Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
File: 323830343a366132383a3a2f33322d3438203d3e20323730333136.roa (raw, json)
Hash identifier: GlJgw5/aVzF/T9mxu4Eg7NTTwZxElnBkML2WyVugMGg=
Subject key identifier: 9C:89:9A:E2:68:27:51:6C:6B:B7:B9:B4:D6:F7:20:5C:ED:9D:BE:CC
Certificate issuer: /CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Certificate serial: 7DDF8DEC97160DF7D7BFF172C5FCB6E4D40C12DB
Authority key identifier: 2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
Signing time: Mon 19 Aug 2024 20:22:47 +0000
ROA not before: Mon 19 Aug 2024 20:17:47 +0000
ROA not after: Mon 18 Aug 2025 20:22:47 +0000
asID: 270316
IP address blocks: 2804:6a28::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:df:8d:ec:97:16:0d:f7:d7:bf:f1:72:c5:fc:b6:e4:d4:0c:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B70CD0507DEB57B92FF796531C932DEF83009A2
Validity
Not Before: Aug 19 20:17:47 2024 GMT
Not After : Aug 18 20:22:47 2025 GMT
Subject: CN=9C899AE26827516C6BB7B9B4D6F7205CED9DBECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:eb:cf:ec:ec:34:0b:9c:fa:74:72:27:92:de:
3f:89:ba:56:18:c9:40:98:8d:82:e6:44:01:ff:97:
23:f4:ee:ea:f5:d6:c7:02:6c:22:98:f4:a2:a7:50:
c2:b4:1c:d6:97:6e:64:7a:9f:d5:a5:14:77:88:2a:
08:0d:68:60:d0:ad:1a:d0:f1:fa:e4:59:22:23:12:
0f:d2:a2:fa:6a:aa:4c:bf:52:9e:3a:70:48:99:f2:
33:bf:a7:ce:88:91:a8:6a:f0:83:e3:7e:bb:42:fb:
bb:ab:81:c2:bf:e2:4f:10:76:0a:56:80:a0:df:6f:
ee:ff:e7:e1:b7:39:a9:31:ae:4d:04:bd:a4:f1:b0:
3d:fe:0d:41:02:a8:55:e2:4a:90:c8:4c:12:2b:c9:
c3:c0:87:c5:3e:51:a2:67:95:04:87:23:31:1e:7d:
7a:90:b6:a2:a3:9f:43:c6:b4:3b:a0:ab:7e:9f:92:
c4:cb:7b:26:ea:11:34:c3:a7:dd:bd:58:7e:c6:7a:
1c:0b:d3:b1:ee:8b:b6:67:39:ed:b5:32:a8:ec:09:
77:dd:0a:d9:31:46:55:1c:71:51:73:e8:8a:82:ac:
e4:22:bf:dd:41:4c:ff:a7:67:de:94:59:7a:83:9b:
82:91:c5:90:b6:60:48:01:9e:c2:17:76:df:2f:7b:
f4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:89:9A:E2:68:27:51:6C:6B:B7:B9:B4:D6:F7:20:5C:ED:9D:BE:CC
X509v3 Authority Key Identifier:
keyid:2B:70:CD:05:07:DE:B5:7B:92:FF:79:65:31:C9:32:DE:F8:30:09:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/2B70CD0507DEB57B92FF796531C932DEF83009A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B70CD0507DEB57B92FF796531C932DEF83009A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AeHgiJK2q7DqBZBYcbZbP8P98acuYeL153tZkhqm1dJd/0/323830343a366132383a3a2f33322d3438203d3e20323730333136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a28::/32
Signature Algorithm: sha256WithRSAEncryption
ac:95:67:14:9f:c2:f3:ea:e9:a6:d4:2a:ad:1d:9b:52:8a:4d:
aa:9d:d6:5e:2b:d1:9e:c7:72:2b:9c:79:6a:66:e5:55:26:fc:
b8:02:d2:5e:f6:b3:84:c0:62:b5:38:88:9c:a0:ca:0b:1d:07:
88:12:78:36:d5:d8:68:2e:48:9e:32:af:b0:cf:05:8c:8e:6f:
0d:54:b9:cd:37:29:ef:dc:c0:62:3d:be:ce:21:01:25:45:d2:
24:01:95:92:3d:f3:4c:bd:0d:59:fe:30:06:cb:21:0a:45:09:
32:a0:34:44:83:b1:73:0e:1a:2d:b7:6b:16:40:61:f2:08:98:
74:ac:47:68:0d:2e:cd:2a:23:0d:43:1e:e0:df:33:d5:e0:7f:
41:4e:cc:a7:43:17:39:9b:15:3b:8a:08:cf:d6:c8:55:29:61:
8a:8c:4b:81:35:26:20:a4:c2:81:ff:8a:4d:e9:f4:45:ca:ea:
c6:84:06:9a:b5:1e:7c:1b:80:c7:c0:e8:85:fe:89:81:37:cb:
79:96:1c:2e:c8:49:44:65:c0:47:bf:19:cf:0b:3e:6d:45:9a:
ab:0a:23:c3:8b:e5:c4:7f:50:fd:0e:63:c9:2f:68:1d:2f:5f:
3a:61:20:49:b5:f7:4b:0d:5d:cf:36:53:ae:bd:06:f2:76:ce:
ec:54:04:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:46:21 2025 by rpki-client