Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a3a2f33322d3332203d3e20323730383139.roa
File: 323830343a373165383a3a2f33322d3332203d3e20323730383139.roa (raw, json)
Hash identifier: DZZlFniz14RZjZWu9dJoz7mXrvckLFAvjjfvr3lMxm4=
Subject key identifier: 2C:40:17:32:56:46:28:76:B9:7B:09:F4:67:11:7D:79:8B:22:A0:5C
Certificate issuer: /CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Certificate serial: 3AD5342F2AA6C2F2F04BE7CA28506217F26E0959
Authority key identifier: 8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a3a2f33322d3332203d3e20323730383139.roa
Signing time: Tue 10 Dec 2024 13:02:21 +0000
ROA not before: Tue 10 Dec 2024 12:57:21 +0000
ROA not after: Tue 09 Dec 2025 13:02:21 +0000
asID: 270819
IP address blocks: 2804:71e8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d5:34:2f:2a:a6:c2:f2:f0:4b:e7:ca:28:50:62:17:f2:6e:09:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C12B45617D2E2C140AFEF8A76D18046F084B1C7
Validity
Not Before: Dec 10 12:57:21 2024 GMT
Not After : Dec 9 13:02:21 2025 GMT
Subject: CN=2C40173256462876B97B09F467117D798B22A05C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5f:19:f9:5b:64:6b:99:81:05:4c:23:a8:07:
e2:29:a9:7c:9d:9f:68:54:a1:bc:89:f8:2e:53:3a:
7b:61:72:0e:5f:3e:20:b4:f8:33:18:06:ec:f9:76:
aa:e8:0e:2c:3c:8b:cc:ce:3c:41:56:8b:62:bc:38:
9d:65:f7:08:eb:23:9e:72:37:66:5b:83:bf:b7:82:
0f:ad:4c:c5:00:12:61:87:32:80:73:9a:49:93:10:
0a:4e:12:97:57:d4:d2:b2:50:41:6c:3f:2a:02:48:
f0:2a:45:f6:87:44:6c:34:33:a2:dd:81:87:49:2d:
79:d1:7a:33:fb:72:d6:bb:5e:45:f9:2e:e4:1d:81:
8c:d0:7c:57:6c:ed:20:05:e1:c3:2e:57:47:8c:4f:
04:66:11:04:a6:d6:70:b9:e8:c8:e6:6a:c7:4b:99:
91:76:ff:36:d2:b4:b1:87:d0:09:8a:10:9d:f0:37:
af:ca:69:db:08:de:64:cf:5d:f6:fa:30:cb:6c:b6:
09:b1:4b:e7:67:07:be:26:9f:c8:0a:89:31:2c:3f:
0a:40:cf:91:47:0e:91:66:b8:19:29:c5:c2:c9:df:
56:29:1f:9a:96:14:ed:6f:bf:0e:f7:cf:ee:2f:f9:
81:38:a7:c0:c3:f3:28:4a:a4:e2:3f:54:df:26:88:
ee:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:40:17:32:56:46:28:76:B9:7B:09:F4:67:11:7D:79:8B:22:A0:5C
X509v3 Authority Key Identifier:
keyid:8C:12:B4:56:17:D2:E2:C1:40:AF:EF:8A:76:D1:80:46:F0:84:B1:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C12B45617D2E2C140AFEF8A76D18046F084B1C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SiVPoDMxeaMLAffk543WR9jZXTvZuhBJetqkDAjgxrP/0/323830343a373165383a3a2f33322d3332203d3e20323730383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:71e8::/32
Signature Algorithm: sha256WithRSAEncryption
18:96:5d:d3:13:95:17:24:f5:ef:0c:ac:e4:d9:6f:2f:20:76:
4e:c8:7a:ce:3b:5b:d2:ee:df:e1:8a:c4:2d:c8:2d:8a:8d:d4:
90:d2:c1:fe:41:e1:37:f1:c0:ca:6d:9c:21:55:49:f8:a1:5f:
5f:a9:b8:5b:77:ba:2a:b1:06:3e:0e:56:12:4e:28:d6:47:46:
cc:87:43:32:2a:94:7d:ed:ab:32:6e:c1:f0:df:6b:a4:b0:94:
49:4d:1a:b3:53:69:e0:af:a4:0e:df:29:f8:2e:b9:45:5c:72:
16:f3:a9:cd:e2:76:ae:7c:0e:c2:80:5e:a8:8f:89:d5:17:ab:
1d:23:77:ff:42:a4:7d:ad:45:ce:4d:4d:d6:3a:7f:f9:da:9e:
24:51:86:ae:64:fc:5a:52:7d:01:27:ab:9c:ab:d8:fd:2f:27:
af:a1:d4:95:cb:52:7c:b4:e7:0d:b4:52:53:1b:ba:a7:01:79:
9e:69:5c:5c:91:2e:7a:80:9d:02:b4:21:03:de:fb:6d:df:4f:
5b:1d:83:64:81:c3:5d:6b:63:2b:0e:24:22:93:bb:ae:00:73:
8e:38:f8:41:c0:32:18:e9:74:c3:08:24:45:68:fe:f4:44:e2:
44:50:24:29:76:35:29:fc:e2:8d:88:a3:bd:75:50:bc:82:a7:
70:37:99:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 08:48:19 2025 by rpki-client