Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
File: 323830343a336462383a3a2f33322d3430203d3e20323636353439.roa (raw, json)
Hash identifier: Origk2iLqY813q3KEv04LFXzMTEl81AvoAm0d6EK2Cw=
Subject key identifier: A8:67:5D:12:8B:92:B9:84:CD:CE:DE:EF:D4:AE:16:18:5B:A0:F3:22
Certificate issuer: /CN=61574561822D905288C1F5E879EE79AE9F1D5FB0
Certificate serial: 7767AD9571858E5DDE07F372C40A570C67588E4F
Authority key identifier: 61:57:45:61:82:2D:90:52:88:C1:F5:E8:79:EE:79:AE:9F:1D:5F:B0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61574561822D905288C1F5E879EE79AE9F1D5FB0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
Signing time: Wed 18 Dec 2024 14:30:52 +0000
ROA not before: Wed 18 Dec 2024 14:25:52 +0000
ROA not after: Wed 17 Dec 2025 14:30:52 +0000
asID: 266549
IP address blocks: 2804:3db8::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:67:ad:95:71:85:8e:5d:de:07:f3:72:c4:0a:57:0c:67:58:8e:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61574561822D905288C1F5E879EE79AE9F1D5FB0
Validity
Not Before: Dec 18 14:25:52 2024 GMT
Not After : Dec 17 14:30:52 2025 GMT
Subject: CN=A8675D128B92B984CDCEDEEFD4AE16185BA0F322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:f8:ea:ff:81:b7:72:07:24:e9:06:7d:1d:
18:c8:dc:8b:2e:d7:7a:50:5e:f8:93:ff:9c:5b:83:
11:29:5a:64:b3:f4:18:17:a6:fb:49:8e:63:0a:88:
df:80:56:7d:dc:4c:48:d7:a1:95:0d:c6:e1:47:b2:
8e:66:9a:a1:54:be:c8:89:b5:97:31:c9:6d:60:96:
30:f1:74:b9:cf:8d:05:f9:9e:97:a7:0c:60:d6:d9:
8e:09:55:a3:d3:d5:2f:9d:e0:fc:90:43:18:ff:19:
e1:9e:33:5f:97:0e:b9:26:49:6d:28:e5:7a:a5:5a:
fc:4f:9e:b8:56:27:f4:d8:ef:92:62:9c:e9:c7:a6:
76:8c:90:c4:a7:b7:72:05:64:f5:b2:8a:42:1e:ad:
43:cb:b8:fb:4a:49:b2:7d:ba:e4:1f:87:7d:ab:1e:
4d:32:8c:46:44:d2:f0:7f:4a:8b:62:d6:c5:ee:ed:
82:aa:40:c8:1e:ce:47:af:5e:da:57:9a:91:6b:ff:
6b:81:f2:7b:b1:ba:fa:52:8e:19:93:93:79:38:f3:
7f:75:1f:82:22:fd:00:ed:4d:bf:f9:92:46:74:08:
21:ef:05:4c:ac:1b:c4:c6:da:eb:bf:83:ae:0c:0f:
a2:42:19:36:7e:e5:f0:01:65:56:d1:be:8b:4d:9b:
48:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:67:5D:12:8B:92:B9:84:CD:CE:DE:EF:D4:AE:16:18:5B:A0:F3:22
X509v3 Authority Key Identifier:
keyid:61:57:45:61:82:2D:90:52:88:C1:F5:E8:79:EE:79:AE:9F:1D:5F:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/61574561822D905288C1F5E879EE79AE9F1D5FB0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/61574561822D905288C1F5E879EE79AE9F1D5FB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AomhoQZuneBCqJtVMNwV6mCXBbcz5d7YdA5PbnbovJFC/0/323830343a336462383a3a2f33322d3430203d3e20323636353439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3db8::/32
Signature Algorithm: sha256WithRSAEncryption
7b:fa:38:c3:10:fa:e3:3d:7f:57:32:0d:f7:4d:76:03:d0:8d:
a4:49:09:8d:e5:0d:10:91:19:af:17:68:3c:34:80:2e:12:cb:
a9:b6:33:ce:15:ff:c4:10:25:72:8f:8c:8f:1a:f1:a7:fb:a2:
c4:de:b7:23:bf:f4:ae:90:bb:3f:3b:e4:3d:5b:cf:77:9b:02:
4a:b2:25:b8:15:77:02:54:5a:06:ce:e6:7b:51:62:10:24:ac:
91:d4:f3:ec:75:ef:df:24:58:5a:73:75:63:9e:16:91:08:e6:
6d:ce:17:c1:f8:fd:5b:c6:18:aa:e0:a9:ff:d9:b0:ad:5d:4e:
52:23:50:d6:c0:06:45:da:ad:08:2a:29:54:53:ae:5f:46:81:
43:71:ff:4b:53:1d:2d:ee:64:c8:2a:07:0a:f8:80:3e:aa:49:
5d:3a:4b:74:c7:0c:b9:55:c1:8b:6e:28:81:77:22:be:e7:80:
52:c9:14:c4:7c:3e:8b:9f:45:91:3c:81:b3:8b:fb:78:b4:fd:
21:8e:c7:9d:8a:cf:a0:4f:f3:0e:f7:47:2e:a7:43:fb:a4:d0:
b9:36:cd:cf:6e:1d:c2:c8:09:6b:fe:77:0f:bb:27:1c:27:63:
ff:3f:ae:53:a7:5a:16:79:c3:d6:2e:f2:4b:e2:66:db:4d:1b:
76:99:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:47:18 2025 by rpki-client