Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a343030303a3a2f33342d3334203d3e20323732353733.roa
File: 323830343a383535383a343030303a3a2f33342d3334203d3e20323732353733.roa (raw, json)
Hash identifier: StnzfBDuKmRiQVG/MWUJVpI7e/2BgTmRLbZqZko42Go=
Subject key identifier: 0A:97:01:BB:84:C5:90:A2:5C:94:14:68:3A:C9:80:05:21:73:7C:AB
Certificate issuer: /CN=609592934A0E33AC57311C220A76D5408AC0153F
Certificate serial: 16392B47AA15A1D45DE4B393386BC3A5089B78C6
Authority key identifier: 60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a343030303a3a2f33342d3334203d3e20323732353733.roa
Signing time: Thu 09 Jan 2025 19:09:53 +0000
ROA not before: Thu 09 Jan 2025 19:04:53 +0000
ROA not after: Thu 08 Jan 2026 19:09:53 +0000
asID: 272573
IP address blocks: 2804:8558:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:39:2b:47:aa:15:a1:d4:5d:e4:b3:93:38:6b:c3:a5:08:9b:78:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609592934A0E33AC57311C220A76D5408AC0153F
Validity
Not Before: Jan 9 19:04:53 2025 GMT
Not After : Jan 8 19:09:53 2026 GMT
Subject: CN=0A9701BB84C590A25C9414683AC9800521737CAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ca:6a:c8:39:a9:12:2b:f9:11:6d:f2:98:9d:
06:ea:2b:49:14:ac:9b:32:cf:48:84:c9:ea:1e:98:
2c:35:f1:86:11:f2:39:a4:3d:0d:18:fe:a4:6b:fc:
06:5b:93:da:13:ee:e6:c6:e2:5b:24:1e:02:4f:4a:
7e:97:ce:39:f0:23:4c:d5:42:15:f7:2e:83:23:28:
31:0b:07:05:6f:d8:5c:0f:1e:89:5e:72:1b:31:5a:
be:49:94:24:35:71:91:10:5b:f5:35:99:81:d6:96:
b6:24:4a:e2:70:4c:a2:c8:3f:74:47:c3:55:94:72:
f8:75:51:82:d3:01:37:c0:bf:b3:b0:e7:55:d4:ca:
bb:78:73:4b:3e:02:06:cc:61:88:ac:51:23:37:be:
11:92:3d:0a:5b:52:2b:ab:29:f9:62:f0:c0:f4:72:
8c:39:bd:2b:76:4b:bd:3e:cd:14:5f:0d:51:55:2e:
1c:a1:a8:ab:c9:af:b5:f0:a0:0e:5c:e0:8a:80:8b:
9b:5e:73:46:de:21:4d:9a:52:83:1d:57:3f:41:90:
33:20:93:41:49:28:f8:90:bf:7f:f5:c2:a5:cb:b9:
54:01:73:e4:4f:7e:4e:fd:c6:a9:93:a7:5f:ee:8b:
be:fb:3d:c1:4b:c3:3a:79:0a:1c:13:9a:bf:56:8b:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:97:01:BB:84:C5:90:A2:5C:94:14:68:3A:C9:80:05:21:73:7C:AB
X509v3 Authority Key Identifier:
keyid:60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a343030303a3a2f33342d3334203d3e20323732353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8558:4000::/34
Signature Algorithm: sha256WithRSAEncryption
0b:32:50:22:44:fb:fb:4e:77:0c:d1:24:83:65:7b:19:df:cb:
c7:15:56:58:8a:c5:fc:d2:76:9c:ff:ab:f1:0a:15:ef:5b:7f:
85:21:8f:84:d4:52:b5:d6:27:59:83:9d:c9:50:05:3f:ec:80:
49:c0:cf:86:fd:f9:f9:5d:44:66:b9:fc:d0:c4:cf:73:59:8d:
95:d2:11:e4:9e:04:ea:9b:01:1c:d3:5b:0a:3c:de:ac:6f:d5:
51:85:ed:29:9a:dd:f3:aa:0f:50:43:ee:cc:d3:c9:91:d0:6c:
89:fd:9e:0a:dd:52:12:1f:cf:9a:34:39:7c:34:bc:36:76:fd:
c3:4b:bc:fa:ea:f0:6b:49:82:47:df:5b:67:b4:a8:40:a5:b8:
64:e1:27:dc:7d:2a:f1:10:96:df:ce:db:fb:3b:2d:f1:a8:e1:
27:ce:d2:13:ed:41:e3:a9:a3:59:fe:51:db:e8:1b:eb:4c:5a:
0b:d2:a2:38:4a:65:78:2f:24:d4:b7:07:06:57:94:28:85:5f:
71:2e:ff:a9:bd:fd:70:a5:6b:96:fd:c8:43:77:77:53:e5:0f:
89:a9:77:86:cb:b4:62:c9:94:04:9f:6d:81:5b:54:6e:d5:47:
e2:21:e7:0e:2b:b6:20:81:d5:80:96:6d:24:e0:b7:3c:ea:17:
7a:c5:d1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:48:03 2025 by rpki-client