Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa
File: 323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa (raw, json)
Hash identifier: LPlFQuiEHaYfA+TBZDozY789nVhCuhiDNbT5j8t6Srw=
Subject key identifier: 34:7A:28:04:C7:D3:90:F4:61:F9:BE:8E:22:99:2D:10:2C:04:29:BA
Certificate issuer: /CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Certificate serial: 46EC55CE8592BAB2F709383EDB4266E4EFE11FBA
Authority key identifier: 70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa
Signing time: Tue 17 Dec 2024 17:07:52 +0000
ROA not before: Tue 17 Dec 2024 17:02:52 +0000
ROA not after: Tue 16 Dec 2025 17:07:52 +0000
asID: 61900
IP address blocks: 2804:12a0:320::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ec:55:ce:85:92:ba:b2:f7:09:38:3e:db:42:66:e4:ef:e1:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7032365C782465DB62283945DC9E72F6BAA6BF0A
Validity
Not Before: Dec 17 17:02:52 2024 GMT
Not After : Dec 16 17:07:52 2025 GMT
Subject: CN=347A2804C7D390F461F9BE8E22992D102C0429BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e1:1d:b7:5d:11:4a:e0:18:1f:df:dc:49:d6:
64:64:3a:2d:7f:37:40:aa:88:48:cb:bb:db:81:2b:
a2:fa:83:2f:2a:b9:b8:f6:3f:c2:8b:0c:f5:26:a2:
f1:ce:20:6d:d8:63:e9:c7:7a:48:e5:cd:45:73:15:
30:63:94:fe:f9:15:a2:e9:d6:3e:45:12:c8:13:69:
13:fa:b7:4d:e8:a6:5e:72:fc:ff:ce:5e:6d:33:00:
fc:a5:bf:7e:f8:67:06:7c:31:dc:c6:11:c3:f9:22:
c7:b1:97:70:7d:71:78:ff:3b:d8:6b:a2:4e:7b:af:
4f:c5:04:f8:62:da:2e:cd:53:26:41:80:7b:91:48:
c9:5f:ea:c6:36:e0:1a:5d:c0:71:0f:81:72:11:33:
51:27:b3:85:08:e6:84:8c:40:c2:ca:64:a2:13:34:
03:5c:56:81:2a:04:9f:06:ce:0f:92:d5:01:fa:eb:
ef:a0:b5:46:e8:65:ec:25:79:83:a2:72:67:8e:c3:
75:fa:09:cf:b4:e2:08:7b:81:e7:62:e6:45:d6:9d:
ad:ef:05:ec:ad:90:e5:51:d0:59:c7:37:02:76:68:
34:aa:92:32:5b:d4:de:71:cd:95:a7:ff:d3:38:71:
76:b5:cf:07:61:71:a5:13:e0:4e:0f:de:b1:db:f8:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:7A:28:04:C7:D3:90:F4:61:F9:BE:8E:22:99:2D:10:2C:04:29:BA
X509v3 Authority Key Identifier:
keyid:70:32:36:5C:78:24:65:DB:62:28:39:45:DC:9E:72:F6:BA:A6:BF:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/7032365C782465DB62283945DC9E72F6BAA6BF0A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7032365C782465DB62283945DC9E72F6BAA6BF0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4o414r8kJZihQDCtpLjHERmPjcyjpxPUywaRh9ehcPJX/0/323830343a313261303a3332303a3a2f34382d3438203d3e203631393030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:12a0:320::/48
Signature Algorithm: sha256WithRSAEncryption
00:4a:fc:7b:a8:70:22:be:a7:30:16:02:07:15:3a:e5:21:1a:
fe:88:fc:c1:7a:bf:34:29:c0:61:da:7e:60:1e:18:12:2f:f7:
dd:dc:a6:20:30:36:8d:24:c9:6c:8c:2f:fb:a8:bc:e9:07:97:
bc:8d:34:78:21:05:31:59:68:d7:02:5c:90:b7:47:4f:47:5c:
07:de:89:2d:d3:63:89:a6:b8:9b:84:9f:ea:10:b5:2a:5c:ad:
a1:12:d3:e2:54:1d:fa:f3:21:22:03:d5:76:03:6d:92:66:d7:
b4:f2:82:06:da:32:80:3e:39:83:95:20:b5:ca:9b:6d:4e:9e:
ab:ef:93:af:e0:71:51:4e:74:cc:18:23:46:b9:9b:34:36:4d:
88:84:ac:aa:a6:1a:2c:b7:9c:b8:0f:93:23:9d:06:3c:9c:da:
fc:e4:5e:4f:28:04:0f:a3:53:86:4b:99:7c:47:7c:c1:68:84:
84:cf:c1:62:4e:80:51:e3:c9:ce:ca:fc:e3:af:ed:af:1b:67:
b1:39:7d:2b:89:99:c2:07:4c:6d:a1:c9:c1:1b:06:49:49:3d:
94:b9:14:07:20:c3:06:d4:35:4e:b1:e6:59:50:21:be:f8:4f:
be:2d:a2:8d:2d:2e:85:f7:15:18:23:39:78:cb:34:5c:43:34:
9e:29:bf:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:20:29 2025 by rpki-client