Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
File: 323830343a383966383a3a2f33322d3438203d3e20323733363338.roa (raw, json)
Hash identifier: PVP4QMePZt74ok1Ra+vxXZH/1CtahBP7P1W1jHE4Jp0=
Subject key identifier: 11:58:D3:91:26:C5:95:05:56:2E:4E:94:D4:9F:DF:32:D2:7D:3E:6D
Certificate issuer: /CN=D1CD7DB729738A9B9C182B0604224324C0E266BC
Certificate serial: 3F8639240661A9FB98CB84BD2D27FDA3B24CA06B
Authority key identifier: D1:CD:7D:B7:29:73:8A:9B:9C:18:2B:06:04:22:43:24:C0:E2:66:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD7DB729738A9B9C182B0604224324C0E266BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
Signing time: Wed 08 Jan 2025 17:06:57 +0000
ROA not before: Wed 08 Jan 2025 17:01:57 +0000
ROA not after: Wed 07 Jan 2026 17:06:57 +0000
asID: 273638
IP address blocks: 2804:89f8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:86:39:24:06:61:a9:fb:98:cb:84:bd:2d:27:fd:a3:b2:4c:a0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1CD7DB729738A9B9C182B0604224324C0E266BC
Validity
Not Before: Jan 8 17:01:57 2025 GMT
Not After : Jan 7 17:06:57 2026 GMT
Subject: CN=1158D39126C59505562E4E94D49FDF32D27D3E6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:80:5c:17:49:5b:0e:be:98:37:6c:38:8d:2b:
57:c3:87:37:47:cd:4d:91:73:80:4d:4f:7e:6d:8e:
c9:ce:d2:d7:ec:e8:06:0c:b4:92:c2:c8:45:a6:86:
c5:29:12:c1:88:2d:8c:56:9f:ca:2b:ed:ec:c0:43:
f6:a0:23:98:5a:42:d6:94:08:93:90:e7:fb:de:38:
5d:f5:27:4b:05:c3:5f:b6:e2:2a:68:51:d5:38:52:
89:e3:0d:1f:12:84:e8:5f:04:92:92:6a:4d:9c:82:
ca:7d:db:7a:74:5d:ff:56:cc:d5:b7:0b:0e:a5:c1:
79:5d:ab:56:d2:09:ec:0a:22:85:7a:8a:0c:3f:a1:
7f:58:3d:18:df:ab:74:0c:ea:00:57:ba:74:9a:77:
c2:88:bd:08:d7:15:48:ac:c8:eb:d1:81:3c:96:a0:
fd:f5:ce:6d:7d:c7:99:29:1b:88:27:dd:56:4f:be:
6e:50:99:c6:49:39:92:bd:60:24:d9:2f:12:a3:49:
ef:08:de:a4:e0:db:08:ad:6e:b2:c2:35:3a:76:3e:
4f:6c:fd:a0:cb:8e:5b:fe:ce:59:49:91:5f:29:27:
cd:1e:7e:08:e0:3d:7e:28:28:d8:5e:ee:1f:e7:5b:
96:33:59:4f:00:cc:c1:c2:ef:49:f3:b1:d4:80:b6:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:58:D3:91:26:C5:95:05:56:2E:4E:94:D4:9F:DF:32:D2:7D:3E:6D
X509v3 Authority Key Identifier:
keyid:D1:CD:7D:B7:29:73:8A:9B:9C:18:2B:06:04:22:43:24:C0:E2:66:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/D1CD7DB729738A9B9C182B0604224324C0E266BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1CD7DB729738A9B9C182B0604224324C0E266BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xL8GjMdD2zy7r7NXYrSVmZnx581BMaXRheUtzNQtzhT/0/323830343a383966383a3a2f33322d3438203d3e20323733363338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:89f8::/32
Signature Algorithm: sha256WithRSAEncryption
40:da:33:76:be:60:9d:2a:a3:fb:ec:42:09:9b:0d:1f:42:8b:
99:c9:7e:3a:19:7a:dd:04:a5:66:8f:10:b2:88:bd:61:51:08:
ba:86:30:6e:11:8b:83:89:4a:a1:63:80:eb:60:0b:53:d2:54:
3b:cb:5c:c6:5d:ee:1d:72:b8:24:4a:43:22:b7:bf:cf:df:75:
e9:15:c6:e1:9d:7f:3e:6b:67:80:17:70:ce:29:1d:63:b6:47:
a8:e5:09:cb:47:4b:fd:46:b0:f9:cb:1d:cd:4f:2b:4e:0f:8f:
7c:3c:33:fe:92:bf:ad:64:dc:f2:0e:9f:9e:ed:3f:44:e8:15:
28:1a:8d:8f:62:81:ec:9f:5d:e2:5e:5c:a8:7f:64:b4:1c:ae:
36:17:c4:4e:c4:c7:af:45:47:fb:66:20:e1:18:1c:20:49:8b:
c2:01:00:0b:ce:84:87:3d:a0:56:07:cb:25:4c:2a:b3:8f:55:
fa:cd:de:6c:96:d6:5e:fe:85:06:0c:6b:2d:e0:54:4f:11:63:
0c:a0:10:06:fe:d4:c0:bd:c9:1f:64:1e:a3:64:9e:44:01:77:
24:f0:60:aa:3e:0d:7a:60:1c:c0:83:de:61:f2:e6:f6:ce:da:
73:93:96:3d:c6:4a:0c:eb:e4:74:f1:0e:5a:57:54:34:11:30:
80:24:d5:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:29:06 2025 by rpki-client