Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
File: 323830343a343730383a3a2f33332d3333203d3e20323637303237.roa (raw, json)
Hash identifier: l0lT3TjaLliKdUpi8CgNDjkGpUi0HWRq5FXMmbYUsQE=
Subject key identifier: 17:33:28:43:76:DD:6B:ED:15:B7:EC:ED:1D:9A:58:2B:CC:3A:42:4D
Certificate issuer: /CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Certificate serial: 22A9091A2C79EEB31B371D1C27E92EDAB35E2672
Authority key identifier: 4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
Signing time: Fri 31 Jan 2025 18:02:26 +0000
ROA not before: Fri 31 Jan 2025 17:57:26 +0000
ROA not after: Fri 30 Jan 2026 18:02:26 +0000
asID: 267027
IP address blocks: 2804:4708::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:a9:09:1a:2c:79:ee:b3:1b:37:1d:1c:27:e9:2e:da:b3:5e:26:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C0E5583F85FD92E5B21D697990054A242CE2E03
Validity
Not Before: Jan 31 17:57:26 2025 GMT
Not After : Jan 30 18:02:26 2026 GMT
Subject: CN=1733284376DD6BED15B7ECED1D9A582BCC3A424D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:de:49:9b:12:f9:44:4d:93:69:25:2b:f8:d5:
d0:5a:ae:3c:72:b6:8f:b7:92:b5:43:5e:49:16:54:
a6:09:5f:0c:f5:1d:bc:4b:d1:72:7c:84:ba:82:64:
19:70:72:ef:87:66:cf:82:82:ce:04:03:ed:2f:22:
6e:18:af:10:94:4b:fe:32:8e:db:f1:a2:35:72:30:
2d:a5:df:b4:31:5b:dc:4f:23:20:b6:8a:60:3a:27:
e9:01:65:9d:ae:c9:07:40:6d:25:79:07:eb:2f:cb:
28:13:e8:ab:59:22:8d:dc:a5:ec:14:41:2d:2f:b5:
21:49:35:df:6a:5b:1c:85:21:6f:ee:05:c4:45:fd:
c6:19:41:f9:da:68:50:b2:17:87:78:ab:15:47:b5:
41:eb:e9:dc:a9:2b:f8:6b:c9:df:cc:d1:94:0f:6f:
de:9a:42:b3:25:4f:ab:4d:9c:79:c7:6b:4c:4f:61:
83:42:45:18:39:b9:95:40:62:fa:bb:62:01:9d:a5:
47:ef:e6:1b:15:01:e7:3f:53:08:ab:27:28:28:c6:
77:53:eb:3c:7d:23:2e:03:47:0c:e1:38:fb:89:20:
95:84:7e:35:27:54:ff:eb:bb:79:f7:d4:5f:30:d7:
ca:11:88:0f:c4:09:dc:2c:91:c3:78:70:7d:75:4a:
23:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:33:28:43:76:DD:6B:ED:15:B7:EC:ED:1D:9A:58:2B:CC:3A:42:4D
X509v3 Authority Key Identifier:
keyid:4C:0E:55:83:F8:5F:D9:2E:5B:21:D6:97:99:00:54:A2:42:CE:2E:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/4C0E5583F85FD92E5B21D697990054A242CE2E03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C0E5583F85FD92E5B21D697990054A242CE2E03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5uuDZqgLqYPotEceBsmcS6SeMdwpyqXVuahhvraWtJYz/0/323830343a343730383a3a2f33332d3333203d3e20323637303237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4708::/33
Signature Algorithm: sha256WithRSAEncryption
79:28:cf:65:a0:65:bb:1a:e1:02:b2:5c:c5:13:83:5d:10:f0:
71:0f:b3:3c:68:f6:d0:d4:cf:52:de:25:0f:3f:11:fe:7a:15:
8a:31:a3:a0:92:c0:7d:b8:7b:c5:be:06:d8:b9:98:c5:4f:41:
94:b6:6f:a7:d8:cf:11:42:c3:28:cb:1d:9f:ae:8b:11:ad:c0:
a1:40:e0:a2:a8:9f:ce:da:d2:da:5a:63:92:5d:8f:f3:19:19:
19:db:c3:99:1e:85:01:3a:c0:ef:aa:95:27:a6:d2:d0:5b:b2:
57:9a:78:2b:f5:d5:1d:f1:ba:1b:3a:74:c8:ef:82:de:64:a8:
9f:8b:bf:4e:2b:e0:df:08:cf:9f:6a:e1:8c:fd:b8:76:26:e3:
11:15:4d:fd:9c:3e:3a:e6:3e:3d:87:58:ec:f4:c0:25:89:41:
72:41:83:e5:87:0d:74:00:40:26:81:ad:47:0f:e9:99:77:9a:
fc:dc:67:2a:22:c5:fe:0c:8c:e9:a0:c9:d4:b3:5f:de:03:33:
ff:69:6d:4d:7e:93:84:97:0e:f8:32:48:48:64:0d:b9:ea:95:
b4:1a:a3:7d:3c:18:8a:32:ca:f0:02:cd:1e:56:e8:99:c3:70:
f2:25:05:4b:a1:67:16:7d:ce:18:38:05:f5:8f:aa:79:55:21:
a0:57:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:46:13 2025 by rpki-client