Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33322d3332203d3e20323730333036.roa
File: 323830343a366130343a3a2f33322d3332203d3e20323730333036.roa (raw, json)
Hash identifier: CBUbaoyB6Du187qu+Ok9aE3gVND7/EMti/X5ZNkmxvk=
Subject key identifier: 44:C9:B0:A6:74:6D:46:AD:07:97:B4:FB:9A:AE:85:1D:1A:EE:60:FA
Certificate issuer: /CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28
Certificate serial: 7BAB90B22465684544BF0B7A2E9754B59DD86B5F
Authority key identifier: FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33322d3332203d3e20323730333036.roa
Signing time: Thu 23 Jan 2025 13:56:58 +0000
ROA not before: Thu 23 Jan 2025 13:51:58 +0000
ROA not after: Thu 22 Jan 2026 13:56:58 +0000
asID: 270306
IP address blocks: 2804:6a04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:ab:90:b2:24:65:68:45:44:bf:0b:7a:2e:97:54:b5:9d:d8:6b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28
Validity
Not Before: Jan 23 13:51:58 2025 GMT
Not After : Jan 22 13:56:58 2026 GMT
Subject: CN=44C9B0A6746D46AD0797B4FB9AAE851D1AEE60FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ac:7e:1f:c3:ac:4e:ac:c5:04:f5:95:0c:20:
23:7c:b9:bc:77:d4:23:53:1d:50:44:20:c4:60:9c:
c6:0c:16:e8:95:28:80:b1:81:d5:b2:a4:10:e9:e7:
0c:19:c8:99:91:6c:20:c1:3a:9e:c3:36:03:af:d5:
ee:5b:23:77:fe:8d:ec:5a:5d:6f:fc:d7:34:71:59:
65:2b:82:af:42:a5:f9:19:95:26:e8:3a:74:ac:98:
82:81:9c:a1:34:89:83:9b:a0:10:bc:ae:25:1a:39:
47:46:f0:ec:c0:aa:e0:a9:88:c7:00:9f:06:60:df:
58:8b:61:10:60:ec:ff:39:26:05:44:aa:51:c7:21:
32:00:91:b6:fc:6c:48:0b:b1:3d:f0:1b:aa:d0:78:
4c:1d:75:1b:f1:d8:ea:7a:e3:46:53:d3:82:8a:c4:
c2:53:0a:b4:71:de:d3:a5:67:cc:cc:47:b1:d0:15:
8f:0f:02:23:dd:4e:a4:0a:7e:90:ac:ac:e5:5e:fd:
a6:65:64:05:30:d4:a6:fd:d6:d0:36:02:20:dd:dc:
de:b7:65:af:06:b6:90:48:73:80:61:c8:2f:28:40:
4b:75:f0:95:fe:43:4a:53:3b:b5:8d:75:72:1c:3b:
a0:f6:17:54:b3:12:aa:52:98:e0:af:b4:d1:b8:b4:
94:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C9:B0:A6:74:6D:46:AD:07:97:B4:FB:9A:AE:85:1D:1A:EE:60:FA
X509v3 Authority Key Identifier:
keyid:FD:F4:72:92:5F:FF:60:FC:8F:7D:3F:64:15:7C:DC:51:AC:3D:EF:28
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FDF472925FFF60FC8F7D3F64157CDC51AC3DEF28.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EJTSaEBKbeJZZSx1Mq7XSCJK15LrYdgYMAFPMgnLBG9/0/323830343a366130343a3a2f33322d3332203d3e20323730333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a04::/32
Signature Algorithm: sha256WithRSAEncryption
87:df:3f:72:6f:95:77:88:49:57:d1:bf:92:fb:34:68:61:9c:
0a:92:3a:d0:b9:42:bb:23:b3:88:a1:dc:65:00:f1:da:17:12:
9c:e6:42:5e:1f:2b:11:05:0c:08:bb:eb:0d:70:17:02:2e:b0:
23:5d:21:43:7b:a3:41:2c:af:76:dc:4e:5c:60:72:5b:88:30:
32:14:1c:be:86:bc:3d:74:d2:a6:c4:c3:9b:27:3c:1d:1a:98:
e2:13:7b:30:f9:e9:ee:37:57:b9:85:4d:5d:58:3f:40:7f:cd:
e7:bd:83:71:10:c7:e2:14:61:dd:aa:b1:94:fc:af:ae:b6:64:
b6:f0:91:5b:ab:6b:88:f4:24:62:3f:43:3b:33:eb:27:52:0d:
0f:fc:f0:86:92:0f:04:0a:96:4d:36:13:3e:73:43:b2:7b:c9:
94:6e:eb:d8:ef:d7:90:4f:cf:15:02:7a:b6:34:3b:f6:69:cc:
54:13:2e:a3:c7:bc:d4:48:38:b5:2e:df:cf:9f:91:25:ba:a0:
53:f6:fc:23:b8:9a:99:be:ee:d0:12:c9:0b:f4:4e:bd:cf:c9:
b6:a6:32:b8:8d:bf:29:9b:66:88:3a:51:f0:a5:01:81:6c:52:
47:51:ef:49:35:4c:76:c6:df:60:3f:c0:43:17:66:7f:3d:ae:
10:43:7e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:33:09 2025 by rpki-client