Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa
File: 323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa (raw, json)
Hash identifier: pqv4VLA0lsvw8YQTW/Y8Fd4bkRpP8EAd/XAD3VhDKn4=
Subject key identifier: 43:AE:B1:C7:5A:74:0C:88:18:48:A6:99:1B:5F:E4:4F:D6:19:00:DE
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 615140CFD412AC4443174C0D4718E5AE224EE7F1
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:40:43 +0000
ROA not before: Sun 11 Dec 2022 18:35:43 +0000
ROA not after: Sun 10 Dec 2023 18:40:43 +0000
asID: 262847
IP address blocks: 2804:2e8:8020::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:51:40:cf:d4:12:ac:44:43:17:4c:0d:47:18:e5:ae:22:4e:e7:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:35:43 2022 GMT
Not After : Dec 10 18:40:43 2023 GMT
Subject: CN=43AEB1C75A740C881848A6991B5FE44FD61900DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a9:7b:18:47:1e:44:1b:cf:da:f7:eb:0a:03:
be:d1:d1:75:37:f7:f6:b0:55:6f:ee:7e:e0:b8:4f:
75:7f:44:00:27:b3:0d:26:0f:7a:0c:98:73:03:cf:
e5:0c:e8:0f:9d:6e:de:1d:4b:0d:eb:5d:fe:19:08:
2d:0f:3c:cc:65:c4:54:97:42:2f:6b:32:be:43:b4:
cd:a6:f7:2b:dc:5f:a2:03:e8:9f:ad:f8:eb:2e:16:
f4:12:6f:36:0e:0f:4a:ee:b1:3c:f2:8f:f3:68:db:
7e:c2:e3:d5:ac:bd:96:37:42:23:37:b6:96:45:ad:
dd:dd:17:93:0d:5d:a5:73:97:ec:67:ad:a2:35:93:
cc:d7:e2:95:7d:fa:5e:3d:f3:82:a2:13:c2:c4:c8:
8b:d9:23:54:cf:cc:b0:dc:0c:80:c0:ee:b2:af:1b:
ae:6a:bf:00:ec:29:65:fd:35:e3:60:27:36:a6:97:
28:ff:52:65:17:ae:6b:81:8d:8a:a7:99:e9:f9:c6:
97:de:22:c9:dd:96:c2:33:a5:e1:44:ec:d1:be:37:
ab:25:a6:34:19:43:c1:3e:c5:13:f1:d8:03:73:c5:
87:3c:62:06:53:a9:c0:7b:24:08:d7:2a:d2:b4:ed:
4e:b4:71:12:00:bf:ed:7c:08:de:95:93:41:43:f7:
d7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AE:B1:C7:5A:74:0C:88:18:48:A6:99:1B:5F:E4:4F:D6:19:00:DE
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383032303a3a2f34332d3433203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8:8020::/43
Signature Algorithm: sha256WithRSAEncryption
a8:13:9c:b0:4b:52:96:a9:40:b1:f6:50:7a:9f:ce:cf:7f:f1:
85:70:85:00:7b:c1:b9:b9:d6:3a:a7:23:69:05:9c:69:46:59:
61:6d:ea:72:9f:74:e5:83:9f:76:eb:d5:c2:fa:52:5c:44:f2:
ef:fc:45:d3:65:72:59:1c:d8:22:5b:0a:84:8b:1a:f6:48:33:
fa:f7:75:3c:41:db:18:35:bd:6d:98:99:6e:56:b1:d2:57:9d:
15:76:36:33:62:d0:b3:12:39:7d:69:0c:6c:e3:12:86:c8:a0:
52:2c:f0:f5:ad:1d:31:47:65:fc:4d:bf:8f:10:b1:64:63:28:
3d:c8:a8:5f:a4:7e:c7:cc:42:a5:8f:07:e4:9e:5a:28:64:2b:
2d:b5:0d:57:d8:a7:fb:03:64:25:c2:ee:4f:d8:9b:04:aa:2e:
d8:03:f9:67:d7:3b:2b:69:00:46:0d:48:39:19:5d:60:2b:f5:
be:4a:13:c8:05:dc:80:db:c6:ce:ef:26:39:51:fd:af:48:95:
64:cf:9e:c1:0f:a4:58:d4:b7:0c:9c:9b:54:7f:28:68:53:b8:
7f:81:46:d2:d9:c5:6e:4f:c1:82:58:9e:c8:b7:ad:1c:5f:e0:
1d:a6:b1:39:78:35:51:c0:9e:44:82:b2:7a:dd:c1:45:47:32:
fb:c0:25:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:10 2025 by rpki-client