Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34342d3434203d3e20323633333230.roa
File: 323830343a313433633a666635303a3a2f34342d3434203d3e20323633333230.roa (raw, json)
Hash identifier: bpLqmWXcLJWnTTGl0EF9az5QJdAkUJg+ym+GdIywShU=
Subject key identifier: 80:FA:BB:0A:C7:A4:B1:5B:3E:73:CE:C6:9A:E1:0C:FB:B9:E7:06:1F
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 5FEA11A4741A899706A2E91A7C5F763F7A91C8E2
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34342d3434203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:43:59 +0000
ROA not before: Mon 06 Jan 2025 18:38:59 +0000
ROA not after: Mon 05 Jan 2026 18:43:59 +0000
asID: 263320
IP address blocks: 2804:143c:ff50::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:ea:11:a4:74:1a:89:97:06:a2:e9:1a:7c:5f:76:3f:7a:91:c8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:38:59 2025 GMT
Not After : Jan 5 18:43:59 2026 GMT
Subject: CN=80FABB0AC7A4B15B3E73CEC69AE10CFBB9E7061F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:d7:b8:fd:a3:96:d7:13:bc:42:d3:27:9f:
b8:d5:fc:14:7b:7c:71:10:52:48:41:a0:14:5e:9e:
47:95:52:b6:4b:1f:f6:de:fd:4a:ee:fd:75:34:dd:
50:1b:cf:93:9a:7d:27:5c:ca:4c:b4:b9:56:d1:6d:
da:4a:11:ee:a4:bd:44:3c:16:3f:56:24:94:84:f5:
e2:f5:dd:7a:3b:fa:82:41:7e:ed:41:9e:94:34:c7:
7d:ba:57:b8:83:1e:5c:4b:b8:f8:43:d3:c5:58:0c:
56:e8:d7:2b:4a:a0:da:ba:1e:ca:29:da:c8:ac:f3:
01:9b:d9:d1:21:ef:d8:69:d7:85:b4:b0:97:88:49:
fb:04:5e:8b:0b:3d:d3:61:16:84:52:6b:c8:c3:1c:
ff:30:8e:ba:da:97:1b:ff:4f:3a:69:9a:55:49:8b:
a3:65:14:17:34:4a:f6:86:f1:65:a8:f3:e3:6c:e4:
6a:4a:83:7f:d1:e4:5e:02:b0:ac:2c:69:9b:27:8c:
4d:3c:1d:1a:01:6c:ee:df:98:08:d1:ee:bf:97:85:
36:c0:98:10:a7:b1:5a:09:17:51:13:a8:f4:d4:90:
84:83:11:e5:17:ce:23:33:a5:bb:1f:5b:29:98:a4:
1e:b3:dc:70:1f:d5:65:c8:d1:49:71:f3:0d:78:2d:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:FA:BB:0A:C7:A4:B1:5B:3E:73:CE:C6:9A:E1:0C:FB:B9:E7:06:1F
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635303a3a2f34342d3434203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ff50::/44
Signature Algorithm: sha256WithRSAEncryption
6e:af:7a:26:b3:b0:c2:f6:3a:6c:ca:97:bb:72:fe:07:df:0e:
44:0c:de:55:83:23:b6:41:91:ce:e2:fe:99:35:70:10:c6:82:
b4:80:a1:b5:4b:38:0e:e0:d6:b0:34:6f:38:c4:02:30:31:1d:
bc:b5:a4:35:57:10:96:65:5b:d8:c7:6c:fc:d3:f3:36:77:6e:
c6:f5:a5:8d:90:90:fb:2b:5c:97:ac:f1:1c:ca:b0:56:08:91:
47:b8:4d:d3:8a:85:4b:c2:40:c7:22:c9:36:b3:9d:cc:87:7b:
29:5c:a5:39:0e:24:a7:a4:f0:36:85:de:1b:e3:2a:73:c8:ba:
2b:f4:b1:5c:be:a0:70:db:81:69:6b:fe:b2:c9:92:28:a6:ab:
81:31:25:ac:47:d3:d9:57:2e:ba:38:01:c0:11:0f:32:96:6c:
04:ad:e0:2e:dc:63:b6:37:c6:1b:68:1c:c0:8f:fe:86:4d:89:
0b:60:4f:71:f6:1a:dc:5f:57:85:9b:4e:c0:39:84:df:88:de:
88:6f:d2:f4:40:dc:84:46:51:ca:54:c5:3b:2e:5e:bc:2a:fb:
e6:24:e2:fa:57:04:ab:a2:44:94:e3:c8:97:62:4e:c8:e8:a0:
c7:d9:5a:50:e5:b5:91:4a:70:33:20:0b:ac:7b:28:3a:73:e0:
73:58:be:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:51:12 2025 by rpki-client