Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
File: 323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa (raw, json)
Hash identifier: /5bHFipjM5r1wqw8zwf1ltD1rgqAIONncVw7Q338FhU=
Subject key identifier: 70:83:96:ED:99:A2:D1:52:23:41:A1:D9:F6:F3:F8:80:14:2B:15:8C
Certificate issuer: /CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Certificate serial: 44B5D51B428F333232EDFC8EF8ABB8DEA964D655
Authority key identifier: D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
Signing time: Fri 23 Feb 2024 01:44:11 +0000
ROA not before: Fri 23 Feb 2024 01:39:11 +0000
ROA not after: Fri 21 Feb 2025 01:44:11 +0000
asID: 266385
IP address blocks: 2804:3708:8040::/42 maxlen: 42
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:b5:d5:1b:42:8f:33:32:32:ed:fc:8e:f8:ab:b8:de:a9:64:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4340BBCF3511E7FF0C0D979030DCC8553E16676
Validity
Not Before: Feb 23 01:39:11 2024 GMT
Not After : Feb 21 01:44:11 2025 GMT
Subject: CN=708396ED99A2D1522341A1D9F6F3F880142B158C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:95:28:05:4a:04:b2:2d:cb:b1:6d:54:2b:
f4:87:4a:de:d1:ce:e8:aa:78:9e:e1:41:91:29:da:
14:0b:e9:f2:72:04:37:ad:83:2c:bc:11:23:1f:e9:
00:d0:47:f1:5c:db:46:a3:40:78:de:0f:1d:93:eb:
49:17:86:9d:ae:58:cd:92:39:cc:4a:58:c5:9d:85:
9f:eb:a0:1e:2e:84:c8:bc:47:0a:9f:6d:93:00:fe:
1c:15:ab:55:f9:67:0c:81:09:2d:24:a5:85:c6:c0:
56:32:dc:3f:09:c5:da:13:a3:9b:70:c9:b3:d9:42:
80:1a:62:2a:95:f0:a6:de:96:1e:88:5f:29:d5:0e:
bb:9f:f8:fc:21:2c:de:1f:72:08:ff:8b:82:82:a9:
b8:4b:c3:62:7e:e3:e4:9d:a3:51:2d:2b:b4:48:3d:
84:87:1e:9a:86:cf:b7:d4:ea:f6:7c:62:2b:4e:03:
25:70:f4:74:99:23:6b:1a:1e:df:08:62:b1:2f:78:
31:d5:eb:56:28:53:8b:18:36:d5:7c:96:bd:a1:5f:
91:de:b8:10:52:ba:ef:2d:9b:44:e3:4d:05:22:60:
a4:56:ec:6d:c7:ab:b5:7a:18:a2:51:7c:4b:60:b5:
e1:64:5a:5c:b8:dc:64:9c:a1:04:5f:e3:66:fc:b5:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:83:96:ED:99:A2:D1:52:23:41:A1:D9:F6:F3:F8:80:14:2B:15:8C
X509v3 Authority Key Identifier:
keyid:D4:34:0B:BC:F3:51:1E:7F:F0:C0:D9:79:03:0D:CC:85:53:E1:66:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4340BBCF3511E7FF0C0D979030DCC8553E16676.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wFRG486UNQp8MxtNRYhoMmgdXvuCyYk91xqHzQ8dLzP/0/323830343a333730383a383034303a3a2f34322d3432203d3e20323636333835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3708:8040::/42
Signature Algorithm: sha256WithRSAEncryption
34:a3:68:6e:41:65:cb:8b:bb:b3:57:0b:62:d2:7a:08:d4:72:
c9:3e:85:97:87:5e:40:62:46:da:4e:ce:c2:fe:3d:06:7c:b1:
32:e6:fd:f9:51:bb:89:61:66:4b:ea:7d:0f:af:3c:b2:a6:a0:
da:48:a0:3f:c7:15:bd:08:70:3b:6b:77:8e:1a:3d:9c:1f:7b:
f1:6d:00:d0:60:e0:87:cc:83:18:bd:60:95:f2:04:25:10:3d:
32:7b:75:ed:59:68:1d:b2:5d:af:2b:c4:99:2a:fc:a6:87:76:
a7:a9:77:01:a0:8b:64:eb:e4:c9:df:62:55:2e:14:4c:d7:42:
b6:76:6c:46:17:0e:ad:28:50:52:c6:36:a4:ad:21:51:be:77:
35:cd:20:36:33:54:7c:fb:9b:77:f2:9d:3f:1f:30:b6:0d:09:
51:eb:82:8a:fa:74:62:15:e7:88:8b:e1:84:5e:6b:35:69:d4:
5c:92:50:b0:1c:55:fc:d7:43:7d:4f:a1:97:7d:e5:d4:57:67:
dd:2b:68:ca:26:cb:f7:3c:9e:2a:01:54:c0:80:eb:d0:96:f8:
ec:f4:7f:37:2e:49:1c:1b:00:46:07:c1:47:c7:15:f9:08:09:
84:ce:5a:1c:cd:17:9f:93:7e:ad:4e:08:d4:3e:bb:08:f5:bf:
ea:27:18:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 04:31:04 2025 by rpki-client