Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
File: 323830343a373737383a3a2f33322d3332203d3e20323731313830.roa (raw, json)
Hash identifier: qP53uLcUi8/lpPda1LFzdKBLMIoAo8Sn+EO7nc2hXIE=
Subject key identifier: F3:B7:AE:9F:3E:84:42:A7:C4:3A:54:1D:9F:80:EF:1A:B1:09:7A:57
Certificate issuer: /CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Certificate serial: 53DC6F157EB624ACA2A69FAEB2BFAD352C44F875
Authority key identifier: A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
Signing time: Mon 23 Sep 2024 18:09:12 +0000
ROA not before: Mon 23 Sep 2024 18:04:12 +0000
ROA not after: Mon 22 Sep 2025 18:09:12 +0000
asID: 271180
IP address blocks: 2804:7778::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:dc:6f:15:7e:b6:24:ac:a2:a6:9f:ae:b2:bf:ad:35:2c:44:f8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D
Validity
Not Before: Sep 23 18:04:12 2024 GMT
Not After : Sep 22 18:09:12 2025 GMT
Subject: CN=F3B7AE9F3E8442A7C43A541D9F80EF1AB1097A57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:52:4c:14:ad:89:98:f1:b3:70:a9:aa:b7:ca:
51:9d:3d:e0:95:3e:d7:b7:ae:46:99:26:a8:f9:7a:
0f:07:8b:f3:4f:29:64:10:f4:0e:53:f1:35:37:5b:
ed:55:be:f5:22:6d:e9:bf:ea:6e:a6:6e:4e:d5:58:
4e:16:f5:ef:52:e1:53:0d:82:22:5a:81:cc:c5:85:
1d:98:47:7b:d8:3d:ce:df:5f:ae:93:ca:b7:18:23:
80:05:1b:0f:10:1c:dc:bc:4e:b0:1e:3e:f0:86:55:
d9:df:d3:da:ea:7e:58:9e:0c:b5:4f:e8:f1:07:64:
78:29:d8:57:76:62:b8:d0:d9:4c:94:0b:af:68:ec:
21:3c:34:c9:9f:b7:63:97:49:c7:f2:9a:65:11:55:
fa:00:e4:f7:c0:7f:6c:ff:cb:5e:2e:ba:7a:f1:6b:
a9:ce:49:8c:67:68:ee:37:5e:0d:65:4e:02:33:ed:
24:a8:97:20:dd:17:84:34:ba:db:d9:2c:b7:d1:45:
f5:37:55:ff:fc:e6:3f:43:f1:2b:3d:8d:71:84:03:
fa:76:a0:9c:9c:70:a9:cf:70:e6:d2:72:e2:59:49:
a3:d4:fe:09:04:43:f2:b7:eb:0c:23:b9:cc:d0:da:
87:aa:00:6b:16:aa:a5:c0:81:6d:48:f1:f2:8a:ce:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B7:AE:9F:3E:84:42:A7:C4:3A:54:1D:9F:80:EF:1A:B1:09:7A:57
X509v3 Authority Key Identifier:
keyid:A8:BA:F5:6D:A9:19:0A:5B:F5:A9:6D:F8:EA:B0:FD:B9:0D:3F:37:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8BAF56DA9190A5BF5A96DF8EAB0FDB90D3F375D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HdKu173iWcNys5YicMyF6R5KkjTwnVRk8RdMsyjhFYo/2/323830343a373737383a3a2f33322d3332203d3e20323731313830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7778::/32
Signature Algorithm: sha256WithRSAEncryption
4f:d0:e8:a1:3a:8d:be:ea:03:70:a0:b5:ec:1f:67:19:4c:f4:
98:a7:fb:af:ef:9c:ea:e5:63:3f:cd:91:b3:0d:68:74:54:a3:
d7:09:d9:67:ec:73:12:31:85:58:16:40:65:7f:9f:24:e6:e2:
31:14:5c:0f:ec:e3:e8:42:3b:7e:fa:25:0b:86:f6:97:c1:eb:
1e:da:69:ab:d3:3d:32:7f:5d:72:99:12:96:b5:f6:a5:d6:11:
19:a2:b0:3b:a2:a3:a6:9e:ff:b0:b5:22:aa:fa:c2:97:75:78:
9f:ff:e1:1f:6e:18:47:99:49:e4:55:fe:92:bc:0d:ba:e1:5b:
05:1a:f8:89:b3:8b:2c:60:69:3c:04:2d:6e:e7:78:e8:c4:dd:
55:69:69:26:9f:84:78:bf:70:73:bd:c0:83:46:e7:0b:25:02:
d6:44:f4:6a:ce:dc:ba:8c:5c:fd:1e:ea:d5:e6:f6:3e:42:86:
cb:c1:53:34:f3:be:a4:27:88:2e:05:23:cd:5b:05:e8:32:68:
0b:16:36:d9:b8:fc:09:11:b4:a2:b5:89:bc:4b:4c:62:b4:e3:
ff:aa:ca:55:34:52:60:86:26:ed:0d:ad:c4:0b:b2:22:ab:08:
6e:ff:19:dd:45:37:7c:13:60:a4:f6:20:1d:aa:ce:26:57:77:
c1:be:bc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:17:52 2025 by rpki-client