Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666634303a3a2f34342d3434203d3e20323633333230.roa
File: 323830343a313433633a666634303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier: ykmYRO9Pp2l7ZmoQvZI72p8VkHqYqoNyFEgUPN7aNzg=
Subject key identifier: 09:32:58:28:6E:06:F5:80:27:98:E9:F3:E6:46:77:8D:CF:73:FD:F8
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 5EC2EDDB50F6557F5EB84A5776107ADBBADD9C06
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666634303a3a2f34342d3434203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:44:01 +0000
ROA not before: Mon 06 Jan 2025 18:39:01 +0000
ROA not after: Mon 05 Jan 2026 18:44:01 +0000
asID: 263320
IP address blocks: 2804:143c:ff40::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:c2:ed:db:50:f6:55:7f:5e:b8:4a:57:76:10:7a:db:ba:dd:9c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:39:01 2025 GMT
Not After : Jan 5 18:44:01 2026 GMT
Subject: CN=093258286E06F5802798E9F3E646778DCF73FDF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8f:bb:48:d8:ab:c4:b7:b2:3d:43:4c:5b:61:
b5:fa:27:f9:22:2f:61:cb:3e:9e:78:ff:31:7d:c6:
ab:b0:10:2c:ca:e3:4b:ac:82:ef:2b:60:37:c6:9f:
a1:51:37:c2:a7:49:25:7e:66:06:87:a3:8f:f6:cb:
f0:4c:5f:a3:9c:30:fd:c5:a1:d2:ea:f8:f9:35:4f:
c4:d7:ee:83:48:a0:28:35:11:79:6b:85:be:32:41:
fe:8c:46:6a:5b:a3:b0:19:c9:3f:05:05:3b:5f:98:
02:1f:07:65:07:a2:5b:2b:77:35:8e:2c:db:5e:b7:
25:e8:da:f8:ff:9f:30:97:e5:51:35:f0:06:66:82:
6d:ff:54:52:43:20:df:c6:08:9f:1b:7d:00:eb:93:
39:e9:1d:e6:3e:7e:02:cc:a0:e6:be:cf:e1:55:0c:
62:3a:86:3e:32:b6:4c:5f:03:8a:20:4a:cb:97:0d:
0e:5f:89:ca:2b:57:c5:59:6e:37:05:7b:e9:bd:38:
42:78:4e:50:63:e8:9c:63:34:25:40:1f:bf:01:74:
36:90:27:bd:20:e6:42:1b:33:e4:d8:1f:be:3b:98:
73:c3:44:cf:d8:d1:e1:fc:26:ac:96:1c:40:64:97:
4d:a2:35:13:7a:3e:4d:5b:8c:3b:33:2d:38:d9:ea:
fa:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:32:58:28:6E:06:F5:80:27:98:E9:F3:E6:46:77:8D:CF:73:FD:F8
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666634303a3a2f34342d3434203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ff40::/44
Signature Algorithm: sha256WithRSAEncryption
db:b3:f4:94:e6:e9:d5:78:14:1d:45:ae:f5:bf:be:d2:ea:ea:
e6:09:09:e1:d8:5a:8f:c7:f8:51:97:8a:a3:19:c4:9e:69:ca:
8e:a6:50:da:a6:c7:b9:ab:da:9c:1c:63:77:97:a9:d4:37:1b:
b1:18:c7:e6:fd:97:51:0c:91:88:f9:d4:ec:c8:29:9d:f2:32:
fe:d9:34:cc:33:f1:2a:4f:17:ad:21:25:93:d3:ca:a5:a5:53:
30:c0:cc:aa:09:f7:06:8c:53:e7:92:92:d2:d5:b9:94:ea:c3:
91:a8:2d:30:06:88:30:33:54:3a:00:76:07:80:0c:e6:3f:6b:
06:63:a1:1f:56:88:26:c7:72:23:0a:d2:39:7b:56:5e:09:e3:
aa:a9:24:68:94:ac:60:4c:c1:7b:e6:6b:b6:7d:00:78:f5:89:
d3:af:cd:fb:70:c2:81:d8:b1:85:de:c4:56:80:af:8b:a0:41:
6c:79:15:1f:1d:12:85:3d:a0:88:ee:14:85:ed:63:4b:f4:37:
f4:28:a3:c0:2f:c2:75:a4:7b:1f:6d:8e:97:5b:68:ee:2e:fe:
f6:2a:5e:e1:71:63:82:8d:f9:32:ae:0b:5c:40:63:4d:30:f3:
9a:ff:52:36:ff:47:76:58:e9:c5:5c:b2:b8:92:91:27:c4:57:
ec:2d:e8:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:50:00 2025 by rpki-client