Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa
File: 323830343a383030343a3a2f33322d3332203d3e20323731373234.roa (raw, json)
Hash identifier: Z1L2h6CQSZppA8qbSVMzeOuoA3u9+PmAWysMZzf+tL4=
Subject key identifier: 33:25:73:77:04:B4:F6:20:E4:78:45:06:FB:81:9E:47:1F:1D:CD:D8
Certificate issuer: /CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Certificate serial: 6304B0DE51ECF7D13A5107BBBB58EB600BFE415D
Authority key identifier: 41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa
Signing time: Mon 23 Jan 2023 21:42:13 +0000
ROA not before: Mon 23 Jan 2023 21:37:13 +0000
ROA not after: Mon 22 Jan 2024 21:42:13 +0000
asID: 271724
IP address blocks: 2804:8004::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:04:b0:de:51:ec:f7:d1:3a:51:07:bb:bb:58:eb:60:0b:fe:41:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41837C1CF0891C60BB3718E09EE5586C0EBC3597
Validity
Not Before: Jan 23 21:37:13 2023 GMT
Not After : Jan 22 21:42:13 2024 GMT
Subject: CN=3325737704B4F620E4784506FB819E471F1DCDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:1c:7a:88:9b:66:78:a2:a9:9a:81:1d:6d:
c0:ec:e8:d6:ef:d5:83:c0:d9:88:ca:73:6d:fc:88:
3e:2a:09:f6:f2:9b:4e:20:98:8b:e7:0b:81:18:64:
ab:57:0c:a1:11:2f:dd:68:f0:8e:c5:a8:d2:1e:c7:
35:38:fc:a3:02:6e:11:c5:7f:7c:e7:f8:68:92:c9:
4c:15:28:38:fa:32:59:ce:9e:8c:fc:01:ab:0b:43:
76:5d:d4:0c:44:62:de:c6:02:c6:8a:e3:be:01:34:
9f:ad:d4:da:6d:4e:6c:b8:70:79:40:9b:23:e0:45:
08:2c:58:9e:07:75:19:40:b6:f8:1c:f8:c0:0b:bc:
66:e3:32:da:bb:98:ce:6d:63:ac:78:21:36:e6:e3:
df:37:48:63:29:7a:0c:e4:16:03:a7:4a:f3:89:c6:
36:4e:17:81:3d:d0:0f:c2:ef:ba:5b:bd:54:ba:85:
f7:fb:65:00:56:67:85:73:bc:bc:b5:5d:88:81:dd:
4b:7e:65:5d:49:9a:1c:aa:e6:2a:63:c5:7a:2b:bf:
8d:9b:ae:c2:58:03:c0:3e:ec:fe:fa:37:ea:01:50:
e6:73:15:9b:8d:3a:e5:de:de:63:3c:8e:ff:97:65:
e9:af:b7:ee:1d:e6:af:bb:8b:8e:54:0d:68:f5:14:
10:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:25:73:77:04:B4:F6:20:E4:78:45:06:FB:81:9E:47:1F:1D:CD:D8
X509v3 Authority Key Identifier:
keyid:41:83:7C:1C:F0:89:1C:60:BB:37:18:E0:9E:E5:58:6C:0E:BC:35:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/41837C1CF0891C60BB3718E09EE5586C0EBC3597.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41837C1CF0891C60BB3718E09EE5586C0EBC3597.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kUmK7JT6oTdEnZFhHK18LpnpKYuHM8q1GhbTrMJb8pd/1/323830343a383030343a3a2f33322d3332203d3e20323731373234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8004::/32
Signature Algorithm: sha256WithRSAEncryption
a3:36:37:b7:fa:98:52:db:39:b0:d3:61:4a:6b:aa:95:0d:18:
78:7e:6a:f3:e3:a2:1c:11:4b:9d:f3:11:c8:77:54:bf:c4:94:
f2:75:39:47:79:e5:8e:a2:50:13:65:f9:14:42:b3:38:fe:a8:
f7:dc:d5:51:0a:a3:85:db:22:e0:17:bd:07:4a:17:d8:e3:08:
59:68:dd:dc:80:3d:f4:13:1f:c5:1f:e0:02:c7:98:4e:63:79:
a4:a0:a1:c9:85:bd:92:b7:c5:5b:45:c5:3e:31:0f:d0:af:6f:
af:45:9c:0a:ba:61:11:b5:bc:53:56:b8:be:c6:cd:57:1b:f7:
4c:4b:fd:af:c6:16:3d:d0:b6:42:1f:ed:7e:e0:29:c2:67:42:
3a:ee:9c:0e:60:e0:96:c0:65:76:03:9c:63:b0:a6:e1:0e:83:
3d:3e:a8:a4:88:7b:20:ec:1c:5d:f8:6e:2e:2d:82:7a:ef:36:
f4:7d:f8:0c:43:da:ff:52:6d:c0:5c:bb:ea:d0:1b:28:bd:be:
67:e6:9d:d6:b3:28:de:cf:5c:ea:8a:93:f6:27:53:88:ce:34:
c5:8c:05:fa:39:8c:60:5e:b5:62:57:bb:3f:76:21:29:82:82:
a9:a6:a3:84:ad:5b:83:35:51:ae:ca:2b:01:9b:11:68:5f:c7:
c3:98:4a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:45:59 2025 by rpki-client