Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
File: 323830343a343135303a3a2f33342d3334203d3e20323637343236.roa (raw, json)
Hash identifier: fv0A3GxZX4c1AgWAGfXD9U4ymBk4IiPIA1jGFcg0CTE=
Subject key identifier: 41:FF:28:64:37:87:55:70:B2:57:4E:AC:8A:45:68:70:DC:F4:70:FC
Certificate issuer: /CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Certificate serial: 3E312BCF6271F87573A9ECFBA8FB57537E4883E4
Authority key identifier: 99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
Signing time: Fri 10 Jan 2025 11:17:18 +0000
ROA not before: Fri 10 Jan 2025 11:12:18 +0000
ROA not after: Fri 09 Jan 2026 11:17:18 +0000
asID: 267426
IP address blocks: 2804:4150::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:31:2b:cf:62:71:f8:75:73:a9:ec:fb:a8:fb:57:53:7e:48:83:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99860D8BD99F614FD480F6A6BA21C433A2269699
Validity
Not Before: Jan 10 11:12:18 2025 GMT
Not After : Jan 9 11:17:18 2026 GMT
Subject: CN=41FF286437875570B2574EAC8A456870DCF470FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:68:52:a8:20:7d:a0:32:db:1f:40:40:d6:c1:
8d:3c:dc:ee:90:01:9d:2c:58:c8:ed:90:97:74:1a:
af:a4:4c:c8:13:76:18:50:ce:90:3a:cb:81:23:cd:
f9:04:be:5c:22:c5:a7:2c:d7:d0:7a:ca:a6:65:63:
f9:69:a5:8f:a7:2d:60:fe:0f:c0:40:9b:89:1f:83:
65:16:8e:d4:eb:ac:df:68:49:c8:e6:69:13:91:87:
2a:02:db:26:af:49:c9:d7:02:6d:96:67:cd:90:4b:
61:72:b2:44:a1:9d:7e:8f:3f:3d:4d:5c:e1:5b:34:
9c:11:ba:05:94:c3:cb:21:a6:70:dd:3f:25:d1:af:
82:1f:14:cc:d4:79:ee:0f:1a:49:4d:53:32:ab:da:
ab:a9:d2:bb:f6:44:da:05:0a:98:06:b6:17:d9:2d:
ac:af:71:dc:6a:51:e0:65:d7:d8:85:1a:28:5d:6c:
3a:68:46:c8:f8:9f:76:ec:76:c4:ef:a2:34:6d:f6:
78:cb:5b:30:e7:10:0d:84:01:d5:58:0c:b0:e6:a4:
a3:8f:9a:d4:06:ef:9f:8b:dc:7d:6d:71:64:90:19:
7f:ed:48:94:e2:5d:7b:0b:be:3f:2d:b4:73:5c:72:
e6:a9:15:8b:92:bc:9f:e3:e7:df:36:12:8d:09:c5:
45:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FF:28:64:37:87:55:70:B2:57:4E:AC:8A:45:68:70:DC:F4:70:FC
X509v3 Authority Key Identifier:
keyid:99:86:0D:8B:D9:9F:61:4F:D4:80:F6:A6:BA:21:C4:33:A2:26:96:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/99860D8BD99F614FD480F6A6BA21C433A2269699.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99860D8BD99F614FD480F6A6BA21C433A2269699.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wYykgtQWEFqj7Fu3xZThN2DrX9jdvCaVn2wMXFb6U52/1/323830343a343135303a3a2f33342d3334203d3e20323637343236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4150::/34
Signature Algorithm: sha256WithRSAEncryption
70:b3:aa:0c:61:61:bb:10:9e:2e:6e:54:a4:56:a9:dc:80:9a:
13:69:24:a6:36:02:18:d8:26:dc:45:42:56:e4:83:6d:8f:d0:
8d:7a:87:6b:8a:d1:e0:88:56:1e:61:1b:60:0f:e1:ac:b2:33:
f6:10:1d:e8:1a:13:67:a5:66:88:0e:8d:4c:ed:e1:50:b2:98:
bc:18:4d:0b:c5:36:56:67:cd:3b:84:c0:9e:42:7a:42:6e:ca:
7f:5d:ab:a0:2b:28:3c:44:22:fd:d1:c6:bf:b0:fb:c9:1b:5d:
b5:22:73:63:46:b7:bb:a1:f6:ac:91:f7:5d:a0:ef:4c:97:a1:
10:99:c3:df:fd:da:40:75:90:5c:66:2a:c9:13:01:a5:ab:7c:
77:68:67:02:8c:5d:6c:8f:1c:af:e0:eb:36:8a:de:09:22:4a:
c6:e3:37:7b:c2:94:73:75:04:53:d6:7a:b4:a4:39:1b:a2:2c:
13:ec:8f:68:6a:2e:ee:15:e9:a7:f1:49:a2:20:e0:4a:e5:17:
03:57:e9:cd:55:0f:40:5c:89:7e:47:78:e9:a9:5a:36:ac:92:
66:20:50:6a:06:f6:ab:47:6f:45:d4:25:42:20:e4:b2:da:16:
0c:52:de:41:b9:64:13:28:38:06:2d:a1:b3:85:0d:06:3b:cf:
12:ee:11:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:32:27 2025 by rpki-client