Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e2033333536.roa
File: 323830343a6439303a3a2f33322d3334203d3e2033333536.roa (raw, json)
Hash identifier: fbkRlByH/fS2y/BBPNGgF3Qqwka9KPK8ruI/+ljN45M=
Subject key identifier: 9D:FB:E1:E1:8A:15:30:92:94:A4:9F:35:12:B8:88:F0:7D:35:CE:B9
Certificate issuer: /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial: 3851D4247C7C64B9B24077BEC831E3891EBBFBC1
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e2033333536.roa
Signing time: Mon 19 Dec 2022 18:54:59 +0000
ROA not before: Mon 19 Dec 2022 18:49:59 +0000
ROA not after: Mon 18 Dec 2023 18:54:59 +0000
asID: 3356
IP address blocks: 2804:d90::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:51:d4:24:7c:7c:64:b9:b2:40:77:be:c8:31:e3:89:1e:bb:fb:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Validity
Not Before: Dec 19 18:49:59 2022 GMT
Not After : Dec 18 18:54:59 2023 GMT
Subject: CN=9DFBE1E18A15309294A49F3512B888F07D35CEB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d7:7f:4f:68:b3:bf:1c:3e:45:e9:80:a2:51:
1a:f4:2b:ef:09:d2:43:9b:72:e5:a0:07:13:c8:a3:
b3:15:87:a1:09:e9:fe:ee:bc:0f:23:2a:ff:02:92:
08:6b:43:f1:e5:09:bd:3f:de:0c:6c:ae:7a:cc:6a:
f0:d1:dc:69:53:b1:6d:f9:df:f9:a2:d0:7d:9c:f7:
eb:e4:5e:4d:58:a2:11:48:97:8a:79:9c:a8:9f:fa:
2d:e1:3f:0f:de:c6:cf:eb:9c:42:fd:b4:83:94:38:
8e:7b:75:00:04:4a:78:bf:cf:94:4d:93:f9:07:8c:
a1:13:be:dc:b6:2a:6f:d9:1d:29:77:c9:9b:56:95:
f1:43:4f:e2:e2:e4:90:b3:8a:76:de:03:fa:8e:50:
22:aa:e1:92:f8:6c:7a:65:7b:ad:bc:3f:34:55:03:
9f:57:42:d9:24:54:ca:55:0c:81:3d:be:fa:75:c3:
79:17:06:52:a7:b5:9b:97:00:4f:ea:a8:1e:b8:df:
d2:f1:54:ae:12:02:51:f1:38:d1:b1:d4:18:6d:88:
d3:e5:ce:ff:f9:54:9d:da:30:39:44:2a:28:d9:25:
41:72:be:b5:54:36:f0:8c:39:ef:1c:64:d0:24:96:
f3:c4:f5:53:dd:1b:3c:c2:36:eb:2e:69:bc:2d:72:
c0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:FB:E1:E1:8A:15:30:92:94:A4:9F:35:12:B8:88:F0:7D:35:CE:B9
X509v3 Authority Key Identifier:
keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3334203d3e2033333536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d90::/32
Signature Algorithm: sha256WithRSAEncryption
4f:5e:38:95:81:5c:60:80:db:40:ae:2b:c8:33:8a:62:23:53:
cc:bc:24:b7:88:e4:29:6a:4f:bf:44:0f:b2:36:aa:41:1c:b1:
11:25:8c:bf:29:09:6f:61:77:1b:d8:3f:a5:7f:98:55:ef:d9:
03:6d:01:bb:54:33:6c:43:1b:c6:02:6b:e1:52:2c:17:57:98:
bf:b2:86:04:af:cd:88:75:a2:11:ef:3e:a1:e1:80:1b:d9:0a:
42:10:58:ce:a3:00:c9:90:e6:ae:6b:e4:b9:17:0d:34:23:c6:
04:ab:a8:a5:c4:e4:53:81:93:c8:2e:0e:5a:e6:1a:1b:51:00:
78:63:b9:51:5c:99:bb:3e:2c:fc:b8:4b:d1:67:04:30:d5:33:
ff:50:25:54:0d:b2:5b:ad:c7:74:f2:0a:33:21:1f:68:52:e2:
55:bd:f5:d0:8c:95:b1:ec:3d:91:f5:6b:39:77:c4:be:ab:17:
1c:b0:20:03:92:7d:1d:6c:1f:a2:d7:7b:2c:f1:fb:e2:10:9b:
67:c5:21:d0:97:a3:1a:29:b1:c9:f0:2e:b7:9c:54:f5:ad:cb:
fc:ba:c3:c5:00:e0:24:af:e0:75:84:2a:e3:87:33:d1:e9:16:
bc:1d:10:b7:b9:e6:ca:1f:3b:ba:e2:0e:25:a8:0a:12:a4:88:
84:da:fe:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:48 2025 by rpki-client