Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
File: 323830343a6139633a3a2f33332d3333203d3e203532383938.roa (raw, json)
Hash identifier: FOe1gdaX2pZYVrr+qqdIOZPbk68pLa/dzLzy6gXBcTU=
Subject key identifier: 7E:68:E2:53:D7:33:BC:80:66:80:7A:31:33:04:2D:C3:98:B5:B7:C1
Certificate issuer: /CN=198E6997B7790B601CE9B8657001F896E66D3D74
Certificate serial: 2F12B55143EB4B3FA0425E5EA1D0169377492D57
Authority key identifier: 19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
Signing time: Tue 10 Dec 2024 11:50:21 +0000
ROA not before: Tue 10 Dec 2024 11:45:21 +0000
ROA not after: Tue 09 Dec 2025 11:50:21 +0000
asID: 52898
IP address blocks: 2804:a9c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:12:b5:51:43:eb:4b:3f:a0:42:5e:5e:a1:d0:16:93:77:49:2d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198E6997B7790B601CE9B8657001F896E66D3D74
Validity
Not Before: Dec 10 11:45:21 2024 GMT
Not After : Dec 9 11:50:21 2025 GMT
Subject: CN=7E68E253D733BC8066807A3133042DC398B5B7C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1e:c4:9e:e9:ca:b2:06:31:9a:e2:6a:5d:08:
2f:1c:64:3a:ec:c5:a5:b2:af:99:8b:6b:bb:f0:b8:
a8:44:a1:a3:b3:fb:fc:98:fc:ab:b3:d0:3b:0e:77:
de:b1:89:2c:1a:87:b0:af:03:ef:96:59:85:f6:6a:
bc:62:a1:68:60:c4:bf:60:80:3f:f7:f5:c3:82:8b:
50:c6:89:ab:90:55:f6:5f:86:44:4d:a5:2d:2f:6a:
49:15:69:96:32:00:b2:95:65:62:e4:41:db:e9:ef:
6a:8a:ff:75:54:c1:df:22:21:c0:81:23:65:da:1b:
0d:80:54:92:a3:66:bf:59:93:12:18:46:12:7d:63:
2d:b7:21:e7:ff:89:d4:16:b2:6f:e6:fa:42:ad:12:
95:2c:a4:c3:ec:ab:1a:28:cb:5a:33:ac:59:7a:5e:
ca:60:48:2b:0a:c8:9b:c9:fa:76:28:c5:a4:e8:dc:
34:b4:df:31:da:e3:97:ae:f1:0d:a0:16:20:2c:8d:
0d:46:1d:0e:36:b7:8f:cc:bd:1d:c5:d5:98:9e:05:
ee:9a:a7:29:4f:e1:47:4f:46:a9:3e:d5:ef:3f:93:
51:a4:6a:de:02:ec:c2:c8:e4:83:bd:9f:0f:f2:90:
60:6e:2a:d6:4c:bf:f8:fe:64:8d:ac:83:48:59:d8:
77:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:68:E2:53:D7:33:BC:80:66:80:7A:31:33:04:2D:C3:98:B5:B7:C1
X509v3 Authority Key Identifier:
keyid:19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/198E6997B7790B601CE9B8657001F896E66D3D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33332d3333203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a9c::/33
Signature Algorithm: sha256WithRSAEncryption
a7:77:ed:a4:0e:5d:7a:73:cf:36:9b:33:f6:47:09:19:a2:73:
76:ee:82:97:33:85:ff:a3:8f:a5:8c:5b:34:b5:ff:45:11:38:
bb:22:3d:24:3a:ff:68:10:1b:21:3d:df:8f:b9:a9:6d:e5:b2:
44:ea:9e:b9:8d:97:0d:b1:79:22:cd:03:bb:0f:8e:80:85:9c:
0e:21:3e:04:d4:6b:16:fb:29:85:68:59:a5:6b:18:0a:d9:f6:
fe:9d:45:1b:e8:22:bf:cf:58:a3:ca:2a:72:19:03:71:15:66:
ab:51:d3:8d:b6:0b:2a:cb:c9:c5:d3:51:69:8f:aa:53:a2:a0:
47:3d:ef:25:bd:de:6b:fe:39:9f:b8:06:67:3a:10:5b:ab:42:
0a:da:c2:0e:47:46:ba:e1:bb:5e:df:1a:f3:99:a3:6f:db:e6:
5f:d2:66:4b:61:c4:bf:93:00:b9:d1:ed:37:d1:77:85:c6:86:
ea:fb:6f:f7:59:71:b8:fb:ed:d3:b6:52:09:12:20:e1:2f:aa:
f6:8d:48:41:a6:2a:84:98:a4:84:74:12:9f:5f:a0:0a:40:b0:
7b:cf:86:35:72:e8:73:57:45:50:ec:5d:3e:8b:2e:7a:09:43:
ea:92:a0:bf:fb:68:c2:b6:b7:16:87:dc:ba:bb:e5:64:e2:6e:
42:32:1e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 21:01:19 2025 by rpki-client