Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635343a3a2f34362d3436203d3e20323633333230.roa
File: 323830343a313433633a666635343a3a2f34362d3436203d3e20323633333230.roa (raw, json)
Hash identifier: +4nOPPZNjpupXErf5gTcTpjuBiQWkyG1wGGgIedzohw=
Subject key identifier: DC:A5:31:7D:33:B0:0E:53:EE:FC:72:2D:32:83:12:A1:E6:92:21:2F
Certificate issuer: /CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Certificate serial: 163A40EA4B4CF9CA57E0959C2E54A412C1A84904
Authority key identifier: 40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635343a3a2f34362d3436203d3e20323633333230.roa
Signing time: Mon 06 Jan 2025 18:44:00 +0000
ROA not before: Mon 06 Jan 2025 18:39:00 +0000
ROA not after: Mon 05 Jan 2026 18:44:00 +0000
asID: 263320
IP address blocks: 2804:143c:ff54::/46 maxlen: 46
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:3a:40:ea:4b:4c:f9:ca:57:e0:95:9c:2e:54:a4:12:c1:a8:49:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=403D1CC0FEEE423B90F653F1A6A71D104DE1AA56
Validity
Not Before: Jan 6 18:39:00 2025 GMT
Not After : Jan 5 18:44:00 2026 GMT
Subject: CN=DCA5317D33B00E53EEFC722D328312A1E692212F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2b:1e:fe:c1:54:25:ee:f3:40:05:80:d4:4b:
b9:bb:65:38:7b:80:41:8e:c6:05:30:36:85:cc:1b:
81:79:09:a1:dc:57:fd:a5:8e:04:7e:31:73:60:8c:
6b:a4:f1:4d:73:98:3c:65:60:5d:fb:98:2b:c1:2d:
7f:7e:b8:6b:9f:c0:cd:81:ae:63:b3:78:7a:5f:7c:
cb:84:37:0a:14:15:e6:8d:8b:fa:ee:a5:00:84:5e:
e8:82:e2:38:9f:be:3d:04:e5:81:14:70:e5:a7:9d:
6c:8b:18:bc:df:91:db:64:d5:66:b0:ae:d5:d1:b0:
1e:20:89:47:9d:99:e7:72:75:4a:bb:94:42:4b:56:
6d:dc:f5:db:d7:1a:57:7b:7d:83:d3:be:6c:3a:8b:
50:da:12:a3:58:f3:ab:2c:00:d7:81:fd:b2:fd:12:
a1:08:8a:63:2b:0d:df:03:f3:0d:e3:95:6a:12:e3:
e4:9f:e8:50:d7:78:6e:f7:0a:3d:de:97:6c:34:89:
e8:a1:95:d2:02:51:5a:3b:9b:f6:1c:3d:60:59:3f:
f6:9e:6f:a9:ba:a9:cc:9b:f3:9b:09:cb:ea:8f:b9:
03:93:f7:e1:83:d7:6e:73:db:b7:3e:ef:4b:79:5b:
2f:0b:97:fd:83:b8:72:00:99:69:5f:dc:bb:9e:c7:
29:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A5:31:7D:33:B0:0E:53:EE:FC:72:2D:32:83:12:A1:E6:92:21:2F
X509v3 Authority Key Identifier:
keyid:40:3D:1C:C0:FE:EE:42:3B:90:F6:53:F1:A6:A7:1D:10:4D:E1:AA:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/403D1CC0FEEE423B90F653F1A6A71D104DE1AA56.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7B2JLdDEsCMiaw3zkVkYANXL7CDxbaNzjWGnb62j8Kk7/0/323830343a313433633a666635343a3a2f34362d3436203d3e20323633333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:143c:ff54::/46
Signature Algorithm: sha256WithRSAEncryption
bd:f7:13:4e:e2:92:6e:7f:7c:87:3a:42:c0:9a:bf:f3:79:6b:
56:19:1c:b6:3e:4a:6f:de:e3:fe:28:23:e5:66:80:f2:b5:3f:
9f:fc:82:29:50:86:46:20:b5:51:3f:2c:28:80:cd:15:ac:d6:
c6:be:5d:3e:98:73:58:89:d4:3d:a5:53:99:bb:37:d9:c1:2c:
2b:a0:15:d1:41:40:5f:9c:87:9d:06:b8:c6:1a:71:d0:ee:d1:
f8:73:dd:e3:2f:34:63:2f:b7:09:c9:7c:1f:81:97:f8:a7:ac:
b9:eb:33:d8:a1:93:88:10:0f:9b:fc:99:35:30:d7:9e:87:ef:
31:2a:e5:a2:3c:8d:d4:c8:7a:a8:c3:19:51:c6:aa:33:da:0d:
e0:f1:60:5e:80:e4:45:6d:1b:b7:65:32:78:c5:9a:9e:4d:67:
87:bd:b0:14:c0:5c:ec:93:f9:4d:a4:ae:8e:55:c0:fa:af:4a:
ba:cc:d2:5c:06:e7:b7:fc:6b:ab:5a:69:c8:b8:47:c7:3a:b3:
28:38:a8:7a:b0:a7:97:62:83:4d:13:ea:43:55:07:cd:9b:2f:
1f:a5:60:77:82:81:5c:80:fa:30:52:b4:fa:a1:0d:4a:68:b1:
4e:49:61:66:dc:87:64:c5:d9:08:c3:ac:4b:08:86:3f:8a:48:
8b:61:fe:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:50:58 2025 by rpki-client