Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa
File: 323830343a343864633a3a2f33322d3430203d3e203238333237.roa (raw, json)
Hash identifier: E1XoywGDOSssXFy2GAns/rcsG06KGYaYnzhvqTT1kT0=
Subject key identifier: F5:4B:71:9B:58:A5:EF:9A:E3:52:5E:DE:92:0B:E2:0E:DD:47:DA:40
Certificate issuer: /CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Certificate serial: 345F268BE6669373146DE65257CA138DFE77E65F
Authority key identifier: 9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa
Signing time: Tue 26 Nov 2024 17:27:27 +0000
ROA not before: Tue 26 Nov 2024 17:22:27 +0000
ROA not after: Tue 25 Nov 2025 17:27:27 +0000
asID: 28327
IP address blocks: 2804:48dc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:5f:26:8b:e6:66:93:73:14:6d:e6:52:57:ca:13:8d:fe:77:e6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9F85C9FEBF815155C6D44798669FB3BFB9FD49E0
Validity
Not Before: Nov 26 17:22:27 2024 GMT
Not After : Nov 25 17:27:27 2025 GMT
Subject: CN=F54B719B58A5EF9AE3525EDE920BE20EDD47DA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fe:f9:54:7c:7e:04:1e:1e:f6:0c:ed:90:32:
50:74:0d:65:57:21:3f:bc:f5:06:b3:1a:d3:1b:d6:
1f:5c:a9:45:09:74:b8:61:08:35:ce:2a:90:ea:1c:
90:4b:6f:d9:a7:bd:aa:2d:a1:03:b0:de:ab:4a:90:
29:91:4a:27:1a:4c:a4:1f:18:80:09:34:c9:61:d4:
f5:05:f0:8c:07:40:8a:62:db:70:ec:85:17:9a:e4:
3a:fc:94:be:81:60:3f:3d:85:42:5a:16:8d:4a:5a:
f8:aa:2a:85:62:d3:4a:13:a1:e2:95:5a:d4:07:b0:
e6:8f:e9:46:e3:98:c3:f7:4a:ae:a6:b3:3c:71:33:
12:22:bd:21:68:87:30:f0:7c:3b:ef:95:84:4b:6b:
a3:85:22:63:99:93:b5:3c:04:9d:a3:8b:fd:f6:84:
ef:4e:d2:f2:d5:91:4e:f5:8b:6f:4b:a6:a0:ef:c8:
a4:a9:3c:c2:a2:f4:ac:91:1a:7b:27:72:98:df:b3:
81:f3:b1:f1:38:af:7e:92:ac:73:0c:91:f0:32:14:
33:f6:25:29:a2:ed:87:e8:4f:d2:56:51:fe:ca:ee:
bc:c0:6b:df:52:19:16:23:82:9e:a5:0e:c0:55:4d:
aa:d8:66:52:1e:84:4c:05:6e:ef:4b:90:85:1a:34:
69:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:4B:71:9B:58:A5:EF:9A:E3:52:5E:DE:92:0B:E2:0E:DD:47:DA:40
X509v3 Authority Key Identifier:
keyid:9F:85:C9:FE:BF:81:51:55:C6:D4:47:98:66:9F:B3:BF:B9:FD:49:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F85C9FEBF815155C6D44798669FB3BFB9FD49E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ANw3Aiiq8LmCGZGJv441YpvjR1dpefaRjEdcrYsV7xhH/0/323830343a343864633a3a2f33322d3430203d3e203238333237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48dc::/32
Signature Algorithm: sha256WithRSAEncryption
a4:41:f8:4b:16:e8:d2:fe:57:ed:5b:49:32:79:21:c9:c0:a0:
63:f1:76:37:cc:82:4f:00:45:c4:aa:c3:12:46:f3:88:71:22:
8c:81:05:4b:aa:05:bc:ba:14:d6:a8:43:c7:eb:b4:d1:fd:97:
8a:16:e9:73:fe:64:fb:e0:30:c8:dc:46:1f:8d:fd:90:fa:74:
f7:40:29:45:fb:7b:0b:91:5d:0c:49:2e:28:eb:81:53:84:01:
f2:2e:44:6b:e1:33:83:91:db:93:ad:d8:e6:fb:61:ff:da:65:
2e:d7:77:24:1c:7c:39:9e:00:93:ec:3f:a9:65:49:ed:a9:47:
f4:75:ce:bd:91:ce:2d:7a:fc:96:45:7f:0d:ca:f2:0b:e1:ff:
15:4d:86:ea:9f:31:4b:8e:dd:2d:df:1e:c1:8c:56:7c:1d:41:
48:17:2b:26:a9:35:1b:e5:34:62:08:57:36:a6:1d:43:49:ff:
bb:68:86:de:38:00:6c:4a:6b:c0:fd:03:5a:b0:52:cf:8d:d0:
66:58:53:80:90:29:9d:e9:36:bc:3c:e6:4b:69:a4:9c:71:3c:
13:7a:f3:8e:fe:70:e1:7d:ba:be:33:ce:36:77:c1:09:bc:0b:
ce:c4:8f:8e:ce:bd:72:f5:cd:2a:30:a1:48:0a:80:ff:6d:5c:
46:65:6e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:59:47 2025 by rpki-client