Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa
File: 323830343a366465633a3a2f34342d3434203d3e20323730353634.roa (raw, json)
Hash identifier: w3zmGqy+JDgkxd83s2ajzuEY3oBsNJxkT9J14xfXl7I=
Subject key identifier: 83:4D:F8:FB:42:DF:A1:A5:CB:31:26:81:5B:CE:08:F6:48:75:06:BD
Certificate issuer: /CN=B5A13510DBDC20D878560D32887F24F4B857C080
Certificate serial: 4ACAF73B80284B94E214308FDCA4E9E310655C9C
Authority key identifier: B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa
Signing time: Thu 12 Dec 2024 15:27:41 +0000
ROA not before: Thu 12 Dec 2024 15:22:41 +0000
ROA not after: Thu 11 Dec 2025 15:27:41 +0000
asID: 270564
IP address blocks: 2804:6dec::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ca:f7:3b:80:28:4b:94:e2:14:30:8f:dc:a4:e9:e3:10:65:5c:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B5A13510DBDC20D878560D32887F24F4B857C080
Validity
Not Before: Dec 12 15:22:41 2024 GMT
Not After : Dec 11 15:27:41 2025 GMT
Subject: CN=834DF8FB42DFA1A5CB3126815BCE08F6487506BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:f7:8c:7f:91:2f:3a:6b:9d:b7:d7:60:4d:
70:5e:6a:97:69:0e:29:6b:f3:29:e9:96:cd:aa:8a:
87:dd:92:9a:8e:7d:ac:db:b7:51:71:93:74:13:ef:
1b:13:a9:7e:16:44:e8:ec:7d:9b:2c:1b:3e:56:49:
be:a0:cc:60:92:af:63:be:15:9a:d4:3b:c2:eb:72:
b0:d9:b4:fb:90:f9:5a:12:33:0a:48:85:ba:22:34:
fe:4a:97:df:1a:ee:82:77:e3:6b:d6:05:22:f6:0f:
ac:c2:c1:90:a9:5b:43:a5:d5:09:73:c0:f7:08:44:
09:77:3a:c5:ef:33:4e:2d:06:74:e9:88:48:12:c7:
39:de:89:e7:8a:35:62:ce:d4:6a:d9:16:94:20:ec:
df:38:5f:11:6a:92:ff:8b:2c:df:be:e8:47:3e:7d:
f1:12:07:3f:25:39:f1:6e:bd:82:6c:a7:e9:79:25:
0a:6e:f1:6a:b4:05:06:18:fc:4b:80:ef:f5:0a:45:
bb:4e:8c:91:e9:7f:94:a9:7d:f0:cf:00:07:69:f9:
e5:0b:ad:36:34:b1:1d:ff:8f:e4:ba:d2:1d:9b:a7:
7c:7c:ac:37:75:85:13:6d:77:f7:d7:7c:b6:d8:72:
a9:da:52:fb:ce:cb:6c:c1:23:ad:5f:3c:26:cf:0b:
50:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4D:F8:FB:42:DF:A1:A5:CB:31:26:81:5B:CE:08:F6:48:75:06:BD
X509v3 Authority Key Identifier:
keyid:B5:A1:35:10:DB:DC:20:D8:78:56:0D:32:88:7F:24:F4:B8:57:C0:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/B5A13510DBDC20D878560D32887F24F4B857C080.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5A13510DBDC20D878560D32887F24F4B857C080.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qiK74NhiX3o3aZ8W8m7SF3ARKmdSdSn1yvD2iM6kqU1/0/323830343a366465633a3a2f34342d3434203d3e20323730353634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6dec::/44
Signature Algorithm: sha256WithRSAEncryption
6a:ec:42:13:3e:28:76:a7:78:56:25:f0:d5:70:64:1c:41:97:
93:af:0a:2b:f9:29:38:59:e0:00:63:49:5e:61:47:79:14:0b:
1f:66:c5:ce:dd:56:8f:a0:35:96:7f:b7:7c:62:ed:f6:ea:05:
d4:14:ba:bb:4b:3a:04:2b:9a:64:01:8a:63:bb:21:5f:ef:74:
e7:fd:80:e1:d4:16:b1:bb:9b:e9:fd:f7:e3:bd:28:a5:7c:1e:
89:d5:fb:8b:98:dd:45:fd:a5:44:17:cf:5e:d0:77:bb:56:e6:
9f:63:99:02:b1:89:64:96:75:f8:e7:e1:2a:5f:91:8f:c4:f8:
57:a6:ac:86:92:7d:4e:c9:1c:df:37:83:ea:c2:6c:d7:77:28:
c9:93:a3:be:ec:61:8c:b7:43:d3:18:08:ee:03:bd:e1:6b:7e:
29:b7:ca:c4:27:b7:24:d9:78:cc:e8:0b:58:a2:90:9f:4d:72:
a5:d6:c9:84:2b:11:9d:35:fb:49:61:3b:ec:09:6f:27:e1:36:
b3:35:64:94:b8:23:d0:03:6b:c3:b0:d7:3c:9c:93:cb:8c:2a:
2d:d1:80:4b:5a:7e:ed:a0:59:f3:ab:d2:8a:9f:ea:04:f9:57:
e9:b3:15:ac:1d:11:bc:fc:44:43:0b:2e:33:28:59:ba:a6:d0:
d8:15:fa:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:26:49 2025 by rpki-client