Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d3336203d3e20323636343636.roa
File: 323830343a333834343a643030303a3a2f33362d3336203d3e20323636343636.roa (raw, json)
Hash identifier: EzMQ5o81ok23v0BMBHuKAYIBt+rvaMaVWtIgEpDT+6Y=
Subject key identifier: EB:C3:5C:4A:7E:5D:72:07:88:D4:C8:C6:29:8D:DB:6D:F2:0A:3D:F4
Certificate issuer: /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial: 6C307313ECA77D7728A77B3BEF85F97EA3290922
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d3336203d3e20323636343636.roa
Signing time: Fri 17 Jan 2025 11:45:03 +0000
ROA not before: Fri 17 Jan 2025 11:40:03 +0000
ROA not after: Fri 16 Jan 2026 11:45:03 +0000
asID: 266466
IP address blocks: 2804:3844:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:30:73:13:ec:a7:7d:77:28:a7:7b:3b:ef:85:f9:7e:a3:29:09:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Validity
Not Before: Jan 17 11:40:03 2025 GMT
Not After : Jan 16 11:45:03 2026 GMT
Subject: CN=EBC35C4A7E5D720788D4C8C6298DDB6DF20A3DF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:c7:cc:53:91:df:00:86:0f:74:31:60:d9:
b2:94:f3:3e:71:7f:b2:6b:2f:38:ca:e1:7c:92:a5:
5b:bb:5e:eb:e7:6b:32:c7:f3:cd:98:d8:a0:62:df:
83:94:e9:50:60:11:6c:43:a3:89:5a:96:2d:96:1c:
92:80:79:a4:7f:41:48:ab:89:92:7c:ac:9f:cf:1f:
58:ba:8f:6b:ff:61:cf:a8:5f:6e:ee:f7:94:94:49:
96:33:42:c3:98:d0:bc:db:72:de:b1:34:d4:97:bd:
62:40:69:fd:ac:b5:d9:75:c0:b4:99:23:06:e0:00:
36:79:87:d0:cd:59:d1:ed:72:87:db:43:3e:98:87:
93:9a:a4:1a:c8:9e:45:3b:d5:0a:92:a4:19:b8:ff:
61:37:ab:03:ec:c3:ce:4c:3b:2d:8a:ad:7b:3a:82:
73:12:4e:d0:bb:62:e5:96:13:89:4a:f2:4c:7b:9f:
9c:13:f0:ba:61:00:96:00:8e:4b:7c:35:e5:6c:03:
cb:cc:fa:3f:76:c5:52:20:ab:ad:fe:dc:ca:a6:59:
69:0e:28:08:6b:44:3b:47:2e:b2:e8:d2:89:76:f2:
24:92:b6:a3:b0:58:be:1e:a0:f9:57:db:b3:12:07:
05:67:3b:6a:87:30:38:c9:23:01:b0:5d:ef:8e:7a:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C3:5C:4A:7E:5D:72:07:88:D4:C8:C6:29:8D:DB:6D:F2:0A:3D:F4
X509v3 Authority Key Identifier:
keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d3336203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3844:d000::/36
Signature Algorithm: sha256WithRSAEncryption
34:bd:64:54:cc:c3:3b:cb:77:4e:12:50:f2:6d:ea:05:71:2f:
f6:ed:3f:12:75:8b:b7:51:e7:39:77:0f:dc:a4:13:7c:11:77:
25:3a:04:25:cc:a9:5b:45:8e:7c:aa:f2:a7:b9:be:07:3f:3b:
01:6e:1e:29:cc:80:9b:34:7d:06:06:ee:f0:3c:93:70:c5:4f:
f7:1a:6b:54:3a:5e:11:21:67:7a:1e:71:af:4c:66:bd:f5:4d:
93:4e:d9:59:67:52:95:bd:35:f5:5d:e1:94:44:f3:e0:95:b2:
8e:be:6b:d7:53:b8:ae:aa:5c:a4:89:82:57:ff:0d:db:86:19:
a7:17:08:6f:2a:b4:27:6f:56:50:5c:a5:ab:f1:2a:63:9d:96:
75:44:3f:bf:08:f6:e3:ac:6d:14:cd:90:6f:fe:f5:b9:e5:2c:
4e:cc:fc:5f:12:44:e7:56:47:f1:80:33:cb:e8:4e:ab:13:1d:
41:0a:be:cc:51:f4:ba:06:e2:ad:37:d7:f9:5b:cf:1e:76:cc:
d6:19:d8:4d:ef:88:3b:7c:50:1d:ec:48:ad:c4:c0:2a:a8:bb:
72:dd:ca:63:3f:7a:46:4b:60:b5:2b:52:7e:6a:6f:f7:b3:b4:
36:01:d8:04:1d:f5:da:8f:8c:2e:1f:15:31:07:de:71:6f:be:
ee:d6:cb:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:07:44 2025 by rpki-client