Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
File: 323830343a3265383a3a2f33322d3333203d3e20323632383437.roa (raw, json)
Hash identifier: 4YyJHYpFVLpW+bnq+MvdftkHpLNJG7xZWJtspEjZqf8=
Subject key identifier: 79:42:7C:5D:40:FA:39:A2:89:7B:34:C7:EC:DF:65:A0:16:B4:5D:9E
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 5CB2BD226722C12D0B4C6892B825EAAFA61DE7BA
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:40:06 +0000
ROA not before: Sun 11 Dec 2022 18:35:06 +0000
ROA not after: Sun 10 Dec 2023 18:40:06 +0000
asID: 262847
IP address blocks: 2804:2e8::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:b2:bd:22:67:22:c1:2d:0b:4c:68:92:b8:25:ea:af:a6:1d:e7:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:35:06 2022 GMT
Not After : Dec 10 18:40:06 2023 GMT
Subject: CN=79427C5D40FA39A2897B34C7ECDF65A016B45D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:a2:5f:d8:7b:c9:76:3f:fa:50:1a:30:6e:
96:e8:90:ce:ac:92:81:0f:c5:3a:e7:9d:57:1a:85:
ae:44:83:a4:63:ea:90:b2:9d:53:80:c0:9f:17:19:
88:57:3d:b6:48:eb:37:44:64:ea:26:f2:ee:3b:37:
cf:e2:19:d0:96:e0:ce:59:a8:2d:0c:d0:2b:79:d2:
f6:36:dd:3b:ef:23:35:1c:bd:2d:19:60:19:7a:2d:
f3:81:8d:a7:12:1f:97:5c:4f:a6:3d:27:a0:c6:7c:
0b:9d:c7:f9:48:fd:2b:76:e0:2e:57:6e:8d:57:07:
38:b9:c3:99:c6:b1:17:57:0e:c2:3c:4c:0d:cd:d2:
d8:b6:5d:63:62:82:a8:03:55:0e:bb:c3:63:ef:bf:
af:ab:d6:f1:b4:b9:1a:30:5e:72:42:e2:67:a5:45:
17:f0:3b:ea:1c:cc:27:02:d2:cb:5c:1e:d2:40:e5:
0f:ef:d2:4e:a1:cf:25:1c:1c:ee:8a:85:1a:e9:d6:
8a:ba:f4:62:5d:03:8c:e9:c1:aa:82:43:e3:bb:d6:
af:01:11:23:20:93:7b:c2:a0:ab:0a:bf:2d:ec:d8:
eb:84:5a:33:85:aa:43:f2:68:07:47:39:5b:51:41:
0e:bf:b4:bb:52:3f:9e:94:cb:3c:5c:67:dc:22:53:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:42:7C:5D:40:FA:39:A2:89:7B:34:C7:EC:DF:65:A0:16:B4:5D:9E
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a3a2f33322d3333203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8::/32
Signature Algorithm: sha256WithRSAEncryption
8e:c6:1b:53:45:ff:fb:84:44:4c:17:d2:5a:27:39:44:ba:18:
e4:ab:d2:55:9d:d4:e0:e9:3f:7b:e1:2d:af:f7:b0:ae:00:52:
58:2f:35:ee:09:75:c3:d3:4c:32:65:5d:d3:6d:ec:ef:1f:e9:
ae:7a:0d:d7:45:11:fa:2b:36:66:71:cf:98:6d:af:18:d8:2c:
d6:0c:77:5e:bb:72:0e:cc:0c:ca:85:26:40:0a:6f:0f:f9:01:
57:0c:59:6e:ae:64:56:aa:f2:c6:a5:c5:24:78:9c:b6:16:26:
6a:bd:fa:8f:84:a5:93:5e:a4:cc:83:19:38:42:9d:d4:8d:ea:
ee:20:bc:8b:88:76:30:e0:9c:6d:59:44:d8:3e:ae:e5:5b:c0:
fc:68:7d:f1:f5:77:14:fd:b5:65:ef:b8:5e:14:0e:00:0f:ff:
72:27:9b:89:31:79:53:14:fe:e5:8b:37:2c:69:bd:1d:0c:57:
f2:10:05:68:89:79:a3:77:8a:b2:ac:36:5c:5a:4b:d9:29:8d:
91:50:28:a3:29:5b:3a:26:b5:97:28:06:02:81:6d:5a:63:93:
47:32:81:a2:14:be:f0:aa:18:df:95:e6:bf:3c:a5:c7:5a:b2:
59:6a:ad:52:5b:0f:b6:71:3d:a4:21:39:4c:8a:58:aa:20:90:
41:d2:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:03:49 2025 by rpki-client