Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
File: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (raw, json)
Hash identifier: 6DsKWo9xVXw0IbmZnLSa88wC1DmditAZQXxASz0J0lo=
Subject key identifier: 86:41:5E:F8:24:99:F2:0C:A1:53:7B:25:D4:7E:7D:ED:6A:4C:AD:63
Certificate issuer: /CN=40F84FEE57C4E5B280E9D442848B43902C736360
Certificate serial: 7BE361F542F07B50ADD84AC603792B7CCD68E41C
Authority key identifier: 40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
Signing time: Mon 08 Jan 2024 12:16:27 +0000
ROA not before: Mon 08 Jan 2024 12:11:27 +0000
ROA not after: Mon 06 Jan 2025 12:16:27 +0000
asID: 271180
IP address blocks: 2804:7778::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:e3:61:f5:42:f0:7b:50:ad:d8:4a:c6:03:79:2b:7c:cd:68:e4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F84FEE57C4E5B280E9D442848B43902C736360
Validity
Not Before: Jan 8 12:11:27 2024 GMT
Not After : Jan 6 12:16:27 2025 GMT
Subject: CN=86415EF82499F20CA1537B25D47E7DED6A4CAD63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4f:bb:11:12:5d:73:1f:53:97:4d:6c:f4:1c:
f9:4e:f6:05:1d:88:a6:27:ba:5a:3b:48:47:a0:e8:
7d:7b:ed:19:4c:0e:7a:b7:3e:bf:e7:90:5d:a1:cc:
62:96:0c:ac:7f:da:63:42:c4:86:98:3a:e1:d9:fd:
4e:fa:14:b2:1e:6f:68:2d:7b:a4:d7:aa:b2:a3:f8:
da:07:7b:b3:dd:d0:71:37:12:9f:0b:e9:92:c5:c7:
3f:e4:0e:07:d8:da:59:c0:2c:9d:f4:5c:92:3c:8d:
77:bb:d8:a2:a6:77:49:da:df:87:68:23:a1:b8:fb:
06:01:06:a2:0f:31:86:60:4f:31:bc:e1:09:d7:2c:
d0:75:ed:6c:6a:cf:31:d5:38:00:6a:d3:41:db:70:
a1:d0:6f:8a:75:f4:4a:3e:ad:3d:8a:dc:3f:c5:fc:
6a:8c:d2:df:0c:33:f0:81:a8:44:ae:f9:58:e8:4e:
23:c8:16:64:be:dc:7a:4c:7b:2e:ae:e3:1d:d9:45:
14:2c:8e:9b:6a:20:c5:b2:98:67:bd:50:26:d0:61:
18:b0:20:69:21:f2:0d:3e:c0:83:15:00:b1:38:a5:
63:9c:e9:0d:be:c0:7a:94:f6:9d:25:de:19:7e:37:
45:da:d6:2f:a9:dc:41:86:69:de:42:b0:48:12:d8:
3e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:41:5E:F8:24:99:F2:0C:A1:53:7B:25:D4:7E:7D:ED:6A:4C:AD:63
X509v3 Authority Key Identifier:
keyid:40:F8:4F:EE:57:C4:E5:B2:80:E9:D4:42:84:8B:43:90:2C:73:63:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/40F84FEE57C4E5B280E9D442848B43902C736360.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F84FEE57C4E5B280E9D442848B43902C736360.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/0/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7778::/32
Signature Algorithm: sha256WithRSAEncryption
aa:60:82:0f:42:d5:01:17:7f:26:29:72:74:bb:08:11:5f:62:
d4:b5:a7:04:64:ff:79:67:fe:cd:12:c1:05:83:c7:37:84:51:
79:5b:b4:37:e3:62:ea:ab:8e:4b:49:3d:20:67:ca:bf:9f:ae:
ad:a9:02:b4:8e:2e:3a:64:f6:de:71:2b:3d:d5:87:44:4c:bc:
58:b1:aa:ea:fa:74:c8:e6:6a:8f:38:11:73:b0:cf:55:96:20:
66:ab:bd:eb:08:32:88:70:97:96:78:b4:40:ac:3a:80:de:5d:
69:d5:7b:70:c2:bb:6a:01:fb:61:30:d7:06:7c:63:fa:dc:6d:
63:80:17:33:8e:a9:aa:5a:dd:e5:b2:ef:28:1a:dc:8e:ad:bd:
19:2a:73:47:cc:54:e5:3b:65:2d:b0:dd:c6:8e:4f:86:96:e6:
e7:31:b6:e8:af:ca:c8:b2:6c:ab:38:71:9c:62:9a:93:29:ff:
42:50:7d:96:e3:6b:87:7c:4b:7f:22:10:e0:6a:cc:d2:a9:d2:
04:10:b1:24:7b:b3:b8:4d:33:13:70:cf:f6:af:1d:7b:08:36:
15:81:f4:86:5f:a0:58:ef:c2:32:9a:44:a4:ae:fb:d2:42:d5:
e6:07:04:d8:97:dc:da:b8:b4:49:07:a5:52:35:9a:40:ff:23:
54:f4:db:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:21:47 2025 by rpki-client