Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a633030303a3a2f33342d3334203d3e20323732353733.roa
File: 323830343a383535383a633030303a3a2f33342d3334203d3e20323732353733.roa (raw, json)
Hash identifier: fqmIEYsTFj+zhcoLd8iDbvyqthk1kITdTuTATccADxg=
Subject key identifier: 3F:1E:3E:67:CC:C8:EA:0B:29:B4:79:E7:3F:39:A1:A0:C0:57:FF:B2
Certificate issuer: /CN=609592934A0E33AC57311C220A76D5408AC0153F
Certificate serial: 102D0F6AA91705A69D83A543079374DCAD11AF6C
Authority key identifier: 60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a633030303a3a2f33342d3334203d3e20323732353733.roa
Signing time: Thu 09 Jan 2025 19:09:53 +0000
ROA not before: Thu 09 Jan 2025 19:04:53 +0000
ROA not after: Thu 08 Jan 2026 19:09:53 +0000
asID: 272573
IP address blocks: 2804:8558:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:2d:0f:6a:a9:17:05:a6:9d:83:a5:43:07:93:74:dc:ad:11:af:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609592934A0E33AC57311C220A76D5408AC0153F
Validity
Not Before: Jan 9 19:04:53 2025 GMT
Not After : Jan 8 19:09:53 2026 GMT
Subject: CN=3F1E3E67CCC8EA0B29B479E73F39A1A0C057FFB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:00:f2:29:23:9d:ed:b8:2d:ed:3e:15:64:74:
0d:84:21:a3:51:a0:35:93:e2:f7:f1:f7:70:e9:bf:
e8:74:91:ae:fc:99:7b:21:e5:2a:cc:62:5d:cc:94:
8c:c5:78:d7:87:5c:94:72:e2:a8:ac:cb:82:a5:73:
1f:f4:b7:00:b8:93:ff:85:63:c1:b6:5b:76:b9:71:
d7:85:0a:a9:65:df:fe:ae:b4:9e:f9:5f:37:61:b9:
3b:a8:74:dc:70:c7:34:e7:17:cc:f2:c2:d1:e1:7b:
48:3d:e1:41:ef:86:a1:a4:b3:46:0c:fd:d5:ba:bf:
bf:bf:67:99:14:98:9f:84:fe:f1:3e:e5:e2:ab:88:
7b:33:64:84:4b:2c:66:77:67:7d:7b:68:9a:29:44:
32:23:1e:43:a1:c5:77:ed:a0:b8:0a:c1:58:f1:a5:
93:75:19:e8:0f:cd:d3:30:35:02:26:e5:ab:85:bf:
30:19:52:c0:92:62:69:0f:00:3c:ce:97:16:f1:d0:
75:54:d5:e4:60:e6:12:23:f4:a4:cf:ff:b8:f9:20:
64:5f:aa:00:12:e6:78:e9:39:67:89:f7:37:a9:ec:
24:03:9e:05:7f:8f:56:f5:db:39:5a:ab:7c:fe:ca:
66:f6:43:b4:b0:d9:58:1f:10:28:81:1b:ed:0b:be:
ba:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1E:3E:67:CC:C8:EA:0B:29:B4:79:E7:3F:39:A1:A0:C0:57:FF:B2
X509v3 Authority Key Identifier:
keyid:60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a633030303a3a2f33342d3334203d3e20323732353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8558:c000::/34
Signature Algorithm: sha256WithRSAEncryption
10:a6:43:5e:c6:2b:17:ad:ac:6a:05:06:fd:4c:d1:ea:72:37:
a3:fa:59:a7:38:bd:ba:39:62:17:de:53:84:a4:6d:56:cb:2c:
5c:b1:2f:0f:4f:a9:90:65:5a:9e:20:e3:84:b2:e1:2a:06:53:
f4:b3:14:ed:b7:dd:73:c7:4f:fe:dd:02:78:d0:6a:6f:3a:80:
97:52:1f:4d:34:c1:e7:22:6a:6d:ef:70:65:db:6e:8c:2d:30:
4f:f2:db:ec:86:17:8e:e7:2a:21:51:d1:bf:f5:b5:c5:6c:e4:
db:42:ed:2d:0e:0b:d0:22:86:ed:86:30:9a:c5:48:2c:2f:8b:
87:c0:09:a0:f5:3b:5c:d1:e0:49:d9:f5:11:eb:ef:5c:3f:06:
52:5d:7f:03:8f:e4:70:ef:af:ff:40:05:fd:54:88:4a:9a:ea:
a5:9c:7e:0e:ac:37:e8:15:e6:3a:c9:7f:5a:21:7c:9e:7e:95:
45:3f:ff:8a:b2:f4:6b:97:cf:15:90:06:60:9b:f8:41:00:8b:
b1:96:70:01:8d:b6:2b:03:fb:f7:1f:9f:66:62:41:7a:38:e7:
73:74:ee:59:19:0e:f8:3d:6c:21:f8:84:d5:0d:42:68:d4:5b:
dd:e1:b8:d6:38:b7:1c:8b:cd:17:45:bf:35:a3:4f:e9:cf:88:
4b:69:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 12:49:00 2025 by rpki-client