Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4qbQEFT6jxEMLT5jNVS3PCP95i9VohTU5368AjY52wPR/0/323830343a383731343a3a2f33322d3336203d3e20323732363836.roa
File: 323830343a383731343a3a2f33322d3336203d3e20323732363836.roa (raw, json)
Hash identifier: 3NdGsyKV0ER1OKLqgpfDaNAWbeYVVcNd86Hkn2NAAT8=
Subject key identifier: 88:A4:5D:3A:DA:99:1A:19:EF:4A:12:CB:3D:2D:85:F1:87:A0:1A:DE
Certificate issuer: /CN=79009A93CD6D647AB8195327747E734D5512286A
Certificate serial: 5F8FAB19CE970E639A24BD9BDFB23679971B7308
Authority key identifier: 79:00:9A:93:CD:6D:64:7A:B8:19:53:27:74:7E:73:4D:55:12:28:6A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79009A93CD6D647AB8195327747E734D5512286A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4qbQEFT6jxEMLT5jNVS3PCP95i9VohTU5368AjY52wPR/0/323830343a383731343a3a2f33322d3336203d3e20323732363836.roa
Signing time: Fri 03 Jan 2025 14:39:33 +0000
ROA not before: Fri 03 Jan 2025 14:34:33 +0000
ROA not after: Fri 02 Jan 2026 14:39:33 +0000
asID: 272686
IP address blocks: 2804:8714::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:8f:ab:19:ce:97:0e:63:9a:24:bd:9b:df:b2:36:79:97:1b:73:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79009A93CD6D647AB8195327747E734D5512286A
Validity
Not Before: Jan 3 14:34:33 2025 GMT
Not After : Jan 2 14:39:33 2026 GMT
Subject: CN=88A45D3ADA991A19EF4A12CB3D2D85F187A01ADE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f0:e9:c2:0d:0b:ce:ec:b6:3f:ce:f7:39:10:
8d:f5:b0:e8:a7:ee:12:04:05:11:9b:36:35:2e:6e:
aa:d0:9b:d5:c4:6b:a7:ad:0a:89:3a:05:ef:2f:32:
40:92:ab:76:d4:9e:07:54:d5:a5:ff:36:4b:60:a6:
5d:14:59:52:c7:b8:53:35:8b:4f:e5:88:3e:6f:3c:
a0:23:fb:06:90:f7:da:01:c0:75:74:91:de:d2:28:
4b:05:6a:fc:37:32:12:be:e0:53:e6:76:b0:3e:b6:
0c:e3:fc:50:33:c4:23:05:92:cc:db:bd:21:db:21:
8a:6a:44:15:35:2d:ae:2c:62:62:8a:a7:db:2c:7f:
fd:77:00:60:66:75:b6:23:27:4c:4f:5a:26:f8:38:
1f:5a:3c:8a:ea:7a:5d:30:d1:e2:9b:c4:2a:3b:6d:
f1:7e:19:d8:27:9e:14:db:96:ef:61:08:a6:77:f0:
8b:16:b7:3e:e9:3e:05:fc:85:e5:16:d1:9d:dc:8f:
91:91:f9:da:d5:ef:57:31:0c:2e:eb:af:67:3b:e2:
db:24:d6:57:e8:21:87:fa:c1:0c:fc:98:bb:a6:0f:
bc:92:08:53:e4:f9:a3:0e:74:41:bc:85:d5:6f:c1:
9d:94:c7:23:8d:82:f8:0d:42:17:a5:70:b2:6a:f3:
e3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A4:5D:3A:DA:99:1A:19:EF:4A:12:CB:3D:2D:85:F1:87:A0:1A:DE
X509v3 Authority Key Identifier:
keyid:79:00:9A:93:CD:6D:64:7A:B8:19:53:27:74:7E:73:4D:55:12:28:6A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4qbQEFT6jxEMLT5jNVS3PCP95i9VohTU5368AjY52wPR/0/79009A93CD6D647AB8195327747E734D5512286A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/79009A93CD6D647AB8195327747E734D5512286A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qbQEFT6jxEMLT5jNVS3PCP95i9VohTU5368AjY52wPR/0/323830343a383731343a3a2f33322d3336203d3e20323732363836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8714::/32
Signature Algorithm: sha256WithRSAEncryption
ba:45:c4:59:ae:77:36:b7:6b:1b:62:c1:37:04:99:d3:1f:d5:
fd:e2:62:d8:7c:db:95:3d:1e:ca:d0:4c:e8:b8:37:4c:a3:fd:
2c:e1:b3:cf:0a:df:6e:bb:5f:27:06:6a:c4:69:6e:97:fc:22:
75:15:40:a1:8e:8f:7f:2a:77:2f:70:90:84:f5:e2:09:16:55:
2f:ba:f1:6a:c0:c1:98:f6:d6:4c:a2:e9:2e:4b:ab:12:b8:2f:
59:0f:2f:79:20:67:96:89:a1:a3:0c:0d:62:f7:e8:5f:d6:7c:
6f:9e:10:59:5c:80:76:81:be:b4:ac:cf:95:0f:95:4f:df:b6:
87:df:0c:bc:5c:13:a2:ba:71:5b:42:d2:67:f0:14:38:25:70:
28:eb:8b:bb:8e:cb:00:58:d6:0e:b1:2e:1e:0b:c3:24:3e:1c:
14:69:6b:dd:65:c5:85:aa:3c:b7:8c:c5:1e:93:36:57:75:b4:
39:fd:45:7b:dd:0a:14:4a:26:71:74:b6:5d:1e:e3:c7:44:fe:
8f:d1:aa:9f:cc:a1:c3:71:55:7a:b2:66:b2:41:5a:5b:c6:86:
29:8f:24:fd:07:fa:be:68:00:0d:ec:f4:69:19:9e:88:bb:64:
09:e0:f7:e6:f1:5e:ce:b2:1c:10:14:46:93:76:5b:d1:b7:10:
b0:93:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:49 2025 by rpki-client