Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa
File: 323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier: rX+iBArovVcIkXbL7jKx0SltdBT8fVDHZR60y6RLgF8=
Subject key identifier: C7:FA:75:08:2B:FF:A9:A9:46:F3:F3:E7:E0:42:60:5B:5D:D0:4B:92
Certificate issuer: /CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Certificate serial: 53EFD356D6F7EDD1CFF1A1B08D5B74CE62AA5DE9
Authority key identifier: 99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa
Signing time: Thu 02 Jan 2025 21:05:12 +0000
ROA not before: Thu 02 Jan 2025 21:00:12 +0000
ROA not after: Thu 01 Jan 2026 21:05:12 +0000
asID: 267426
IP address blocks: 2804:4150:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ef:d3:56:d6:f7:ed:d1:cf:f1:a1:b0:8d:5b:74:ce:62:aa:5d:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Validity
Not Before: Jan 2 21:00:12 2025 GMT
Not After : Jan 1 21:05:12 2026 GMT
Subject: CN=C7FA75082BFFA9A946F3F3E7E042605B5DD04B92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:9c:93:06:a6:03:c8:ab:d1:33:41:ba:25:
c8:29:7e:72:71:72:d1:16:c0:ed:32:e3:43:28:ba:
87:5e:b0:2e:91:91:95:52:c2:9b:3f:a2:f2:0d:11:
a0:2c:df:fd:9b:8c:d5:4b:1b:d0:00:fc:74:48:bc:
3c:32:fb:dc:e4:44:f7:8f:e2:c4:8e:e4:d0:15:e5:
d1:71:50:e6:e7:b2:f9:93:c8:6c:02:db:e2:cf:3c:
de:66:1b:5c:9d:0c:6e:93:fa:3c:8e:3c:bd:2d:96:
5f:d6:9d:09:c6:43:89:8d:e5:d9:03:ff:04:a6:89:
4c:df:42:a8:83:d6:4b:76:f9:af:15:68:19:a6:e1:
ae:7d:3a:a9:af:0d:51:14:4a:ad:e6:89:11:d5:03:
37:5b:3d:0a:69:91:26:8e:96:85:ca:2e:6f:08:f2:
98:8c:fe:3e:ea:35:75:19:a7:ae:bb:6a:1a:dd:35:
3f:98:ed:e8:c1:7d:95:31:bb:82:7a:71:98:5f:1f:
b4:15:2a:bb:23:22:f9:ce:71:d6:a2:67:80:45:e3:
d9:35:e2:0a:ce:7e:ad:a6:9b:ed:04:9b:55:f5:f8:
da:db:05:56:d5:23:a6:59:f6:ae:87:81:fe:57:72:
69:66:94:45:c5:64:71:2b:76:ed:a8:4d:a2:31:54:
d5:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:FA:75:08:2B:FF:A9:A9:46:F3:F3:E7:E0:42:60:5B:5D:D0:4B:92
X509v3 Authority Key Identifier:
keyid:99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/99860D8BD99F614FD480F6A6BA21C433A2269699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a383030303a3a2f33342d3334203d3e20323637343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4150:8000::/34
Signature Algorithm: sha256WithRSAEncryption
29:f9:5c:83:8c:63:9c:2c:65:31:c6:04:17:2b:cf:2a:36:64:
d0:1c:0d:96:60:d5:37:75:6d:ee:e8:eb:52:63:4d:ac:91:bf:
30:57:b1:f3:1f:04:bc:4d:a3:8b:76:a9:7d:73:9d:09:9b:c7:
f5:88:30:07:54:fc:3d:aa:a5:05:27:ac:78:2f:f9:de:76:d9:
2c:b7:7d:be:dd:d6:ae:59:5e:9d:b8:54:e9:36:93:9b:32:c2:
71:fa:3f:bf:0b:d2:f8:0e:78:21:3c:f1:f0:72:fb:fd:77:11:
d1:06:69:40:ba:89:8c:e4:29:46:25:f8:70:14:80:6f:a2:2c:
60:ff:66:2c:86:69:63:4f:75:08:57:24:6c:da:d2:6d:24:67:
18:c8:2e:a3:8e:ef:58:29:1a:12:b5:bd:1d:df:8a:e6:e5:c1:
9a:fd:57:4d:d2:6f:19:84:26:bb:6d:d7:c0:76:93:85:d8:fc:
4c:3e:8e:4c:33:de:cb:b1:be:d1:97:45:3f:b2:13:ae:6e:93:
33:69:aa:5b:2e:76:34:d7:a1:de:83:95:6b:f4:c2:ff:2a:72:
6d:31:d1:16:1d:bc:5e:fd:81:cc:07:da:ed:f6:6a:ab:f3:e8:
68:46:28:e8:6c:7c:ff:02:fc:b0:11:04:31:d3:43:80:31:be:
94:65:a7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 23:05:51 2025 by rpki-client