Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a383030303a3a2f33332d3333203d3e20323633333230.roa
File: 323830343a313433633a383030303a3a2f33332d3333203d3e20323633333230.roa (raw, json)
Hash identifier: NEtCLNP/U3aXxhzlj5XM9jVupCn09dXaf4exQorL7fA=
Subject key identifier: EA:C2:01:70:1C:2F:C9:0F:8B:EF:73:E2:33:74:E7:1C:56:1A:2C:5B
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 7064A39733B4B8A5B04E837CB381E9A24C268C10
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a383030303a3a2f33332d3333203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:42:59 +0000
ROA not before: Mon 06 Jan 2025 18:37:59 +0000
ROA not after: Mon 05 Jan 2026 18:42:59 +0000
asID: 263320
IP address blocks: 2804:143c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:64:a3:97:33:b4:b8:a5:b0:4e:83:7c:b3:81:e9:a2:4c:26:8c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:37:59 2025 GMT
Not After : Jan 5 18:42:59 2026 GMT
Subject: CN=EAC201701C2FC90F8BEF73E23374E71C561A2C5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:9e:ec:1e:b7:74:2c:69:01:d1:e9:94:4c:ee:
30:9a:7c:da:12:8e:27:75:88:34:80:80:b0:59:19:
d4:b4:02:1a:bd:b0:03:b3:9e:92:64:be:5b:28:5d:
d7:d0:b9:cb:08:4c:d4:1d:12:dd:eb:72:b9:ee:03:
1b:8c:63:6e:9e:0e:e6:9c:e8:2d:34:14:27:7e:e7:
9d:1d:66:4a:98:56:11:7c:b2:be:a7:91:86:a1:bd:
03:c3:07:08:8c:ca:0e:71:14:9b:76:ec:57:4d:27:
27:bf:88:b5:6c:b1:70:8f:65:e4:a2:87:6d:4e:32:
da:6a:d4:c2:d0:29:14:c8:20:28:2e:65:e2:07:26:
47:1f:0c:bc:38:0b:c2:f9:76:08:af:8e:42:25:8b:
a1:89:b3:01:f6:9a:78:b1:42:d9:43:bd:27:ae:d7:
e5:8d:56:73:3c:4c:3d:7b:5b:9d:58:e9:75:9a:f3:
6e:3c:06:cc:db:19:4b:96:a2:6c:12:29:72:3e:c2:
03:13:eb:6a:70:3d:28:ab:8c:47:46:86:47:05:61:
3e:d7:99:3a:41:0f:7b:6e:4b:16:9a:7d:c7:cc:ab:
7d:3a:ca:dc:ef:05:32:40:ee:aa:e0:93:47:b0:f2:
75:94:32:87:b7:24:e5:76:77:2f:cc:ad:7e:ac:d1:
3c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C2:01:70:1C:2F:C9:0F:8B:EF:73:E2:33:74:E7:1C:56:1A:2C:5B
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a383030303a3a2f33332d3333203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
92:bc:a9:90:48:9e:d5:4f:37:4f:6e:33:b7:42:d6:f4:4d:05:
f4:89:5b:f0:9a:f5:80:3a:34:0f:a8:78:4f:5e:f5:36:68:60:
8e:28:8d:ec:c2:12:d2:63:f0:3f:4e:93:fe:32:e9:49:c5:bd:
93:e0:ee:08:0d:17:d4:af:c1:d6:ff:6d:af:77:4d:53:cf:0c:
f5:fa:17:dc:1d:b8:88:dd:66:1e:52:e7:63:21:f6:15:7b:d6:
59:45:7e:f5:c8:8c:eb:5b:94:23:54:78:9b:e7:21:21:3a:4d:
26:93:2a:be:d9:88:e7:58:11:a9:19:14:89:0e:b6:01:53:dc:
9f:b9:28:a7:7b:82:9b:64:8e:e9:5d:9c:6a:5c:1a:d7:47:3d:
4d:12:dd:89:1f:1f:a4:a8:d4:8c:6f:06:47:b6:42:c2:25:21:
99:24:ed:83:9f:d8:fa:bc:3b:57:a7:83:1c:cb:3b:48:7c:04:
e1:5a:6c:d2:d5:0e:ab:d8:45:2c:2f:5b:38:6c:7e:ec:62:d9:
bf:1f:58:4c:f8:9f:d6:b6:af:d7:17:85:34:d3:c0:32:c6:45:
57:17:44:30:f4:22:47:47:7a:19:67:7e:3d:45:62:84:dd:ad:
92:04:f6:c7:09:f2:70:ce:a0:17:11:80:96:86:42:86:39:c7:
fe:3e:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:45:19 2025 by rpki-client