Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33362d3336203d3e20323632383139.roa
File: 323830343a326135303a3a2f33362d3336203d3e20323632383139.roa (raw, json)
Hash identifier: TWtUcABxflorVlwrlwIOsS9CsnIhPsQ9DNHoV/E5R6c=
Subject key identifier: E1:FF:CE:3E:81:28:9F:7C:11:55:24:C8:F3:73:D0:51:0D:A4:3D:55
Certificate issuer: /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial: 2E56D03133569E328B1BD6F1B425F493A8EC45CF
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33362d3336203d3e20323632383139.roa
Signing time: Wed 09 Nov 2022 20:11:02 +0000
ROA not before: Wed 09 Nov 2022 20:06:02 +0000
ROA not after: Wed 08 Nov 2023 20:11:02 +0000
asID: 262819
IP address blocks: 2804:2a50::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:56:d0:31:33:56:9e:32:8b:1b:d6:f1:b4:25:f4:93:a8:ec:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
Validity
Not Before: Nov 9 20:06:02 2022 GMT
Not After : Nov 8 20:11:02 2023 GMT
Subject: CN=E1FFCE3E81289F7C115524C8F373D0510DA43D55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ea:db:25:36:c8:63:f7:d1:70:13:d6:e5:c1:
a3:e9:2d:38:f9:c2:17:66:cd:a1:a0:01:f1:25:b2:
a2:5e:a2:45:3d:f8:b8:c1:b7:c2:1d:b2:3e:14:1d:
8e:19:77:a6:3c:bb:e2:cd:d2:dc:45:67:7d:29:74:
bf:a7:c5:08:79:34:87:62:c5:90:f0:df:64:ef:0d:
ae:33:1c:0f:f9:3c:cf:aa:b7:56:93:4c:d9:08:09:
54:75:6a:64:f3:d4:dd:54:fc:1e:35:68:52:61:e3:
da:2e:ee:26:f9:bf:71:63:04:58:9c:4a:d4:30:88:
c4:9b:8f:57:c8:5c:b7:b0:0c:d7:42:76:f7:3f:30:
02:92:ad:ae:72:7d:e3:65:17:99:61:4b:a5:c3:3f:
07:ae:f6:cf:ee:20:48:f1:9c:f2:5a:2b:1a:67:85:
d5:eb:6d:1d:69:fe:29:dd:5a:a5:da:f5:85:d7:1f:
32:0a:e7:4b:35:11:fd:7c:dd:55:98:da:88:8b:2e:
13:81:4e:86:89:21:e5:1b:fd:df:8a:6a:bd:31:4a:
e5:1d:e1:9d:82:33:ba:cd:30:87:e7:6d:07:9c:cf:
2f:37:ff:db:0d:fc:b9:44:b1:51:86:a6:e7:71:2f:
90:92:ec:c6:a1:19:71:c2:4a:40:a4:34:62:ae:aa:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FF:CE:3E:81:28:9F:7C:11:55:24:C8:F3:73:D0:51:0D:A4:3D:55
X509v3 Authority Key Identifier:
keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33362d3336203d3e20323632383139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2a50::/36
Signature Algorithm: sha256WithRSAEncryption
1d:e5:cc:11:e5:7b:63:29:fe:e9:9b:31:b5:a7:47:df:04:24:
cc:0b:1b:6b:4a:f8:3f:bf:b8:e9:56:9a:af:b9:93:4c:04:fb:
0b:a8:13:23:32:a5:1d:24:61:4d:cf:93:00:93:07:ce:c4:78:
67:9d:eb:fd:72:12:30:20:43:ba:b9:32:34:41:40:6a:03:3b:
7d:f3:1e:df:59:2b:41:6a:c0:e4:57:7e:ab:d3:10:0e:85:a1:
5d:a4:43:67:df:d1:c1:66:6f:d6:5b:da:5b:ac:62:43:75:7d:
e3:36:8a:74:87:ff:94:ad:97:f9:7a:22:03:14:80:97:3b:85:
c6:71:76:1b:30:54:d3:85:2e:57:9f:cf:02:ff:47:cd:eb:ba:
e1:66:89:6b:ae:6f:7c:4b:bc:b6:26:fd:97:ef:26:69:e1:d6:
e0:ca:98:9e:87:2b:45:b6:3b:96:3a:4b:34:24:8b:a8:87:57:
bb:da:e7:d9:33:90:be:3b:7a:c2:21:51:c6:45:ad:34:c9:00:
16:fb:03:d4:cc:9f:de:7b:92:b3:6a:ab:cd:b4:c7:66:c2:1d:
52:01:64:b5:c4:90:05:02:47:b0:30:4e:b4:5a:2b:96:00:d9:
c6:a8:93:71:34:92:fc:7c:a6:cc:df:87:20:ea:20:d5:38:cb:
c3:7b:b4:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 16:46:08 2025 by rpki-client