363735.roa (raw, json)
Hash identifier: suseDuEwF5n3f3HiYs3sIlG95XThG+wpaZDgVU4GRpE=
Subject key identifier: 27:35:6C:E1:94:4A:0A:83:3E:C4:02:B2:15:76:FE:47:5E:99:73:B1
Certificate issuer: /CN=8CE072C70BE0F9CDCB8AC1B39B64F87772C86479
Certificate serial: 6F432BD103F2E03BFECAC9579C6940D38FA65A68
Authority key identifier: 8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3335203d3e20323632363735.roa
Signing time: Mon 02 Dec 2024 13:50:37 +0000
ROA not before: Mon 02 Dec 2024 13:45:37 +0000
ROA not after: Mon 01 Dec 2025 13:50:37 +0000
asID: 262675
IP address blocks: 2804:a44::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:43:2b:d1:03:f2:e0:3b:fe:ca:c9:57:9c:69:40:d3:8f:a6:5a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8CE072C70BE0F9CDCB8AC1B39B64F87772C86479
Validity
Not Before: Dec 2 13:45:37 2024 GMT
Not After : Dec 1 13:50:37 2025 GMT
Subject: CN=27356CE1944A0A833EC402B21576FE475E9973B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9b:94:40:f0:64:18:c5:43:c2:1a:c1:75:66:
e2:13:d6:75:df:32:2b:61:9c:64:22:17:96:1c:8b:
e9:06:8b:1e:e7:3b:7c:a0:f7:18:dd:82:04:1e:de:
15:05:91:e8:53:49:91:d8:2c:f1:e4:0c:4f:f0:36:
11:01:06:d6:70:08:62:57:2a:20:fd:c0:04:b6:ff:
cf:fd:5d:a7:1e:b2:45:94:dd:77:b4:d7:9f:b6:d7:
3f:8b:ae:fd:25:e5:2f:44:82:6b:52:ac:34:8d:88:
0f:8e:f6:06:46:74:2a:55:fc:d6:6b:13:6a:20:10:
56:57:40:7d:70:f4:6b:47:bc:20:3c:8a:e3:12:81:
be:6f:ac:f3:59:fd:d5:74:5f:2e:a0:c7:63:c8:a6:
6f:4e:21:ef:01:5e:c2:c6:be:43:c5:5d:e2:48:f8:
81:2c:7e:b7:2b:dd:87:aa:6d:10:43:90:a5:38:e5:
b0:b2:a4:51:bd:34:9a:bf:8d:ea:e7:7f:1a:a7:01:
bf:bf:da:64:2a:48:0f:d2:6e:72:45:47:b9:6f:43:
24:44:14:b7:c4:46:02:8b:15:b0:f2:ca:4a:07:59:
a0:e3:bd:dd:9d:bc:47:bb:d3:61:4d:a1:e0:2d:32:
2c:fb:2d:d8:b9:4c:85:0d:8e:47:d7:0a:e8:5f:c8:
96:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:35:6C:E1:94:4A:0A:83:3E:C4:02:B2:15:76:FE:47:5E:99:73:B1
X509v3 Authority Key Identifier:
keyid:8C:E0:72:C7:0B:E0:F9:CD:CB:8A:C1:B3:9B:64:F8:77:72:C8:64:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8CE072C70BE0F9CDCB8AC1B39B64F87772C86479.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3335203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a44::/32
Signature Algorithm: sha256WithRSAEncryption
60:cd:b7:70:07:f0:1c:86:e6:65:62:43:17:3c:91:ec:a5:8d:
6d:a1:67:80:fd:1d:d3:0d:d4:a1:e2:76:cf:bb:b9:fe:b9:6d:
e2:53:34:50:cb:2c:a4:b9:98:4d:74:9e:e8:6f:e3:4d:b9:65:
10:b0:9e:88:06:d3:55:ce:35:3f:d0:da:36:da:af:d9:9a:84:
da:d2:90:56:bd:be:82:18:44:3c:2c:ad:cf:fc:90:7c:fb:1f:
08:e5:24:94:d8:04:65:3a:e0:50:fe:1d:d7:1c:b3:b3:d2:b2:
d0:4f:80:70:ca:1f:88:f8:43:08:a3:fd:fd:f1:df:f9:78:3f:
8c:c1:11:9d:e2:ad:ab:6a:d0:f9:9d:5c:f0:96:22:2e:bb:76:
d0:94:7e:8e:9e:9a:27:5b:86:18:9c:b5:b8:ec:98:79:fa:32:
c0:5c:96:f6:13:7b:da:35:b0:74:70:fd:12:f5:7a:f7:ed:4e:
68:e8:95:6a:25:0e:df:e7:36:4f:eb:c6:c0:90:93:01:35:78:
e7:e3:e4:fe:04:c1:49:16:5b:57:95:be:66:ba:35:be:8d:e7:
ec:75:72:18:50:14:21:43:d5:e2:44:ec:7b:ac:e4:bb:50:bd:
53:35:d4:76:ef:d1:4b:1f:a3:36:06:59:c4:57:fe:ad:bb:a5:
c6:73:f4:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:36:17 2025 by rpki-client