Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa
File: 323830343a326264343a3a2f33322d3438203d3e20323635313738.roa (raw, json)
Hash identifier: vH2IukB3s1HNcV0gtj+xWD4jOYfVYlgfbOcM9S7uV34=
Subject key identifier: A8:CC:8F:8F:DD:A6:25:E6:6A:ED:7A:86:41:64:C5:A3:95:45:B1:F7
Certificate issuer: /CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Certificate serial: 17EA5C898C519139C45D39653B3CC9B671AE5D2C
Authority key identifier: F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa
Signing time: Thu 04 Apr 2024 16:40:16 +0000
ROA not before: Thu 04 Apr 2024 16:35:16 +0000
ROA not after: Thu 03 Apr 2025 16:40:16 +0000
asID: 265178
IP address blocks: 2804:2bd4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ea:5c:89:8c:51:91:39:c4:5d:39:65:3b:3c:c9:b6:71:ae:5d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1235457026EAF53D000A07A2EA16F0BF1D5A588
Validity
Not Before: Apr 4 16:35:16 2024 GMT
Not After : Apr 3 16:40:16 2025 GMT
Subject: CN=A8CC8F8FDDA625E66AED7A864164C5A39545B1F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a2:19:07:fd:31:9e:af:f2:86:84:92:1b:d2:
4f:1e:dc:51:35:89:e2:db:dc:d3:16:27:f8:9d:47:
d3:15:72:54:7a:52:99:7d:af:6a:bc:dd:0f:0a:8a:
ed:1a:76:8a:c2:34:a7:e6:5b:6b:30:ff:1b:2c:a0:
f6:92:f3:93:bb:c4:55:cb:2b:fd:02:6d:97:e2:16:
7b:99:27:31:1e:9c:76:23:c6:a0:2a:7e:a3:07:f4:
6e:ba:da:01:10:ec:7a:67:99:a0:1f:e0:e4:ae:46:
2a:5e:d1:76:0d:1a:50:1f:44:81:05:33:3b:44:d4:
fa:39:b5:96:5a:9a:7e:4f:a3:97:50:96:26:29:7f:
c7:93:05:3c:44:0d:da:f5:70:3d:46:a1:33:61:7b:
98:f5:de:04:02:18:d3:b0:04:41:5f:0c:93:61:ad:
b8:ac:5c:dd:af:5d:0c:b7:66:1e:68:1d:ca:35:0f:
5d:ad:c2:fa:40:3f:97:1b:53:5d:01:07:e1:a6:09:
5c:6a:ab:e7:e6:9e:ad:c4:1b:55:19:64:6c:af:82:
c7:66:47:af:fa:11:6f:5c:2f:e1:d6:fc:d2:97:aa:
0c:ef:88:9a:85:d0:3e:10:46:5c:8a:49:1f:3c:2b:
fe:f2:ff:47:fc:17:83:7e:0e:62:ac:65:1a:0a:1a:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CC:8F:8F:DD:A6:25:E6:6A:ED:7A:86:41:64:C5:A3:95:45:B1:F7
X509v3 Authority Key Identifier:
keyid:F1:23:54:57:02:6E:AF:53:D0:00:A0:7A:2E:A1:6F:0B:F1:D5:A5:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F1235457026EAF53D000A07A2EA16F0BF1D5A588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RGrVih9BSRwyL2Ufe5mT7tXisaw1cAjMXWjLuUxg6cm/1/323830343a326264343a3a2f33322d3438203d3e20323635313738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2bd4::/32
Signature Algorithm: sha256WithRSAEncryption
5e:49:1d:4a:ef:c4:4b:4b:39:71:e3:42:5b:af:ea:07:9f:93:
32:80:4c:92:2b:ab:40:00:ae:db:7c:fa:ad:38:55:31:5a:5a:
80:72:65:5a:6d:52:2d:8b:a8:d6:40:1c:81:e9:da:ed:cd:3c:
33:ad:88:de:38:63:f3:ee:9e:26:98:3c:af:a6:7a:62:8f:97:
4f:d9:6a:1e:24:ad:5a:fb:ad:97:b6:3b:19:89:f2:1e:eb:8e:
58:c9:1d:7b:6e:34:32:c0:bb:f4:e7:3d:df:92:ad:c8:49:44:
8a:4e:b2:41:7a:87:07:15:55:be:83:9b:0c:75:c2:5c:f0:40:
cb:0e:d7:1f:04:db:5c:d1:99:65:fe:93:7c:c5:43:91:43:5d:
c3:18:ee:c5:b2:6e:ce:92:25:25:05:a3:5c:be:fe:1d:9e:dc:
c0:a4:80:e8:2d:29:75:9f:31:af:43:e3:db:a5:a7:d7:de:5d:
9c:1c:82:37:f5:d9:1a:d5:dc:cf:3b:88:1d:a5:97:9a:f3:10:
98:b9:ec:b0:68:4e:ca:0a:e9:f0:22:9a:d3:27:c5:c0:fe:60:
b6:10:1e:f6:35:b2:5d:df:e3:92:79:4b:f9:06:43:63:37:f8:
a1:4b:e3:40:68:f4:c0:96:eb:68:62:5b:d9:90:cc:fd:1e:c0:
0f:6d:ad:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:25 2025 by rpki-client