Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a383030303a3a2f33332d3333203d3e20323637303539.roa
File: 323830343a343738343a383030303a3a2f33332d3333203d3e20323637303539.roa (raw, json)
Hash identifier: 7VGVnJON8yAg848WBqut/y4F+HRIO8aiHpyzBpiXQp4=
Subject key identifier: 96:33:03:5F:49:6A:54:21:10:12:A4:E7:BA:1C:AE:55:95:B3:E7:F5
Certificate issuer: /CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Certificate serial: 2F82C4A692EC80E288D6C23B67D09C7E92894C70
Authority key identifier: 3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a383030303a3a2f33332d3333203d3e20323637303539.roa
Signing time: Mon 06 Jan 2025 18:54:00 +0000
ROA not before: Mon 06 Jan 2025 18:49:00 +0000
ROA not after: Mon 05 Jan 2026 18:54:00 +0000
asID: 267059
IP address blocks: 2804:4784:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:82:c4:a6:92:ec:80:e2:88:d6:c2:3b:67:d0:9c:7e:92:89:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C
Validity
Not Before: Jan 6 18:49:00 2025 GMT
Not After : Jan 5 18:54:00 2026 GMT
Subject: CN=9633035F496A54211012A4E7BA1CAE5595B3E7F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:43:0c:cd:a6:a0:fe:65:df:d5:77:64:41:45:
d4:e3:34:f5:4f:19:2b:26:f2:98:8f:77:3c:45:a6:
eb:ce:29:2f:b0:d0:2e:d5:d6:a9:81:d5:8d:8f:5a:
94:32:d6:73:74:58:fa:6b:79:6a:e5:af:75:c0:29:
c0:80:3e:7d:c8:8e:9f:27:da:47:3e:36:ea:f4:0c:
2d:70:5d:93:63:cc:0d:2d:5b:db:e6:4c:bd:9a:f2:
ce:8d:e8:32:b5:7d:99:48:ca:7a:8f:e5:16:4c:76:
ad:76:c0:e0:e0:cc:af:48:02:f0:6a:cb:01:4a:91:
4b:ce:47:a9:bc:e1:56:f5:e2:6e:51:70:0c:09:c9:
53:91:38:01:d8:f3:6e:30:51:45:4a:02:71:a4:5e:
52:a4:2d:b5:5f:3d:96:e9:74:2a:7e:92:f7:1d:c7:
a1:fd:4f:1d:a0:82:fb:b3:64:da:38:03:8f:3e:3f:
2c:4a:12:2d:8e:d0:06:96:a1:5f:cc:97:28:4d:7a:
54:b1:7d:db:1d:3d:66:be:ed:33:61:c4:63:b4:45:
a5:8c:4b:cf:25:f0:1a:0a:6d:e7:fd:9b:03:4c:88:
cf:20:97:3f:b0:2c:c7:24:6c:2e:91:cd:62:92:f3:
36:84:c0:b9:14:25:55:16:6b:ad:96:bb:b7:b4:cc:
46:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:33:03:5F:49:6A:54:21:10:12:A4:E7:BA:1C:AE:55:95:B3:E7:F5
X509v3 Authority Key Identifier:
keyid:3E:86:FE:3F:F2:EA:13:AF:B3:B8:C6:71:1D:D8:F4:73:1D:C4:88:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E86FE3FF2EA13AFB3B8C6711DD8F4731DC4884C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CxmhFZmNy6pMkdvacHdjcMUy6tzePd4QzeqwmoVeomw/0/323830343a343738343a383030303a3a2f33332d3333203d3e20323637303539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4784:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5f:12:af:06:6f:2b:9d:08:14:c5:8b:5f:61:cd:fd:d5:62:5f:
7d:89:54:c6:68:a9:d3:4a:8d:27:e5:aa:17:70:f4:f3:a8:e6:
e8:60:01:6d:9d:fc:b0:96:a7:ee:a8:aa:61:21:f0:fa:6b:af:
b3:78:fc:7b:3b:52:b7:40:36:58:3a:51:58:cd:41:04:c9:0e:
ad:06:0a:3d:e1:f2:79:04:dd:d8:a5:69:47:cd:18:7f:76:ba:
8f:8e:fb:24:bf:77:1b:ec:68:c7:1f:f6:65:56:29:31:2e:4f:
bf:dd:5b:dd:3f:e5:66:15:61:0a:36:9f:07:2d:f8:52:11:9f:
89:c4:7f:43:c7:72:72:df:13:05:48:13:64:c8:fe:3c:65:e3:
f7:0f:95:08:66:65:b7:04:cd:f9:3e:69:b5:dc:e2:23:1a:0f:
17:e3:df:b9:04:7f:42:6c:4d:7c:05:16:51:4f:c1:a0:98:d1:
fd:a6:41:f1:28:4b:0e:4d:50:3d:1d:f3:cc:87:27:be:32:c3:
dd:b0:45:7b:86:47:f5:f3:e0:ac:1c:ba:1b:ab:91:03:fc:3c:
15:4c:a7:dc:62:40:74:22:01:03:80:de:ee:2f:a3:fc:49:5b:
33:d2:c5:5a:1d:02:67:2c:90:7b:25:ae:de:12:62:38:e2:df:
a2:39:9c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:23:22 2025 by rpki-client