Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
File: 323830343a346632383a3a2f33332d3333203d3e20323638333038.roa (raw, json)
Hash identifier: K9IIg182fCD3BjrwtbHKfrj2fSW4erKdi0LFNmrA0Ik=
Subject key identifier: 6E:90:D0:9B:96:CD:6B:6B:7B:CD:8B:4B:2C:1B:1A:C7:32:8D:FC:80
Certificate issuer: /CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Certificate serial: 4ED2F96A78CDA10B29AAF0B7F810D2C49E7F91C2
Authority key identifier: 92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
Signing time: Thu 04 Apr 2024 19:57:47 +0000
ROA not before: Thu 04 Apr 2024 19:52:47 +0000
ROA not after: Thu 03 Apr 2025 19:57:47 +0000
asID: 268308
IP address blocks: 2804:4f28::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:d2:f9:6a:78:cd:a1:0b:29:aa:f0:b7:f8:10:d2:c4:9e:7f:91:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92D9D8840A39363255BB28B0D60BB4AD3B9C08D9
Validity
Not Before: Apr 4 19:52:47 2024 GMT
Not After : Apr 3 19:57:47 2025 GMT
Subject: CN=6E90D09B96CD6B6B7BCD8B4B2C1B1AC7328DFC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fb:1a:4b:d2:a5:f6:f5:70:a8:be:87:cc:42:
e6:42:ff:03:b0:da:94:6b:c1:5e:93:0b:bd:4c:5b:
34:8c:89:58:a5:e9:f7:5f:d7:3a:39:5e:7f:f7:12:
ca:25:f6:ad:54:c2:8b:88:44:e0:c0:ee:00:e1:f0:
d3:b0:9e:bd:0e:fa:1e:29:3f:cf:d3:22:25:7b:8f:
27:2d:b8:45:7b:4f:3c:f8:98:a1:23:f2:9a:71:b7:
a4:68:0a:90:65:b2:7e:74:36:4f:2b:c4:38:f5:6a:
43:8a:78:8a:65:79:6f:9e:a7:70:c9:e3:28:7b:eb:
14:10:eb:2f:aa:ae:9a:f2:86:f5:53:04:e4:4e:4e:
2f:7c:be:fc:e8:2e:d2:2d:15:94:04:de:c3:b7:8c:
a9:31:2d:08:f5:e4:d3:f3:14:81:d8:96:75:2a:b1:
54:db:f2:f5:f2:52:05:e4:ac:d2:f0:48:ab:cd:f1:
e3:7d:c5:99:88:a8:d5:35:44:33:84:11:e2:40:37:
39:4e:06:5b:d1:b4:b6:74:39:2a:cf:93:b0:c2:94:
60:5b:88:dc:e9:e8:3f:01:07:27:cc:f8:c7:e2:b6:
c9:bd:7c:41:b2:09:dc:22:90:49:6e:51:55:8b:f1:
e4:13:1f:bf:90:39:e5:f4:bb:7d:5a:fd:de:46:b6:
c3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:90:D0:9B:96:CD:6B:6B:7B:CD:8B:4B:2C:1B:1A:C7:32:8D:FC:80
X509v3 Authority Key Identifier:
keyid:92:D9:D8:84:0A:39:36:32:55:BB:28:B0:D6:0B:B4:AD:3B:9C:08:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/92D9D8840A39363255BB28B0D60BB4AD3B9C08D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/725DE8VuC1LEty5HDPBofeiERCTC9K38u8UP6Sbh5w9m/1/323830343a346632383a3a2f33332d3333203d3e20323638333038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f28::/33
Signature Algorithm: sha256WithRSAEncryption
94:19:44:3a:cc:4c:7a:35:5e:eb:28:d5:eb:02:de:36:0d:3d:
88:c8:2d:be:8f:6f:b1:60:e3:20:5d:bd:5b:6e:34:ff:2e:1b:
10:c7:09:08:5a:f9:23:8f:1e:87:1e:5d:d7:f4:8a:b5:b3:d9:
8e:24:b7:0b:db:eb:fd:ac:3c:ff:cf:e7:dd:78:f2:c2:fa:66:
1e:1e:cd:b5:86:7d:dc:fc:2e:61:1d:3b:cd:bd:e2:35:53:78:
1c:8b:c5:00:42:24:cb:ec:18:d3:10:06:94:34:d8:a9:2b:9b:
80:49:a0:b1:3a:a9:0b:3a:b2:7e:ed:30:7b:16:e8:4f:61:16:
0f:f3:b6:05:8c:24:46:8c:7c:c4:de:9a:71:e7:01:31:9c:35:
2f:92:0d:09:6d:f1:d2:10:f5:a5:cf:81:b5:97:dd:ae:04:b1:
a7:ee:78:35:73:0b:11:91:aa:86:3e:47:f7:35:3a:8e:c7:31:
51:e7:0d:eb:dd:4d:98:d2:1b:57:5d:74:8b:e7:a4:80:c8:89:
c3:19:24:1b:bd:71:cb:28:fb:1e:1b:79:65:2a:5d:d5:50:f7:
7f:16:7d:c6:9f:91:d8:5a:3f:c1:48:ce:25:32:44:ec:f7:a2:
ce:5c:63:bc:0e:1b:fb:94:08:f3:58:77:47:77:55:9c:2d:f9:
f0:6d:5d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:40:52 2025 by rpki-client