Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa
File: 323830343a6134343a3a2f33322d3438203d3e20323632363735.roa (raw, json)
Hash identifier: zYbpPiws9T0QyqdbCz9vwrHT0ZAj6pzS7d95o1WQtHM=
Subject key identifier: 2C:C0:09:3F:9B:C3:2C:1F:EB:F1:3A:3C:3C:59:B5:7B:8F:F5:E2:A4
Certificate issuer: /CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Certificate serial: 23D4F0A67E01F592EDF2C5A999D9B24E6C7DEB35
Authority key identifier: A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa
Signing time: Sat 18 Jan 2025 13:59:18 +0000
ROA not before: Sat 18 Jan 2025 13:54:18 +0000
ROA not after: Sat 17 Jan 2026 13:59:18 +0000
asID: 262675
IP address blocks: 2804:a44::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:d4:f0:a6:7e:01:f5:92:ed:f2:c5:a9:99:d9:b2:4e:6c:7d:eb:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3B6378C38DEEF029A12800A867DE629F832D92A
Validity
Not Before: Jan 18 13:54:18 2025 GMT
Not After : Jan 17 13:59:18 2026 GMT
Subject: CN=2CC0093F9BC32C1FEBF13A3C3C59B57B8FF5E2A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f1:c2:30:2c:75:0d:28:c5:ee:79:48:10:6b:
91:50:84:21:0d:35:41:f3:b6:b0:29:93:99:0b:b3:
a6:96:84:99:27:66:c0:40:1a:7d:f3:e7:7d:f4:b6:
1e:32:23:e5:42:f6:fe:f8:e1:01:d9:66:bd:74:53:
92:b6:54:5e:15:42:cf:a9:aa:3f:e2:c9:8f:a9:07:
20:2f:b7:0c:a1:2d:39:ce:82:74:7b:9b:ab:c5:0a:
8c:b8:c6:60:37:fd:2a:1e:ca:4e:62:db:cd:21:6a:
1d:99:d3:4f:df:9c:95:25:0f:7c:27:a3:6f:b2:ae:
f6:70:6b:06:35:b7:57:50:2a:12:28:ff:6d:c3:71:
bd:4a:44:82:bd:b4:e2:e9:de:14:50:08:9c:f4:06:
4a:a0:8d:20:37:29:fd:14:c6:55:3d:94:dd:77:38:
25:07:3a:33:fe:3a:ad:ac:a8:e6:52:a0:05:de:09:
a3:0e:e3:c5:e1:76:c5:b6:6f:f8:a0:08:a3:1a:51:
c1:11:03:e9:43:05:b3:e6:55:d1:ea:a7:75:78:1b:
fa:22:24:b6:63:b0:1c:c3:e2:00:59:97:6f:ec:20:
63:7b:c8:25:dc:10:12:83:b9:ca:ed:fe:db:1f:b0:
a6:ab:7d:0f:24:b2:35:57:9a:a7:f9:0d:23:a2:b4:
68:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:C0:09:3F:9B:C3:2C:1F:EB:F1:3A:3C:3C:59:B5:7B:8F:F5:E2:A4
X509v3 Authority Key Identifier:
keyid:A3:B6:37:8C:38:DE:EF:02:9A:12:80:0A:86:7D:E6:29:F8:32:D9:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/A3B6378C38DEEF029A12800A867DE629F832D92A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3B6378C38DEEF029A12800A867DE629F832D92A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/1/323830343a6134343a3a2f33322d3438203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a44::/32
Signature Algorithm: sha256WithRSAEncryption
2f:ec:23:6c:f3:3b:be:0c:6e:ef:06:cc:36:73:ea:0f:9d:f0:
35:84:e7:d1:bd:c9:17:f6:51:67:4d:e6:65:9f:d4:7a:3e:7e:
d9:4f:cc:ec:8f:a8:71:d4:7c:e6:39:24:a8:27:76:78:28:62:
55:66:0f:2e:4a:06:ac:58:7b:09:b5:6e:09:86:c1:df:74:98:
bc:9c:e7:6f:08:38:af:d4:db:52:29:4b:4b:ff:17:eb:51:1e:
4e:84:7a:a2:18:d0:6a:71:f0:43:41:ec:f7:9c:5a:01:08:b0:
f2:45:bd:c3:52:e9:c5:e1:02:28:6f:e0:6b:f2:d9:f6:61:a4:
9a:53:21:70:0a:0a:d5:9a:9a:65:64:01:aa:92:d9:5e:ac:78:
6e:42:4e:11:5f:68:ba:6a:37:fd:11:99:73:b8:ac:4f:d4:a2:
57:d9:40:f4:fc:10:d0:b2:a5:55:e8:3f:3a:1c:ed:1e:e0:86:
e1:74:69:6d:06:fc:d4:74:31:08:90:ff:aa:61:b9:17:05:14:
1f:82:8b:9d:11:9a:a8:b7:3f:bd:3c:5f:e2:5b:65:66:2b:4f:
22:5a:b4:37:4d:03:9b:b8:a7:b4:b2:ad:88:f5:22:32:7a:b8:
33:f6:3b:26:ff:6f:47:40:42:1a:e1:4e:05:f1:d1:b2:b5:12:
01:f1:c3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:09:19 2025 by rpki-client