Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
File: 323830343a3365303a3a2f33322d3438203d3e20323632343033.roa (raw, json)
Hash identifier: dFwwjSKuaQzu79BNl6NmEvZYQu5SEXqn/7ahhWbLYLo=
Subject key identifier: 92:8B:BD:5F:DB:B1:74:A0:B0:E3:E9:97:3C:B7:1A:D4:3C:63:B4:67
Certificate issuer: /CN=A878ADF075B08DD537A3F9985F041C7EABC6F9B0
Certificate serial: 30FDF67216F244A4DBC81396052351D4D9832B09
Authority key identifier: A8:78:AD:F0:75:B0:8D:D5:37:A3:F9:98:5F:04:1C:7E:AB:C6:F9:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A878ADF075B08DD537A3F9985F041C7EABC6F9B0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
Signing time: Mon 09 Dec 2024 19:35:00 +0000
ROA not before: Mon 09 Dec 2024 19:30:00 +0000
ROA not after: Mon 08 Dec 2025 19:35:00 +0000
asID: 262403
IP address blocks: 2804:3e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:fd:f6:72:16:f2:44:a4:db:c8:13:96:05:23:51:d4:d9:83:2b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A878ADF075B08DD537A3F9985F041C7EABC6F9B0
Validity
Not Before: Dec 9 19:30:00 2024 GMT
Not After : Dec 8 19:35:00 2025 GMT
Subject: CN=928BBD5FDBB174A0B0E3E9973CB71AD43C63B467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bc:f8:66:45:4e:42:df:98:f8:62:56:6c:4b:
c6:c6:d6:99:f0:14:a8:6c:83:5a:95:65:ed:da:4f:
fb:7d:a4:5d:7c:20:d5:18:9c:2f:c0:38:3d:21:c4:
2d:a8:30:0e:82:70:b3:5c:86:d8:83:83:b2:25:e5:
ba:71:2c:f4:0a:ae:04:22:da:4f:cf:6a:13:3b:2f:
12:bd:97:2f:3b:16:51:dc:51:95:24:38:a8:9e:5f:
49:67:94:71:4f:8d:f6:5f:27:fa:a4:73:71:08:e9:
7e:ee:4c:26:38:00:23:c0:a7:b2:5c:77:51:a0:d9:
29:b7:a6:64:44:73:18:9f:50:af:10:cc:a3:52:d5:
ad:22:7e:70:ea:a1:22:12:d3:00:e8:ac:8e:2a:ee:
4a:df:22:5c:97:a1:8a:6d:08:52:d4:1c:13:c0:75:
04:9f:f2:81:c3:f4:82:a8:18:96:90:b5:48:b7:0b:
fb:b0:3b:3e:88:38:38:ff:6c:06:ca:a3:21:eb:fe:
aa:bd:69:d6:f8:6c:22:ee:03:18:5e:6d:d5:2c:ea:
aa:b0:c7:88:bb:ac:8a:b1:74:23:cc:a0:e9:bb:5d:
a4:d0:c9:05:15:ee:21:45:39:cc:a8:48:dc:84:0c:
db:74:9b:a2:cd:ee:f5:04:56:95:9d:18:a5:98:91:
0e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:8B:BD:5F:DB:B1:74:A0:B0:E3:E9:97:3C:B7:1A:D4:3C:63:B4:67
X509v3 Authority Key Identifier:
keyid:A8:78:AD:F0:75:B0:8D:D5:37:A3:F9:98:5F:04:1C:7E:AB:C6:F9:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/A878ADF075B08DD537A3F9985F041C7EABC6F9B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A878ADF075B08DD537A3F9985F041C7EABC6F9B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfikK6KEzS7VnWPAJnUpjoDrrbWf4k9gJNR9T1TnwnJy/0/323830343a3365303a3a2f33322d3438203d3e20323632343033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3e0::/32
Signature Algorithm: sha256WithRSAEncryption
80:18:b1:c5:84:68:0e:c5:3d:dc:af:53:18:c2:09:e5:d0:a6:
b2:84:0c:90:78:d1:3e:23:6f:9c:44:ed:73:3e:80:83:df:79:
f5:00:e4:9a:8f:de:b4:13:b9:9f:40:1f:cb:3f:47:3b:7f:94:
e5:3a:f6:09:62:17:59:f5:28:bf:e0:b8:ee:4c:55:61:02:fd:
c7:15:3d:d0:ad:ad:6e:bf:8d:8e:fe:20:0c:0e:8f:1b:3f:ab:
09:f5:57:59:cb:24:4f:3f:d7:8d:10:a7:92:9d:91:82:4f:5b:
58:7a:47:02:b5:8e:cf:74:7f:59:78:11:89:3e:6c:97:c5:52:
da:8e:9c:f9:f6:36:d7:20:fe:cd:89:55:b3:f4:bd:5a:72:2a:
ee:ff:91:73:cc:18:d2:9e:80:51:d3:3e:aa:c9:a8:0d:f4:d9:
d4:28:84:6f:75:e6:8e:e0:e6:8e:f0:40:a9:96:cb:f3:e7:8f:
3a:ae:8b:5e:12:38:cd:03:78:86:e4:4e:12:f1:b9:11:71:d4:
ed:a6:85:95:ce:ad:0a:87:aa:45:b7:2d:90:33:8a:60:2a:03:
bf:03:83:37:b1:d7:ab:c8:4f:e1:1b:74:c9:ce:eb:c4:84:09:
77:a1:25:38:01:2e:84:87:f1:88:b7:ec:0e:35:4a:31:60:09:
08:55:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:17:33 2025 by rpki-client