Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
File: 323830343a363461633a3a2f33322d3332203d3e20323639343431.roa (raw, json)
Hash identifier: dMN2UWniys4RSLHsEPG9RC7X92VEMXPVq3bPXi52fEE=
Subject key identifier: 39:93:BA:0A:04:D4:04:DB:FC:5C:59:6C:B5:B3:2F:D0:05:A0:9D:9E
Certificate issuer: /CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Certificate serial: 7F2625A8F285E598F8C80C5C781B00BB874D7109
Authority key identifier: 83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
Signing time: Thu 09 Jan 2025 04:45:41 +0000
ROA not before: Thu 09 Jan 2025 04:40:41 +0000
ROA not after: Thu 08 Jan 2026 04:45:41 +0000
asID: 269441
IP address blocks: 2804:64ac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:26:25:a8:f2:85:e5:98:f8:c8:0c:5c:78:1b:00:bb:87:4d:71:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697
Validity
Not Before: Jan 9 04:40:41 2025 GMT
Not After : Jan 8 04:45:41 2026 GMT
Subject: CN=3993BA0A04D404DBFC5C596CB5B32FD005A09D9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:a3:7b:e7:34:ec:1e:d1:4a:bc:dc:6f:95:
dc:b5:e1:e2:41:57:9a:68:a4:cc:ce:18:b3:33:95:
fd:b1:9f:7b:48:ae:25:d5:04:1a:12:9c:95:31:43:
64:fc:08:9d:18:e7:cb:48:5e:c7:d2:60:2a:70:b0:
c2:fa:88:28:ea:8e:27:1b:07:b0:90:9e:ea:a4:2a:
0e:72:e2:d7:08:4c:75:03:48:b3:b5:63:b8:39:82:
7c:0d:c9:b5:8a:76:37:fa:35:16:a6:9e:c0:89:5e:
d4:d0:73:09:58:d7:17:2c:b2:e9:2e:9e:4f:eb:9b:
b5:be:b1:17:86:d2:07:61:c7:4d:c3:8c:27:a2:69:
c7:a6:bc:80:25:43:af:8b:4a:bd:39:b2:d3:6e:3f:
43:14:10:f7:ba:4f:a9:0a:aa:b4:6f:a2:56:63:ea:
8e:81:f8:bf:8d:b1:05:ca:4e:8d:63:d6:60:6a:bb:
82:01:41:6a:38:66:49:a6:aa:06:26:46:76:62:7d:
19:e8:54:3c:a6:64:09:51:3e:7b:84:26:e2:a4:0e:
58:15:42:10:00:eb:bf:4f:1a:eb:4b:cc:70:f0:bc:
fc:f8:8b:97:ea:46:d0:0d:0b:2b:b5:fd:44:34:d5:
61:2c:f4:21:96:9a:89:de:19:86:26:53:a2:a1:3e:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:93:BA:0A:04:D4:04:DB:FC:5C:59:6C:B5:B3:2F:D0:05:A0:9D:9E
X509v3 Authority Key Identifier:
keyid:83:8C:BE:7B:3D:3F:1D:D5:9B:DC:F3:25:98:3E:1E:E8:9A:CC:96:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838CBE7B3D3F1DD59BDCF325983E1EE89ACC9697.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ApKSjywGNnYKJLbZe4G7YUbcWdU9aHZ4AvcjkTTiu5M/0/323830343a363461633a3a2f33322d3332203d3e20323639343431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64ac::/32
Signature Algorithm: sha256WithRSAEncryption
1d:f2:51:6d:48:4a:af:92:82:5a:8c:bc:d0:31:a3:c6:84:f2:
5f:90:9e:f0:c4:62:c4:fa:c5:f0:fe:98:89:7d:85:28:21:7b:
a8:a8:f8:42:f2:a6:dc:03:96:d8:af:0e:e0:19:ba:38:e7:57:
6e:6a:e7:42:ae:9a:5f:ed:16:ad:59:9e:36:28:19:e2:c4:c1:
39:0e:2a:d7:39:50:9c:85:fe:78:77:8a:b3:b1:5b:85:18:42:
17:cb:1a:f5:a1:6f:87:a0:b3:48:ca:81:e8:5e:e5:37:30:7c:
22:52:e5:0a:da:2e:f4:96:83:c6:b3:9a:f2:83:14:25:7b:2d:
a9:f4:b5:6b:e1:96:3a:2f:f8:cb:a4:d2:6e:e4:53:63:2f:80:
53:29:5c:6c:86:bc:f6:ed:2b:c5:4d:27:0d:be:0a:cd:4b:f5:
e0:2e:cb:76:c7:9b:b5:5f:1e:2b:27:92:9c:a0:f4:4a:a2:9f:
47:7d:9a:9a:b2:6d:a2:c3:b6:d1:fa:46:29:2d:78:da:01:66:
84:7f:d3:72:b6:6d:91:8f:9e:c4:58:22:c8:59:62:ba:e4:58:
68:15:68:8e:c4:a9:dd:2f:98:67:bf:8d:d2:21:f6:31:7f:85:
e1:8a:cb:80:60:7e:47:be:e7:67:e9:d5:b3:d1:1e:84:58:65:
79:08:87:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:27:55 2025 by rpki-client