Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33332d3333203d3e20323638363932.roa
File: 323830343a353532343a383030303a3a2f33332d3333203d3e20323638363932.roa (raw, json)
Hash identifier: 7zFp2n88oeZW0noDOk+H3VOod94RWWSp3MScNUeCX/E=
Subject key identifier: 84:7B:A2:33:37:74:EB:FE:20:A9:3A:D5:DF:F9:7D:60:FB:1C:21:85
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 7F8A0FF0A09040FE81CDC55A6460D563A2E5561D
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33332d3333203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 2804:5524:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:8a:0f:f0:a0:90:40:fe:81:cd:c5:5a:64:60:d5:63:a2:e5:56:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=847BA2333774EBFE20A93AD5DFF97D60FB1C2185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3f:91:26:ef:80:5e:71:02:a1:9a:82:55:63:
11:99:b1:0d:ce:02:c3:43:a1:bc:db:ad:e1:7e:a0:
cb:95:97:7b:f6:b6:ee:62:09:9a:fe:07:ab:63:c8:
55:e6:57:12:eb:f9:52:c4:73:83:f2:73:24:ed:51:
94:73:f6:ac:cc:d0:83:06:17:2b:12:82:04:db:e3:
10:75:c4:80:ac:84:ce:06:16:9d:f1:9b:1e:30:ed:
7e:a0:b2:a1:26:60:7b:ca:bf:11:7a:d4:5e:b6:7e:
99:53:92:05:d9:8e:6b:c8:7d:88:e4:3e:04:2c:6d:
7b:3c:23:b5:66:b0:d6:6b:8c:c0:55:ae:82:94:c4:
59:de:e4:56:77:48:d4:e7:de:f9:e9:95:bb:e5:1b:
cb:43:dd:46:39:1f:f3:81:2a:2b:f8:bd:02:e9:d2:
bc:c4:92:e7:4a:37:42:fa:52:13:80:45:db:13:c5:
ab:1d:66:a7:47:d2:75:43:32:79:26:2c:a9:8a:74:
4e:9a:ac:86:d6:84:3d:21:e7:97:4f:13:7d:7e:a0:
d9:26:db:87:18:38:8b:a9:20:eb:95:8f:09:e3:2b:
cf:ab:7a:d8:c8:99:d6:13:f2:ed:a1:9a:ff:2f:e0:
80:2c:ec:95:96:2e:85:62:36:ac:3c:e0:98:a4:69:
aa:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7B:A2:33:37:74:EB:FE:20:A9:3A:D5:DF:F9:7D:60:FB:1C:21:85
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a383030303a3a2f33332d3333203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5524:8000::/33
Signature Algorithm: sha256WithRSAEncryption
1b:ce:4d:69:2f:bf:af:bf:d1:c1:d5:08:6a:50:88:86:b9:da:
20:86:25:6a:c3:17:f3:fd:f9:ea:9b:24:3e:79:c9:8b:fb:1d:
5c:c1:45:1b:59:6d:68:c8:c2:ac:94:a2:5e:5c:15:6c:df:2f:
97:17:59:c0:65:dd:3e:bc:eb:f1:48:f3:8e:64:3a:59:2b:5b:
70:af:f7:19:54:8c:8b:62:36:68:a0:e7:58:3d:9e:01:80:fd:
77:92:93:cd:c1:71:32:71:77:a3:18:ae:a5:f8:8b:58:5f:2b:
3f:fb:72:87:04:62:27:2b:51:bc:e9:c0:54:f6:f4:a9:e0:7f:
f3:19:3e:5d:d5:a2:2c:0c:89:8c:2e:00:02:4e:99:d5:65:36:
a8:c1:c4:e8:2c:f0:2a:21:6f:ff:a6:b4:8a:88:43:37:2d:b9:
8e:bf:21:ab:96:32:0b:17:62:1b:08:0f:a5:e5:df:d3:5a:f0:
80:0f:92:70:0d:e9:20:7e:5d:3b:57:9d:49:17:cb:11:91:9b:
cc:a4:fa:ac:ca:e1:bf:69:09:13:61:65:99:d0:10:16:b0:a9:
27:e3:bf:af:06:39:87:1c:cb:01:bb:ee:c4:24:a4:6d:40:6d:
86:42:ee:e8:62:9c:18:26:9f:e0:02:26:4c:d1:db:64:00:5d:
c0:28:1c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:47 2025 by rpki-client