Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3334203d3e20323636313732.roa
File: 323830343a336264303a3a2f33322d3334203d3e20323636313732.roa (raw, json)
Hash identifier: nq3ax6qsRzXjj8zKt2p6DkEpgdnFSsbGK/6TMFYDTY0=
Subject key identifier: 6D:54:AA:75:69:E5:61:33:12:B7:64:27:C6:8B:9E:05:3B:32:6E:0F
Certificate issuer: /CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
Certificate serial: 4A21FF4324050F345C5B1DDF9A25D8D2526CEAFB
Authority key identifier: 57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3334203d3e20323636313732.roa
Signing time: Sat 30 Nov 2024 13:48:32 +0000
ROA not before: Sat 30 Nov 2024 13:43:32 +0000
ROA not after: Sat 29 Nov 2025 13:48:32 +0000
asID: 266172
IP address blocks: 2804:3bd0::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:21:ff:43:24:05:0f:34:5c:5b:1d:df:9a:25:d8:d2:52:6c:ea:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=573D7E4FEE62BCF84142824A34979BB0A13D1E07
Validity
Not Before: Nov 30 13:43:32 2024 GMT
Not After : Nov 29 13:48:32 2025 GMT
Subject: CN=6D54AA7569E5613312B76427C68B9E053B326E0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:38:e2:70:fe:fc:ae:a6:1a:e5:7b:7b:99:42:
b6:54:60:06:06:17:02:3e:90:25:70:01:d4:37:1b:
0f:49:23:07:07:bb:4d:3e:62:56:99:00:ec:75:0e:
22:62:c6:26:58:cb:78:cf:b9:7d:c7:33:a9:9a:4d:
86:00:ce:3a:a3:93:64:bd:41:68:58:42:58:05:1e:
db:0c:d3:ad:e0:f7:53:5d:c1:c9:25:b0:5a:af:d7:
c8:08:14:65:5e:f6:61:8e:bf:67:e1:13:67:f6:09:
59:d0:d8:4b:b1:a3:3f:8a:a4:50:de:fb:c2:3f:6e:
3c:c5:ed:aa:3a:b1:95:47:f9:2d:e1:9d:b6:9e:df:
5b:0e:80:e7:37:87:e3:80:01:5a:96:1c:1c:6a:8c:
99:ed:35:71:c4:98:b5:61:86:99:13:ff:20:ac:c1:
f2:64:ba:01:cd:ea:5b:6f:55:59:53:60:6d:bb:16:
02:13:af:cc:9b:df:2a:68:b7:ac:09:0f:b4:0f:a4:
3c:89:ff:0f:e6:f3:c5:87:d2:a3:47:95:d7:0b:e3:
70:4b:32:ba:0e:46:d0:c3:cb:3d:b1:0b:81:63:32:
a4:3b:e2:01:18:48:7f:d8:d0:c8:43:ed:27:e2:36:
dd:70:7f:3f:2f:a2:57:ab:12:11:a6:65:00:3a:03:
dc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:54:AA:75:69:E5:61:33:12:B7:64:27:C6:8B:9E:05:3B:32:6E:0F
X509v3 Authority Key Identifier:
keyid:57:3D:7E:4F:EE:62:BC:F8:41:42:82:4A:34:97:9B:B0:A1:3D:1E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/573D7E4FEE62BCF84142824A34979BB0A13D1E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/573D7E4FEE62BCF84142824A34979BB0A13D1E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3NLKvUcRxgSG5iujURwXgtbgPwirf593fxDj8yxys8p7/0/323830343a336264303a3a2f33322d3334203d3e20323636313732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3bd0::/32
Signature Algorithm: sha256WithRSAEncryption
37:d4:c3:8f:01:39:b8:1b:e3:d9:3b:b8:6d:d0:8f:17:b3:03:
2b:73:da:2a:24:60:d0:0f:3e:8c:d7:ff:b2:3e:03:b7:c8:67:
c6:95:e0:88:3d:49:57:55:cb:23:70:94:44:4b:60:36:e6:42:
ab:0c:51:5e:3d:6f:61:f0:89:98:a1:e0:94:17:9b:40:b5:4c:
50:1a:08:8d:80:95:9d:37:31:a9:b0:e6:98:47:d2:43:91:d6:
ba:80:4a:d3:9b:c6:e1:92:91:6c:de:e1:f8:a8:0f:56:aa:2a:
47:f6:b2:3c:89:75:33:13:39:47:1e:c8:58:34:49:7b:b2:4c:
32:31:d0:f9:36:12:69:1e:c6:79:16:9e:71:b9:33:44:0a:19:
92:3b:c5:a1:45:68:8b:3c:e9:4d:34:99:0a:c8:ef:98:11:92:
74:25:f2:f0:aa:ea:1c:30:61:92:51:a4:93:16:f3:f2:2d:c6:
82:0d:5f:04:2b:29:93:4e:92:a2:2a:30:c6:e2:6d:c8:89:1b:
4e:b7:f2:ad:68:94:cb:5d:86:57:dd:11:a1:0f:9f:95:ea:c4:
27:4a:5b:38:e0:79:bc:56:5b:bf:7d:23:9c:11:9b:32:24:2a:
6d:83:30:db:b7:5e:c0:2f:dc:25:0d:2e:d6:c6:9d:5f:8d:3b:
4f:48:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:18 2025 by rpki-client