Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
File: 323830343a3930383a3a2f33322d313238203d3e20323633303437.roa (raw, json)
Hash identifier: mCYiAtu6sdqakJ+N2F4QnZO5Hg/TZvqO3gdlF6mDOBg=
Subject key identifier: 54:10:D3:9C:77:84:4B:D9:B2:36:6D:FE:45:DC:8E:0A:72:88:C4:2A
Certificate issuer: /CN=2D5218850067B1879FF7D928A844733CA008C908
Certificate serial: 6D5371E83A7B9CACDE7B5C4DC0EE969EB4075A9D
Authority key identifier: 2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
Signing time: Wed 29 Jan 2025 13:28:42 +0000
ROA not before: Wed 29 Jan 2025 13:23:42 +0000
ROA not after: Wed 28 Jan 2026 13:28:42 +0000
asID: 263047
IP address blocks: 2804:908::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:53:71:e8:3a:7b:9c:ac:de:7b:5c:4d:c0:ee:96:9e:b4:07:5a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D5218850067B1879FF7D928A844733CA008C908
Validity
Not Before: Jan 29 13:23:42 2025 GMT
Not After : Jan 28 13:28:42 2026 GMT
Subject: CN=5410D39C77844BD9B2366DFE45DC8E0A7288C42A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:23:10:35:04:93:03:88:82:97:22:bf:92:56:
81:85:be:b9:a5:8a:f5:bd:1c:f5:03:8f:bd:eb:d2:
a7:18:09:19:63:d5:5f:90:5f:89:bc:17:9f:d3:43:
4d:c5:42:67:5d:7e:e8:1e:27:21:8e:29:bb:80:38:
47:3f:98:d3:04:97:2a:48:90:b0:8c:56:04:93:b1:
46:97:53:98:29:df:ba:a9:d4:cf:ab:4c:99:94:82:
b7:9f:d8:23:f4:f1:15:ec:64:73:22:d2:73:1d:f9:
b4:74:a2:ec:c0:f2:60:08:74:e7:c4:c6:9c:ab:da:
fb:41:1a:5d:7c:b8:03:f3:3a:a8:10:4a:6e:04:0f:
cb:44:ee:ce:e7:fe:69:b5:7d:1b:4c:84:28:62:1e:
c1:25:e6:9b:5b:45:fe:6f:1c:b2:85:b5:74:c1:de:
3c:b4:50:14:07:5e:dc:d7:71:c2:3f:7d:1a:bb:3e:
c6:19:59:a7:dc:c2:a0:39:d0:a9:4b:87:e0:f1:37:
62:42:23:6e:03:6a:f7:94:6a:63:74:3d:fc:92:af:
2c:8b:8f:2e:2e:75:0a:9c:79:e7:b6:c5:4f:19:67:
f0:89:8a:0d:c6:c9:1e:a5:de:39:3d:75:6d:d3:16:
9c:39:d3:5d:08:76:1b:03:a1:44:a6:c8:ed:bc:d2:
12:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:10:D3:9C:77:84:4B:D9:B2:36:6D:FE:45:DC:8E:0A:72:88:C4:2A
X509v3 Authority Key Identifier:
keyid:2D:52:18:85:00:67:B1:87:9F:F7:D9:28:A8:44:73:3C:A0:08:C9:08
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/2D5218850067B1879FF7D928A844733CA008C908.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D5218850067B1879FF7D928A844733CA008C908.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79gb79DhY1oyAmsHY3QwikknQEBWjC1JWwttLxBES6zu/0/323830343a3930383a3a2f33322d313238203d3e20323633303437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:908::/32
Signature Algorithm: sha256WithRSAEncryption
77:a3:38:d8:1d:80:47:d2:d0:d4:51:84:77:c3:ae:29:7a:9a:
20:30:7a:76:11:47:71:ca:e9:b4:90:83:e4:7c:d5:a1:cb:e4:
1e:74:1a:0b:b3:52:8d:81:db:c7:0a:83:55:68:c5:ec:fb:fa:
75:f3:63:10:a7:9b:73:62:fd:35:25:34:13:2f:be:e2:95:3d:
18:2e:07:93:30:b1:a3:4f:39:02:d2:6c:97:1f:82:09:fe:93:
74:87:d3:82:2b:36:8c:86:05:e2:bd:05:12:a6:19:8d:08:3d:
4c:d9:a6:a5:e7:53:7e:63:83:a5:58:d7:6b:4e:43:19:85:43:
c0:9c:72:69:b9:ad:bc:9b:4f:29:ec:a0:a3:2e:9d:de:18:57:
e7:ab:96:fb:52:5e:68:2c:ea:f3:5d:96:95:f4:90:2d:7d:99:
8c:ca:48:f2:66:9a:ea:02:e0:c4:42:8f:56:58:ff:07:0f:66:
f2:53:11:9d:2f:1e:0b:2a:d1:ad:23:85:51:77:21:ce:b3:cb:
fd:16:f7:a6:b4:b7:18:7d:3b:a7:a9:5c:1d:06:4a:e1:19:48:
57:40:9d:3a:62:1e:0c:a4:0c:8f:97:4e:d8:14:28:35:f7:82:
76:11:1c:fe:38:e9:4c:09:54:eb:ec:40:ec:a8:82:13:93:83:
e5:66:9f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:24:40 2025 by rpki-client