Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa
File: 323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa (raw, json)
Hash identifier: lDHxW27WSiPEuOW5BtXbMZVhxNxTyBnAAkPmSmoz5Cg=
Subject key identifier: B2:97:E5:6E:1E:EA:09:7F:B8:75:29:C4:7E:87:36:32:68:40:FC:5C
Certificate issuer: /CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
Certificate serial: 6202D1EA729BE196AEE701207C753987ACBF66F6
Authority key identifier: DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa
Signing time: Thu 29 Dec 2022 13:41:32 +0000
ROA not before: Thu 29 Dec 2022 13:36:32 +0000
ROA not after: Thu 28 Dec 2023 13:41:32 +0000
asID: 267301
IP address blocks: 2804:4b5c:1100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:02:d1:ea:72:9b:e1:96:ae:e7:01:20:7c:75:39:87:ac:bf:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B
Validity
Not Before: Dec 29 13:36:32 2022 GMT
Not After : Dec 28 13:41:32 2023 GMT
Subject: CN=B297E56E1EEA097FB87529C47E8736326840FC5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:c4:9f:a3:9f:48:74:2c:7a:c2:d6:f4:ea:
3c:e2:93:6b:50:d1:9c:27:e4:2f:5c:2f:33:f9:22:
b2:4d:aa:3d:fb:c2:e0:85:03:fc:35:c6:ea:c5:16:
a1:9e:44:f0:a0:13:46:76:e6:c0:ce:69:bf:68:33:
2f:51:e9:37:c7:0e:6c:22:82:66:29:d5:bd:9b:e8:
c1:b0:46:db:7a:0b:c2:07:53:d7:18:c9:d2:9f:26:
83:36:35:82:d8:f9:bb:d8:b6:a9:39:69:d3:b1:bf:
46:ec:46:da:4e:b8:02:14:5b:33:df:fd:3b:5c:0e:
95:95:ce:03:16:7a:90:33:93:ad:2c:06:4f:01:6e:
fb:9d:96:cd:2a:1e:65:58:ff:9e:09:2f:ef:a3:f2:
49:9f:bc:ba:dc:5c:73:a2:9e:7a:67:f2:67:97:a6:
53:ec:37:79:83:42:c8:df:25:12:1e:f1:24:5b:4a:
a3:a0:ef:e0:80:ed:cd:1f:c5:33:68:0e:bf:2e:44:
dc:bf:f0:b4:df:c4:59:78:34:06:40:0f:83:f2:1c:
ab:24:38:7b:9b:f0:65:3d:63:0c:b8:75:13:11:e5:
55:11:4e:67:dd:1b:d2:ef:9b:65:52:f7:18:58:49:
e3:e8:b3:d5:aa:ef:54:43:92:7a:49:4f:1a:c0:cb:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:97:E5:6E:1E:EA:09:7F:B8:75:29:C4:7E:87:36:32:68:40:FC:5C
X509v3 Authority Key Identifier:
keyid:DF:F9:F1:A0:A4:70:F1:C5:02:BC:C4:A6:AF:3B:F1:C4:86:D8:BB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DFF9F1A0A470F1C502BCC4A6AF3BF1C486D8BB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dafqFX9zD9cDuyttDLSrv52MvSypDQN8xJLTwhJTUro/0/323830343a346235633a313130303a3a2f34302d3430203d3e20323637333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b5c:1100::/40
Signature Algorithm: sha256WithRSAEncryption
74:5d:d5:1e:c0:aa:87:01:d2:d4:db:5a:87:30:34:60:ab:9c:
e7:21:91:5b:54:0e:4d:c9:ce:91:5a:77:4b:25:f5:6a:59:88:
3e:4e:fa:2a:4f:d1:68:e5:a8:69:c0:17:7e:0a:26:8a:b2:39:
45:fa:a2:31:4a:35:08:dd:36:af:26:a2:8b:cf:f4:9a:20:e0:
b0:9f:14:72:51:c2:0a:c1:34:59:9a:c8:33:47:cd:63:46:69:
1e:10:05:57:99:cc:ba:bb:f7:a1:47:86:e3:0d:34:76:f8:44:
10:07:c7:7a:7a:c2:ec:74:de:d9:d6:2d:4e:70:81:3a:1a:19:
fe:2c:39:97:4c:a2:03:3b:0f:c7:69:7d:d1:4e:5b:c5:3f:54:
13:dc:7f:2b:c5:2d:c7:e8:fb:ad:8c:0b:f3:78:5d:42:36:1f:
58:fc:ce:41:73:a2:ee:3b:43:6b:47:28:20:ea:25:b4:81:61:
40:a4:f7:30:55:66:b2:c9:c5:4b:a3:21:9b:c1:62:e6:c6:b9:
6d:e2:5b:99:64:2f:b7:00:81:2a:b7:bb:51:b2:ee:6d:0c:de:
23:34:f3:69:74:ba:73:da:57:fd:34:e4:bf:c1:fe:8d:b6:4d:
1d:f5:71:e8:11:3e:c0:d0:e1:9f:a0:f6:ce:72:31:60:66:4f:
55:31:9f:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:03:26 2025 by rpki-client