Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa
File: 323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa (raw, json)
Hash identifier: ld8qazitQ8z4E+6P3vcLfwMKNQkkaJ/e21CJ04bLW+o=
Subject key identifier: 97:FF:AE:90:AF:F2:6D:D1:B2:1B:41:89:43:FD:89:83:46:69:20:E6
Certificate issuer: /CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Certificate serial: 38AC46EE6E00714CB9C8A3E651BE5AE6F6307EF5
Authority key identifier: C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa
Signing time: Mon 23 Sep 2024 20:54:35 +0000
ROA not before: Mon 23 Sep 2024 20:49:35 +0000
ROA not after: Mon 22 Sep 2025 20:54:35 +0000
asID: 262740
IP address blocks: 2804:2bf0:a101::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ac:46:ee:6e:00:71:4c:b9:c8:a3:e6:51:be:5a:e6:f6:30:7e:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8AD5989C9692CE29DB9C3FE40448A47622C42CB
Validity
Not Before: Sep 23 20:49:35 2024 GMT
Not After : Sep 22 20:54:35 2025 GMT
Subject: CN=97FFAE90AFF26DD1B21B418943FD8983466920E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f0:67:20:94:cd:b0:66:93:53:30:d9:0d:2e:
a4:ef:a3:16:1f:e7:f6:bb:da:07:f3:b1:dd:b7:68:
3d:92:60:df:36:45:87:6e:c9:ed:5a:b4:31:8f:84:
3f:79:54:c9:16:4f:76:34:34:bc:1c:09:e3:44:75:
82:9d:8f:e9:45:10:ef:16:2e:72:25:73:78:f4:9e:
42:a3:a9:da:61:86:a9:9c:ad:4b:98:19:a8:db:14:
b4:54:67:7c:bd:48:76:d3:b5:64:91:00:ef:af:34:
b6:6a:a3:af:89:73:51:5e:f2:64:d5:de:3c:12:4e:
de:2b:58:11:64:22:f2:0c:29:98:d0:77:f8:94:00:
9f:6a:45:d8:5a:c2:1b:6e:da:7c:b9:43:c8:68:80:
b9:6a:5d:58:d5:38:9c:a3:51:56:3c:41:0f:7e:1d:
30:a8:68:7d:aa:dd:55:43:b2:8b:f2:67:e6:f5:c5:
4a:99:e9:0c:75:1f:c9:ce:5a:ba:c2:bf:57:f3:48:
06:75:fa:79:44:da:fb:0a:80:eb:a1:e4:15:e4:c9:
f8:f0:70:e7:53:ad:31:ec:5e:bf:b9:26:c4:be:5c:
82:ac:ef:9b:63:9f:bd:2d:23:60:bc:2f:90:1c:d9:
c4:6f:fe:29:38:25:d1:65:e3:c7:79:e4:c4:93:08:
3b:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:FF:AE:90:AF:F2:6D:D1:B2:1B:41:89:43:FD:89:83:46:69:20:E6
X509v3 Authority Key Identifier:
keyid:C8:AD:59:89:C9:69:2C:E2:9D:B9:C3:FE:40:44:8A:47:62:2C:42:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C8AD5989C9692CE29DB9C3FE40448A47622C42CB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mrdiLsQBkLJi1SCnYv5QQs41PSiDfRiPMSUBiXYowmN/0/323830343a326266303a613130313a3a2f34382d3438203d3e20323632373430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2bf0:a101::/48
Signature Algorithm: sha256WithRSAEncryption
81:67:ca:fa:b2:ec:97:b6:df:95:f1:66:78:a9:a4:63:78:ec:
75:87:66:61:cc:cf:a5:bc:8e:2a:f9:1d:23:32:b3:b4:18:ad:
68:01:8d:ea:93:c2:5a:12:bd:9c:16:c0:26:0c:93:2d:0b:48:
92:dc:4f:99:3c:c9:4e:26:8b:4b:f7:21:eb:4c:68:8c:2f:50:
4f:2b:b3:34:9a:b2:51:78:9b:7f:6d:2f:ec:35:6b:ee:f6:e5:
7b:4b:02:e9:26:2e:71:49:40:db:9d:d7:0d:1e:37:56:4c:79:
52:b4:a7:79:47:4f:f6:9f:59:39:65:50:97:66:8c:c6:8a:e1:
0c:c6:88:49:b6:ad:54:36:ef:ac:82:4f:83:2d:62:c4:c6:c9:
31:93:16:8b:fd:e7:fe:e8:58:e7:9a:0d:bf:73:f6:d1:ab:e4:
bf:42:1e:33:52:a6:18:50:fa:16:ba:a9:f1:ee:7b:70:e7:43:
56:d8:ba:11:ea:70:56:e8:cb:cc:58:ac:d4:66:6f:4a:fb:b6:
97:6b:b1:56:f8:95:d8:a5:45:6d:95:f3:32:8e:72:0c:7e:c4:
c3:88:93:b6:ad:91:2e:ef:6a:d9:4b:60:0c:35:d4:26:31:c8:
f4:33:f6:24:db:5e:04:4f:ca:b6:2c:33:59:56:c0:d0:c1:af:
d8:ca:86:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:49:00 2025 by rpki-client