Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/323830343a316135343a3a2f33322d3438203d3e203631383534.roa
File: 323830343a316135343a3a2f33322d3438203d3e203631383534.roa (raw, json)
Hash identifier: Gd2lBGqVvDQ1hqxegt+pmeeRYdgkL1+LMPaCzyksZtU=
Subject key identifier: 91:A5:06:1B:E7:34:6C:06:F0:43:53:51:F2:9A:0C:61:08:87:B0:6E
Certificate issuer: /CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
Certificate serial: 524EE8B017BEEA944BC167D8071C837D0010B073
Authority key identifier: 71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/323830343a316135343a3a2f33322d3438203d3e203631383534.roa
Signing time: Mon 23 Dec 2024 14:13:07 +0000
ROA not before: Mon 23 Dec 2024 14:08:07 +0000
ROA not after: Mon 22 Dec 2025 14:13:07 +0000
asID: 61854
IP address blocks: 2804:1a54::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:4e:e8:b0:17:be:ea:94:4b:c1:67:d8:07:1c:83:7d:00:10:b0:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7182A558E7EB248707BE29D291D0D4A0CEE8BDC5
Validity
Not Before: Dec 23 14:08:07 2024 GMT
Not After : Dec 22 14:13:07 2025 GMT
Subject: CN=91A5061BE7346C06F0435351F29A0C610887B06E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:92:c0:6e:91:0e:db:f3:ab:c9:2f:ac:83:40:
a2:d7:7c:2c:48:df:40:cc:36:7b:68:53:8a:38:38:
84:93:77:9b:57:65:7b:66:1d:04:6e:9d:60:ae:9c:
db:10:95:f1:8c:78:6f:dc:25:81:04:27:0d:de:1d:
1e:b9:5f:8e:60:f7:85:33:fb:04:0b:07:5a:db:2e:
fe:c9:9c:c8:a2:bf:44:05:b5:c2:89:20:c2:45:9f:
bc:aa:e8:d0:1f:d2:7b:cb:12:4a:42:86:7a:60:4a:
6f:c3:a9:c1:6d:ba:6f:6d:e1:23:51:fd:6b:20:80:
63:3d:33:39:ba:65:04:70:75:b5:f0:1c:71:15:1e:
81:aa:fd:56:10:ad:43:30:05:63:ef:e9:f2:80:ec:
ae:53:dd:89:75:af:d8:96:62:72:5f:9f:80:af:b6:
85:ef:af:fa:1d:ae:bb:cc:f9:e9:50:c2:95:7b:53:
74:cc:bd:74:4c:47:8e:4a:58:75:74:45:a4:56:54:
90:2d:de:85:1e:52:19:9a:85:77:78:83:a1:62:4e:
03:9c:69:7c:47:43:10:06:fd:1b:f3:b4:c8:23:e1:
c9:61:5a:97:cf:c7:46:62:ed:6a:2f:8d:48:4a:19:
3d:d0:27:0d:56:e9:5c:51:3f:a1:00:78:69:e4:05:
12:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:A5:06:1B:E7:34:6C:06:F0:43:53:51:F2:9A:0C:61:08:87:B0:6E
X509v3 Authority Key Identifier:
keyid:71:82:A5:58:E7:EB:24:87:07:BE:29:D2:91:D0:D4:A0:CE:E8:BD:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7182A558E7EB248707BE29D291D0D4A0CEE8BDC5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9hebRXADhirvrFCZNBoqiYkATwgccatBHEGtvUEGz3NG/0/323830343a316135343a3a2f33322d3438203d3e203631383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a54::/32
Signature Algorithm: sha256WithRSAEncryption
27:08:2d:f6:1c:5e:c7:55:40:fb:bc:77:43:44:c8:ad:b2:56:
cf:61:cb:84:c9:5e:3d:69:d4:ed:04:68:f2:eb:1c:65:7e:75:
6a:51:d1:04:c4:10:28:2d:67:e4:fd:8c:0c:25:e1:6a:a2:4d:
4b:21:e2:4e:43:75:60:f7:2f:be:3b:8e:48:ee:7b:85:d3:79:
d2:d7:2e:b7:51:0d:ec:9a:a4:a9:a0:7a:71:23:c5:dd:de:a3:
92:d5:b4:af:86:67:06:18:41:50:67:ae:55:40:f7:fd:53:87:
e9:da:c5:dc:2f:83:75:80:5c:68:a4:11:d1:2d:ee:e3:8d:d4:
dc:14:95:f5:6e:1e:7d:25:8e:1a:7f:36:d9:16:da:6c:44:f2:
38:ff:9b:a9:24:bc:31:6e:3b:1e:c2:3d:4e:7d:a5:7f:55:45:
a9:25:90:f7:09:3c:3c:25:c9:a5:f0:ce:59:b4:a7:2c:8a:cb:
b0:39:d4:f3:1c:27:4f:f6:bb:e8:14:f0:93:aa:f3:ac:72:42:
e6:3c:44:b9:53:50:62:c1:d5:cc:1b:41:cf:8c:0c:37:8a:66:
b6:60:94:81:7d:15:53:d1:2b:c3:68:0a:64:b9:bb:a1:07:bd:
80:77:1c:d7:50:81:ef:05:90:a3:b6:57:84:25:c3:64:bf:54:
d9:ce:f0:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:13 2025 by rpki-client