Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
File: 323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa (raw, json)
Hash identifier: QRSglukboD6uejxLdMdsGEvMYHN4fXKdKHIduqjtjO0=
Subject key identifier: 42:6B:43:F5:6E:CA:5C:7E:CB:E3:7C:BB:BD:EF:21:C0:40:43:3C:CA
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 7ACA6EA580C2DFE6FE1CB593D1556CFB0A406E8C
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:40:11 +0000
ROA not before: Sun 11 Dec 2022 18:35:11 +0000
ROA not after: Sun 10 Dec 2023 18:40:11 +0000
asID: 262847
IP address blocks: 2804:2e8:2::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:ca:6e:a5:80:c2:df:e6:fe:1c:b5:93:d1:55:6c:fb:0a:40:6e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:35:11 2022 GMT
Not After : Dec 10 18:40:11 2023 GMT
Subject: CN=426B43F56ECA5C7ECBE37CBBBDEF21C040433CCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:61:64:73:7a:9d:f1:64:79:0e:a0:4c:06:
4d:4a:32:7a:4d:ae:3a:eb:2a:6a:1b:82:41:22:09:
f3:5d:69:07:a0:8f:e2:5b:a0:65:20:1d:d8:62:10:
0b:c6:ba:5d:8b:6d:76:11:ef:ec:f2:2f:cc:4a:97:
09:aa:da:ce:3f:ed:b2:d4:d2:d6:e0:da:0d:de:4e:
27:d0:71:18:02:a6:63:ec:7d:6a:26:b8:c8:36:3c:
bd:d1:c2:2f:5c:8a:76:e9:fd:35:a2:cd:ff:8c:2c:
88:83:5c:cf:86:e4:ac:a7:2c:5a:b0:79:18:73:6e:
ba:d1:23:08:d9:b4:0d:56:09:08:ee:1f:4e:8e:6c:
5e:ca:3d:50:70:02:d1:c5:b8:6c:c0:0d:3c:42:e2:
3d:22:3b:d1:2e:46:b6:9b:00:2e:a7:4d:b0:98:c9:
7e:e2:35:85:97:18:73:fe:e7:12:8b:92:1a:55:d8:
f5:d9:a9:84:d3:f5:7b:ee:b1:fc:af:1a:8c:5c:95:
eb:2e:9d:32:80:2a:80:4d:fc:f1:74:60:b3:c4:21:
71:dd:e6:c2:07:62:c0:bb:a5:c6:b8:50:b2:e9:7f:
52:3f:7f:44:bb:36:de:0c:b2:85:93:cc:53:02:24:
14:30:1c:f5:58:00:46:40:e7:1f:53:08:56:29:26:
6d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:43:F5:6E:CA:5C:7E:CB:E3:7C:BB:BD:EF:21:C0:40:43:3C:CA
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a323a3a2f34382d3438203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8:2::/48
Signature Algorithm: sha256WithRSAEncryption
e6:cb:47:ad:49:bb:73:fc:dc:6f:38:95:d6:84:f0:fb:30:13:
19:e0:fb:3d:f9:54:8e:53:1d:a1:86:3c:31:8e:4e:4c:e8:29:
ff:3f:42:94:f3:a8:69:28:6f:69:e5:a1:fb:ad:42:c8:f2:41:
8b:24:7e:4d:df:b6:6a:90:67:06:d4:c7:ff:f4:6c:92:ce:91:
8b:0e:86:69:3c:fe:f0:bc:cd:ca:99:4a:23:44:4f:71:0e:89:
d9:e1:2a:0b:9d:d7:77:32:8d:32:71:4b:86:5e:46:21:87:6c:
a1:61:ed:46:c1:79:8d:63:06:71:2f:0f:35:04:5f:e6:66:c1:
3d:2e:ea:9b:90:a2:2a:9c:be:54:85:ff:30:7b:1b:7c:79:72:
b3:d0:bd:da:57:eb:62:23:3f:dd:81:32:5e:2d:a1:fb:88:09:
31:42:e4:07:28:28:18:fc:61:4d:c7:72:a2:7c:17:df:f9:4d:
76:de:59:b7:e8:d7:d5:66:8d:a3:0a:92:e4:29:df:b7:d6:f1:
38:b2:2d:04:d9:0c:c7:6e:df:92:16:7d:fe:ce:08:1f:fe:f8:
18:41:e2:b5:2b:e6:6e:ed:7a:35:06:c0:9c:46:b1:59:b2:be:
86:48:a8:4d:4e:64:13:a0:00:d9:5d:cb:a0:f5:68:3e:ca:c7:
35:57:22:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:19:51 2025 by rpki-client