Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a383030303a3a2f33332d3333203d3e20323637353038.roa
File: 323830343a343239303a383030303a3a2f33332d3333203d3e20323637353038.roa (raw, json)
Hash identifier: 1HLmlOl9TB/SxMvViWIwyE51jE4ecXVDxyViYEh7Bro=
Subject key identifier: 42:E7:07:8E:D0:EC:36:F6:0A:19:77:B4:C3:0F:6A:DC:3E:6C:52:6F
Certificate issuer: /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial: 21C2C74ABBE71E7ED05CA599006B991AA9BCFE70
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a383030303a3a2f33332d3333203d3e20323637353038.roa
Signing time: Sun 28 Jul 2024 19:41:44 +0000
ROA not before: Sun 28 Jul 2024 19:36:44 +0000
ROA not after: Sun 27 Jul 2025 19:41:44 +0000
asID: 267508
IP address blocks: 2804:4290:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:c2:c7:4a:bb:e7:1e:7e:d0:5c:a5:99:00:6b:99:1a:a9:bc:fe:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Validity
Not Before: Jul 28 19:36:44 2024 GMT
Not After : Jul 27 19:41:44 2025 GMT
Subject: CN=42E7078ED0EC36F60A1977B4C30F6ADC3E6C526F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ed:39:ce:3e:66:d1:c5:c0:d1:00:6d:e3:38:
4a:a4:44:ea:58:de:ae:49:eb:57:b3:87:a6:0e:3f:
34:d3:bc:9d:aa:d1:7c:d0:de:c1:a1:95:36:fd:ee:
cd:9f:b7:eb:c3:28:2b:35:71:4a:6e:c6:11:f9:11:
1d:e2:fa:8b:a9:27:f8:b7:06:a0:08:97:65:71:62:
ae:06:9b:03:ce:14:b5:50:11:a7:3e:53:69:31:01:
b2:56:32:50:9f:f3:10:56:c3:e6:ab:26:3c:63:5b:
af:b5:a5:c9:1d:c7:b5:2a:4a:c7:38:c2:a9:c9:f3:
41:cf:e7:4d:b4:f8:59:5e:dc:92:91:c3:d4:5a:9f:
8e:c9:5e:e7:2d:05:81:77:7c:35:93:7f:c5:6d:35:
cd:8b:32:30:66:4e:f4:72:b1:fe:50:6d:04:f8:5f:
8a:db:f5:81:56:99:56:6e:24:ea:4f:95:d4:fc:92:
23:b2:8e:8f:82:3e:99:18:d0:4d:f7:00:a7:f2:d9:
0f:c5:63:59:75:24:44:ed:fa:cd:06:04:b3:34:c1:
b1:be:86:c2:4f:74:b4:9e:fc:ff:ac:11:6d:77:42:
fa:18:a5:c5:ab:d9:58:23:95:37:3d:f2:8d:5c:79:
75:6a:f2:b0:2c:fe:cd:a7:86:89:fd:2c:3e:57:95:
7b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:07:8E:D0:EC:36:F6:0A:19:77:B4:C3:0F:6A:DC:3E:6C:52:6F
X509v3 Authority Key Identifier:
keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a383030303a3a2f33332d3333203d3e20323637353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4290:8000::/33
Signature Algorithm: sha256WithRSAEncryption
ba:61:14:9c:bc:19:55:ac:64:f3:93:7d:43:15:6f:84:24:ff:
ba:e6:c7:46:44:d6:6c:18:71:53:94:8c:ce:ad:b5:a4:68:b4:
e1:49:75:ba:c5:f7:60:6d:3f:f2:11:f1:6f:4a:9c:f3:cc:62:
f3:da:1b:ea:1a:e3:42:c3:8d:7e:81:65:e9:fa:23:fc:40:de:
ab:f8:51:b8:bc:a4:71:2c:f7:f1:33:a1:02:3d:05:17:57:56:
96:2c:95:35:db:b8:fb:a4:3f:f6:a8:6e:65:ec:0a:45:4b:68:
f1:a7:df:92:90:8b:d1:35:75:72:26:48:a2:a7:69:4a:d4:8c:
69:21:4b:64:ed:36:e6:8f:f7:e8:9c:63:48:c7:80:a6:56:bb:
ce:c3:63:63:26:ec:1a:a5:af:54:27:b6:e0:8b:5c:e5:46:cc:
b5:25:c0:14:1d:4d:5b:94:1e:c0:b9:a3:a6:c5:bf:c5:be:72:
6c:13:d4:72:35:9c:19:89:f4:13:0c:a8:74:a8:57:0a:54:18:
a3:4b:80:a5:73:3f:98:20:8c:fe:eb:5a:e8:a0:fc:c1:09:76:
14:75:cd:02:d7:e4:a2:65:e1:7d:66:1b:29:8b:34:d6:9a:ac:
91:b2:f4:67:b7:97:f2:ad:28:c5:99:ba:d1:87:6b:a3:8d:a2:
fe:1f:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:06:49 2025 by rpki-client