Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33362d3336203d3e20323635343936.roa
File: 323830343a333530383a653030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier: hj7emIJuRYFUXunahg37kvc6Ra2gW5hJugsvtSMdSxU=
Subject key identifier: 43:7F:EA:A5:02:E4:6D:FE:D4:C3:06:A2:F9:18:9A:49:6C:AE:89:8E
Certificate issuer: /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial: 79BDABA95AC5705D5C6DCB1FFC47B1385B13D57A
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access: rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33362d3336203d3e20323635343936.roa
Signing time: Mon 03 Apr 2023 10:56:39 +0000
ROA not before: Mon 03 Apr 2023 10:51:39 +0000
ROA not after: Mon 01 Apr 2024 10:56:39 +0000
asID: 265496
IP address blocks: 2804:3508:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:bd:ab:a9:5a:c5:70:5d:5c:6d:cb:1f:fc:47:b1:38:5b:13:d5:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Validity
Not Before: Apr 3 10:51:39 2023 GMT
Not After : Apr 1 10:56:39 2024 GMT
Subject: CN=437FEAA502E46DFED4C306A2F9189A496CAE898E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ac:75:8e:93:2a:74:09:6d:4c:1f:f2:5c:c1:
3f:41:de:1c:57:eb:10:85:93:eb:62:81:43:74:8f:
7a:89:53:62:14:9e:a2:98:f1:44:5c:87:2a:d8:fe:
72:37:2e:e8:9e:6b:ab:bd:40:fb:db:02:10:0c:24:
6a:5c:4f:db:0e:fd:5a:fe:26:05:2f:70:6a:2f:72:
6c:09:b0:9d:da:53:b2:4b:28:55:8d:81:c0:22:1d:
c0:8e:b4:5a:ec:3f:33:89:ca:af:30:0c:a0:78:7d:
a1:7a:06:38:51:84:dc:a7:65:b3:e8:d2:a2:1d:0e:
cf:86:fb:0f:55:ce:7e:60:d0:a7:38:2b:dc:1e:2d:
3b:86:d4:bf:88:49:ab:99:7f:90:91:fa:9e:68:26:
5e:b4:f8:77:a7:d4:b4:1d:22:7b:f1:96:7a:cb:83:
14:d9:ae:67:72:d9:33:93:fe:11:90:34:d4:c3:6e:
62:82:68:36:13:bd:b9:50:e5:e5:be:b7:42:98:4c:
aa:38:0e:04:22:94:fa:ff:30:7b:0e:d5:26:61:e8:
49:b8:0a:31:76:ab:0a:0e:dc:a2:29:e5:0d:50:23:
19:94:7c:cf:e0:2b:12:74:ce:30:66:56:54:21:37:
a1:87:52:0d:56:98:87:53:ca:d7:9f:4d:8c:26:b7:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:EA:A5:02:E4:6D:FE:D4:C3:06:A2:F9:18:9A:49:6C:AE:89:8E
X509v3 Authority Key Identifier:
keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a653030303a3a2f33362d3336203d3e20323635343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3508:e000::/36
Signature Algorithm: sha256WithRSAEncryption
3a:04:d1:a4:d0:ae:eb:c7:2a:17:76:9d:9b:f9:90:2b:cf:43:
40:39:e7:fb:9c:18:ac:5b:73:f1:ce:d2:bd:8d:c6:fa:b3:a7:
89:95:0b:b1:58:07:5b:6b:56:81:cb:34:c8:0d:b7:3f:21:03:
8e:18:82:81:53:d3:f1:c7:3d:28:d3:56:ae:b7:c3:ed:92:18:
49:16:29:94:de:1a:05:a9:4e:c4:59:9e:da:dd:c8:1c:ef:a7:
94:ab:bc:0e:84:f5:43:82:ff:c3:80:9a:df:20:b6:e7:47:91:
f7:4c:8c:8a:97:f7:21:b2:fb:82:6b:cf:51:5c:c1:fb:98:bd:
ef:89:2f:f7:78:bf:c0:b1:a0:2a:93:d1:ff:86:15:44:f6:01:
96:7c:24:75:5a:2e:64:01:e2:a5:cf:4e:8e:d8:f1:3a:12:ad:
fa:40:23:6d:38:ff:42:f9:a0:52:28:b4:7f:a6:30:4d:0f:d7:
73:4b:5c:00:9c:8d:99:a9:92:9f:43:48:7a:d2:05:9f:b6:e7:
3a:30:20:66:a5:99:f2:0f:25:23:74:29:81:f8:87:94:3e:66:
d9:d3:ee:bb:0c:8f:b4:87:80:39:ff:3d:f0:9a:e9:fa:a5:2f:
6b:54:85:71:4f:20:81:48:44:14:2d:6f:b1:c1:28:b9:d0:83:
35:a8:a3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 17:26:50 2025 by rpki-client