Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa
File: 323830343a346364343a3a2f33322d3332203d3e20323637333935.roa (raw, json)
Hash identifier: WZ76R+HAtpYQ0YxPOcJjPVI0jZuhSZmATrTvLFgw/no=
Subject key identifier: F9:7F:3B:D9:5D:6C:14:93:5D:80:76:5D:81:E9:C7:70:92:C7:E7:EC
Certificate issuer: /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial: 2B103F306AE964CA08ADB8335802FB6945789D7A
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa
Signing time: Fri 23 Aug 2024 19:56:48 +0000
ROA not before: Fri 23 Aug 2024 19:51:48 +0000
ROA not after: Fri 22 Aug 2025 19:56:48 +0000
asID: 267395
IP address blocks: 2804:4cd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:10:3f:30:6a:e9:64:ca:08:ad:b8:33:58:02:fb:69:45:78:9d:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Validity
Not Before: Aug 23 19:51:48 2024 GMT
Not After : Aug 22 19:56:48 2025 GMT
Subject: CN=F97F3BD95D6C14935D80765D81E9C77092C7E7EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:dc:4a:8e:24:a8:de:a4:5f:8e:3e:89:0a:53:
a8:08:63:1e:7b:05:53:f5:37:f6:1f:d7:1a:33:2e:
de:db:ba:52:f3:05:da:81:43:ad:70:c7:ad:a9:2e:
4d:ad:cc:62:ac:87:df:bc:c2:92:f8:01:fa:48:b2:
a9:12:99:f4:4e:0b:63:d6:a8:38:59:17:f0:4d:03:
ed:a4:4b:48:3e:4e:d7:c8:c6:5b:06:33:65:b2:1a:
62:59:5e:d6:e3:72:46:52:83:46:b1:f5:ef:10:cd:
56:86:07:e7:6c:40:30:04:3f:d3:53:ee:9c:12:67:
fc:73:f5:c0:f2:fe:3b:fe:d8:8d:26:a3:8d:ae:6a:
92:2a:a6:df:ad:ca:e7:91:5a:26:eb:ed:94:99:ff:
91:34:4d:9e:b7:c0:a9:6c:35:37:4b:38:ce:e2:4d:
a2:cd:f4:8c:73:16:e4:05:4d:70:61:20:61:56:d2:
ef:79:94:37:0d:7b:77:e7:b5:a3:39:e5:ff:fc:5f:
c7:f9:53:aa:1e:7c:c9:88:7b:bc:20:02:78:98:67:
87:5f:e4:53:f1:c0:fc:43:4f:f8:8f:e2:eb:90:60:
f7:c8:18:fd:3a:a9:92:ec:ca:3f:60:37:1f:02:1e:
65:0d:3e:49:29:5f:89:df:0b:c5:d9:d4:ac:57:19:
85:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:7F:3B:D9:5D:6C:14:93:5D:80:76:5D:81:E9:C7:70:92:C7:E7:EC
X509v3 Authority Key Identifier:
keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33322d3332203d3e20323637333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4cd4::/32
Signature Algorithm: sha256WithRSAEncryption
11:0a:11:dc:50:05:4d:48:76:72:b7:f0:77:60:45:33:21:7a:
c8:b5:b5:36:f4:8c:f0:2a:af:d0:ab:c9:ae:ee:52:da:f2:c8:
09:ed:1f:43:56:9d:e8:47:96:46:03:f8:20:d6:14:3b:d3:f0:
24:4e:23:92:46:07:83:a5:ab:4e:07:c5:c5:42:ec:07:43:2b:
b5:a4:01:f5:0c:e7:83:2a:51:bc:47:79:e1:29:99:8c:35:7b:
aa:b4:fc:68:88:44:0e:81:46:41:36:37:f7:aa:5c:a4:8a:9e:
98:6f:bb:a6:78:13:e5:d9:42:3e:b6:02:40:86:e5:f0:11:34:
9a:44:dc:86:37:75:2b:23:83:64:7a:c0:c0:b7:76:02:7a:54:
bf:1d:5d:d9:a1:8a:09:94:e1:8e:22:d3:fb:49:b3:c5:88:cb:
0b:75:92:74:d3:23:91:1c:ec:4a:94:c2:a3:2c:f3:a7:77:87:
c3:df:4a:a2:e3:77:0e:8f:91:5b:13:34:34:00:2b:38:10:0a:
4f:5e:fa:61:39:35:9a:cb:64:b1:97:ac:b9:b9:1b:7a:75:4d:
f9:56:0b:87:6a:37:f3:66:08:c1:b7:e4:be:d8:db:c0:da:d1:
b3:aa:e8:5f:93:c6:1c:79:c8:c5:35:77:2b:dd:64:64:56:ce:
99:85:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:21:18 2025 by rpki-client