Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d313238203d3e20323731363730.roa
File: 323830343a376632383a3a2f33322d313238203d3e20323731363730.roa (raw, json)
Hash identifier: rEJbEe4GiL/wC+bTnJR7zsFa7Vk5+BLL4BflB1/Y6nE=
Subject key identifier: 85:BC:80:57:F7:AF:DF:B8:B2:8F:A6:4B:92:26:41:B9:12:C4:D6:10
Certificate issuer: /CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Certificate serial: 4D69F1B43A04FEBC6C04219D91AAA3CF8F67B2BA
Authority key identifier: DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d313238203d3e20323731363730.roa
Signing time: Tue 07 Jan 2025 13:28:12 +0000
ROA not before: Tue 07 Jan 2025 13:23:12 +0000
ROA not after: Tue 06 Jan 2026 13:28:12 +0000
asID: 271670
IP address blocks: 2804:7f28::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:69:f1:b4:3a:04:fe:bc:6c:04:21:9d:91:aa:a3:cf:8f:67:b2:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDBDF3956666958841B65B1975D5A1B71D720BC9
Validity
Not Before: Jan 7 13:23:12 2025 GMT
Not After : Jan 6 13:28:12 2026 GMT
Subject: CN=85BC8057F7AFDFB8B28FA64B922641B912C4D610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fd:1b:88:29:ff:94:f8:dc:7f:0c:a2:5f:ce:
c0:3b:f5:7a:2f:8a:5b:73:ef:a2:36:c4:86:ca:b7:
b8:a1:b7:8a:c2:15:fa:a3:18:c9:93:c1:49:13:a7:
2b:2e:53:7b:0f:4a:96:93:71:c1:68:6b:c6:b4:95:
f9:21:6c:e3:0c:df:9c:e1:4f:4c:0f:63:c4:a4:7c:
1a:30:22:ea:32:23:c4:2f:39:ee:a4:33:bf:28:7c:
c0:1a:54:6a:64:1e:86:cb:34:13:7d:ca:cf:0a:20:
5b:f2:ce:ac:5f:73:64:d7:41:76:73:93:b0:e5:c2:
bb:15:ed:d0:0e:fa:4f:16:ed:e3:91:a9:48:b9:4f:
5c:49:d0:f7:6f:54:59:3d:e5:3d:a3:53:54:2e:ff:
ae:db:1b:57:71:4b:74:b1:ee:de:e2:76:b8:60:1b:
9e:58:a6:fe:f3:4d:61:b5:e5:cd:ea:42:7e:ec:dd:
b1:07:12:ee:70:ff:e7:34:d9:21:8b:49:cc:e9:85:
e2:4b:83:ae:3e:de:55:34:1e:31:73:a7:9b:b5:14:
f5:0d:72:6a:8c:d4:c0:5b:3c:c5:a1:6f:61:28:6a:
8b:a1:2b:71:e1:60:6f:7b:41:00:e9:9d:d0:0c:09:
89:ff:8b:3e:05:fa:be:25:9c:f1:f7:8d:19:fb:26:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:BC:80:57:F7:AF:DF:B8:B2:8F:A6:4B:92:26:41:B9:12:C4:D6:10
X509v3 Authority Key Identifier:
keyid:DD:BD:F3:95:66:66:95:88:41:B6:5B:19:75:D5:A1:B7:1D:72:0B:C9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/DDBDF3956666958841B65B1975D5A1B71D720BC9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDBDF3956666958841B65B1975D5A1B71D720BC9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d313238203d3e20323731363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7f28::/32
Signature Algorithm: sha256WithRSAEncryption
8a:6e:65:58:dd:0d:28:70:f2:6f:3f:fb:d3:e7:22:c0:a2:6d:
d3:e0:bb:21:c8:bc:8c:da:17:91:08:99:01:ef:45:f8:92:48:
c0:2c:0c:7b:d0:76:c1:23:53:2e:f6:7d:19:a3:9e:95:e7:66:
00:03:ad:85:76:00:b3:7b:8f:e3:04:b3:cb:c2:58:ae:8f:d2:
42:a9:35:b8:c4:16:5d:4a:d0:d6:ad:85:2f:a3:49:ed:ad:56:
bf:96:e1:51:7e:94:44:ef:1d:d5:86:18:9c:6c:9f:c1:a3:7e:
55:3f:cb:fc:fd:66:5d:64:20:8d:ac:5d:d0:41:64:ed:78:d9:
71:d0:d6:36:bf:53:ac:c5:e0:03:2b:01:8e:b5:10:70:1b:3f:
c8:6f:39:42:7a:9c:a8:44:aa:67:aa:43:f3:62:5b:d5:d8:1c:
7f:b3:d7:74:10:38:e0:ca:0c:20:28:d0:93:39:02:5b:60:8d:
18:63:9b:ab:25:22:13:cb:71:8e:53:e0:df:77:d5:61:d8:2f:
ba:a7:63:d2:8f:95:39:a1:9e:47:31:28:4d:2f:3d:82:ff:91:
9e:48:54:fc:00:53:de:bd:df:f6:cf:46:60:47:8e:40:e6:01:
69:35:cb:e1:a8:f7:82:36:44:1e:f1:86:07:6e:ec:4d:9e:25:
55:84:25:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:13:35 2025 by rpki-client