Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa
File: 323830343a363465383a3a2f33322d3332203d3e20323639343537.roa (raw, json)
Hash identifier: ++wPJ3C/mJVmNLKg2RJpWh9Ctx5LS0gw+l1Ur9v3FUA=
Subject key identifier: C7:F3:A0:46:A1:FF:40:5B:0A:2E:E1:46:2F:A0:92:E6:AF:74:10:B4
Certificate issuer: /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial: 665631ECF19A4324119AB6A8F5319FA5C26E1F3F
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa
Signing time: Mon 17 Feb 2025 19:18:50 +0000
ROA not before: Mon 17 Feb 2025 19:13:50 +0000
ROA not after: Mon 16 Feb 2026 19:18:50 +0000
asID: 269457
IP address blocks: 2804:64e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:56:31:ec:f1:9a:43:24:11:9a:b6:a8:f5:31:9f:a5:c2:6e:1f:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Validity
Not Before: Feb 17 19:13:50 2025 GMT
Not After : Feb 16 19:18:50 2026 GMT
Subject: CN=C7F3A046A1FF405B0A2EE1462FA092E6AF7410B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:64:ac:7a:b3:9a:67:b0:e8:ac:b6:90:0d:
6a:21:99:2d:c0:db:4b:96:9f:2f:48:c0:7b:04:83:
25:18:c0:69:68:31:9e:94:0c:46:cd:f7:1f:ff:1c:
29:5d:6b:80:cd:67:98:3b:59:da:da:eb:3c:a1:68:
83:7f:e7:82:02:61:46:94:da:d8:6b:3b:2f:09:db:
5d:e9:06:e1:ac:a5:25:80:b1:85:91:e1:67:30:a6:
42:00:a0:e9:22:09:59:24:ab:0d:0d:11:fa:59:fd:
39:16:6d:ff:1a:37:84:29:92:1a:3d:52:9a:f4:2e:
5f:04:c8:4e:05:ba:4d:dd:d9:91:71:00:ea:6c:88:
64:4d:21:d3:e9:0e:a3:42:be:24:d5:14:70:45:c2:
8d:e9:a0:3a:55:d2:aa:a4:ac:de:14:cd:64:96:ce:
ad:95:42:66:7d:2b:8f:15:e4:84:ba:96:a0:95:19:
85:10:ae:40:e9:d2:9c:c8:6c:b1:bb:11:49:d8:6f:
f0:52:39:39:12:c1:ff:be:66:34:c2:4c:a4:7c:86:
81:af:63:ac:59:67:f0:a3:2c:c9:5b:eb:cf:e4:b3:
f2:ed:80:bd:ed:39:97:6a:2b:67:bb:f2:de:39:86:
d6:26:c3:3f:92:6c:98:35:ad:e8:98:2b:33:be:56:
bd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F3:A0:46:A1:FF:40:5B:0A:2E:E1:46:2F:A0:92:E6:AF:74:10:B4
X509v3 Authority Key Identifier:
keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a3a2f33322d3332203d3e20323639343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64e8::/32
Signature Algorithm: sha256WithRSAEncryption
3b:24:c8:6f:6f:00:ba:3d:a1:6a:ee:df:22:34:ce:81:16:93:
00:b8:74:93:73:58:ef:bb:c3:92:8d:5d:2b:f7:ae:4b:3b:1c:
89:c8:ff:f2:d6:13:d9:e0:10:98:1e:6c:a6:8c:48:68:a3:ad:
cb:8e:fa:44:6b:34:6a:2f:5c:d7:56:c3:07:5b:86:9b:1c:3d:
e9:6a:c0:b5:3e:21:80:b9:fb:bb:be:31:bc:1c:84:85:ec:84:
1b:74:cc:45:90:e1:bf:dc:5e:f1:77:13:d1:7c:21:27:6f:2f:
bd:3a:6c:9e:53:34:a9:3a:fa:fb:ee:5c:b2:8b:34:6e:d2:69:
f7:49:e0:28:33:ce:c2:7b:8f:fc:e7:40:91:4b:e9:9c:cc:4b:
10:ce:d2:7e:2a:04:e9:21:9b:2d:66:77:9b:db:71:6e:5a:33:
a2:44:7a:a1:8a:54:bf:51:44:8a:df:0e:25:cb:94:68:fc:be:
30:29:af:40:0e:13:f2:b0:d3:3a:da:e6:87:fc:23:67:8d:7c:
27:50:f9:a2:d7:40:89:a2:7c:fb:9a:f3:93:08:6b:84:14:a5:
66:bf:8a:8b:52:83:c4:c9:46:50:a7:22:4b:6c:ac:b2:d2:27:
a4:b1:e0:93:b6:90:b4:f9:6b:ab:e4:5b:03:85:d0:34:c8:d1:
3b:13:54:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:58:34 2025 by rpki-client