Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
File: 323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa (raw, json)
Hash identifier: Yh+HeWYGMT8jZrbEF6eT6rswKsZd5Ho3p9r1KOX2DL4=
Subject key identifier: CE:CA:69:F4:03:E7:18:0D:3E:21:AA:02:E1:1C:FC:21:C5:2C:E9:23
Certificate issuer: /CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Certificate serial: 792892D2BE4197CDDF7076A327CC28566B3B70E0
Authority key identifier: F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
Signing time: Fri 28 Apr 2023 03:42:33 +0000
ROA not before: Fri 28 Apr 2023 03:37:33 +0000
ROA not after: Fri 26 Apr 2024 03:42:33 +0000
asID: 270722
IP address blocks: 2804:705c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:28:92:d2:be:41:97:cd:df:70:76:a3:27:cc:28:56:6b:3b:70:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F67448549A64A3CB85C49B816FDEB8E90B7226DF
Validity
Not Before: Apr 28 03:37:33 2023 GMT
Not After : Apr 26 03:42:33 2024 GMT
Subject: CN=CECA69F403E7180D3E21AA02E11CFC21C52CE923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4d:86:d3:38:90:f8:6d:d7:61:36:04:1a:7c:
6c:94:cf:a6:c0:19:dd:0e:c0:aa:0e:47:35:7c:1d:
2e:68:92:84:82:11:7e:af:bf:65:5c:1a:39:29:d4:
39:63:44:fa:df:c9:ae:fd:14:54:68:51:2e:a1:bf:
24:b5:de:4b:58:d1:c8:ab:33:d0:3d:28:47:73:6b:
97:a9:84:39:82:db:15:0a:ef:af:ba:b2:3f:37:da:
f3:3c:18:8a:92:ea:67:c5:2e:f2:8c:8b:66:1f:b2:
5d:a3:84:c3:41:c8:16:b2:24:5d:6d:13:d4:f0:9f:
4b:b9:68:35:87:06:11:a2:75:a9:d6:23:73:ad:8c:
aa:2f:85:3a:2a:64:b6:21:53:1b:70:d4:7a:68:3e:
4e:b4:2c:ff:b8:85:88:2b:ed:1e:e2:7f:20:bb:86:
0a:89:0d:89:74:cb:65:c3:6b:e1:28:ce:56:fe:da:
9d:8b:cd:c4:2e:f4:08:e2:95:19:ba:92:b1:18:07:
db:d2:75:90:9b:e6:43:a2:1c:e8:54:83:f7:bd:cd:
38:1b:ab:4c:37:1b:0f:e0:39:c3:da:45:63:b7:04:
2b:e6:47:1f:48:39:75:13:4e:62:a6:0a:83:b9:cd:
fd:5d:f5:0d:f3:4a:e0:37:d2:ed:a2:3c:78:41:1e:
61:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CA:69:F4:03:E7:18:0D:3E:21:AA:02:E1:1C:FC:21:C5:2C:E9:23
X509v3 Authority Key Identifier:
keyid:F6:74:48:54:9A:64:A3:CB:85:C4:9B:81:6F:DE:B8:E9:0B:72:26:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F67448549A64A3CB85C49B816FDEB8E90B7226DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3z3EuSE6VRzkgE6zsUFyinhxui3bXSqEKwQdbkRzwBf4/0/323830343a373035633a383030303a3a2f33332d3333203d3e20323730373232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:705c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7e:3b:a0:e5:2f:d8:89:a0:c4:e7:34:76:2c:66:16:eb:c5:bf:
e3:08:da:61:b1:19:ad:c1:7c:81:ae:68:fd:7e:6f:b9:f2:a5:
b2:b4:4b:85:25:69:50:38:f3:07:f3:f9:c3:7e:fa:6b:e1:3d:
9e:d8:6d:7b:38:7d:62:28:20:bf:25:c7:a8:a4:36:11:83:4f:
8c:e2:82:13:d6:61:c5:ec:30:a6:0e:5c:ed:83:13:c7:a4:75:
20:a2:65:ed:d1:80:d4:d5:61:a5:28:85:3a:f0:40:e4:e2:77:
5c:12:7d:8b:06:1e:e5:21:62:65:61:42:eb:7a:a3:c3:d3:49:
79:cd:de:6b:a2:52:87:11:8f:48:eb:26:06:57:10:30:db:5b:
96:2a:29:72:7f:f1:c3:b2:f5:31:c5:d7:e0:26:fb:f3:34:f2:
1c:93:c6:57:9a:80:1f:e1:d7:23:d8:0f:33:7f:93:e6:25:90:
af:54:d5:2b:60:72:37:aa:f0:25:f7:50:84:8b:0d:43:78:b5:
6d:0c:0c:fc:fa:02:e6:cd:b4:4a:b4:ea:3e:ae:68:4b:90:8f:
c3:ab:b1:54:b2:52:6c:25:d4:6c:d2:1c:c5:72:b6:24:f8:26:
ee:5b:04:57:7a:d7:c2:f7:a8:06:4e:62:3b:a3:a0:f7:b4:dc:
b7:1c:95:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:02 2025 by rpki-client