Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
File: 323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier: EMcZ84bnTm1RveHed3dCUgSDQ6WBA8xJwXqQMGt/dGY=
Subject key identifier: E6:36:F0:6C:EB:C9:FF:9E:A5:79:69:E1:61:C1:E7:CC:D3:53:0B:C7
Certificate issuer: /CN=D8C211ABAD958D5A26D33AF78B82405676017796
Certificate serial: 1282014825D4376305BEF55C75AB1B4A4341778C
Authority key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
Signing time: Mon 23 Dec 2024 03:55:42 +0000
ROA not before: Mon 23 Dec 2024 03:50:42 +0000
ROA not after: Mon 22 Dec 2025 03:55:42 +0000
asID: 268707
IP address blocks: 2804:5984:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:82:01:48:25:d4:37:63:05:be:f5:5c:75:ab:1b:4a:43:41:77:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Validity
Not Before: Dec 23 03:50:42 2024 GMT
Not After : Dec 22 03:55:42 2025 GMT
Subject: CN=E636F06CEBC9FF9EA57969E161C1E7CCD3530BC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:3e:90:7c:ba:e2:b6:83:f5:92:35:ee:ce:11:
db:09:eb:e9:c9:e6:0b:ee:fe:7c:58:26:e0:5c:49:
c5:b9:4f:1e:fb:4b:f6:da:06:86:f2:a1:d7:06:2a:
16:4c:77:23:da:be:e5:7b:00:30:6b:45:95:2f:1c:
c2:cd:70:eb:82:18:ee:2e:64:59:c1:1e:ed:35:df:
f9:98:60:cc:de:b7:58:81:c5:cd:2c:08:0a:8f:45:
ce:91:b2:50:a3:36:b7:73:0e:75:a1:af:0b:93:eb:
51:4e:b9:7b:bc:dd:ee:1c:ab:1d:db:23:be:cd:22:
1f:e0:2e:68:da:b6:39:cb:a6:1f:41:b5:0e:ed:5a:
9d:78:dc:71:2c:39:ac:c5:c6:b9:3e:38:89:8c:48:
ed:bb:07:d3:57:e5:06:f6:98:c9:c7:8a:53:22:dd:
97:7e:3e:73:71:13:fe:35:ea:79:ba:3b:b8:41:c7:
60:32:fc:5e:01:46:33:9d:97:8a:69:80:d4:7d:e6:
15:98:9d:74:86:99:54:89:91:fa:a2:3d:a7:e0:c6:
74:00:2b:8a:a8:d1:92:50:48:4b:ca:38:22:ff:54:
f7:b6:67:33:49:3f:8d:82:c5:a0:4f:c7:8b:77:78:
5a:29:ba:e2:ce:56:c0:56:8d:95:7c:a8:1a:4e:da:
7b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:F0:6C:EB:C9:FF:9E:A5:79:69:E1:61:C1:E7:CC:D3:53:0B:C7
X509v3 Authority Key Identifier:
keyid:D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a383030303a3a2f33332d3333203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9c:3a:e2:43:bd:1d:2f:db:a1:de:73:de:6a:fe:80:8d:63:04:
84:76:86:04:78:e1:c3:97:7a:bf:5a:07:da:75:ae:04:34:f5:
69:04:1f:24:0a:df:31:6a:4a:a3:83:46:62:f1:ca:c3:59:96:
0d:2f:a0:2e:33:e7:46:fe:27:b8:53:24:31:ea:79:5a:fe:03:
83:a3:b4:60:47:59:12:85:61:b3:45:0d:6a:83:9b:44:2d:d1:
44:73:7c:42:b3:b1:bf:73:56:79:25:b6:18:a9:db:52:1f:8e:
93:c2:61:df:d6:83:64:90:c8:b4:aa:f4:a9:83:29:45:92:9a:
34:9d:da:cf:4b:0d:85:89:41:c2:2c:ed:95:83:03:f6:56:d4:
44:5a:88:a0:13:92:87:40:c1:a5:7b:3d:24:3a:d8:58:49:6b:
78:de:bc:47:25:59:b2:65:13:4e:ec:f9:fe:10:fb:79:f3:48:
4a:4a:8f:54:44:96:31:47:5a:64:1a:cc:91:32:0a:46:1d:77:
ae:a1:7e:91:67:3a:61:2b:c8:f9:01:df:14:15:3d:9b:9b:c6:
ff:6b:9e:84:9a:03:f4:cb:4e:52:0a:90:ae:fd:2e:49:77:bd:
29:c0:b9:87:11:ef:4c:cb:d3:f7:53:bd:30:ef:18:0c:bb:1f:
ce:2a:1a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:32:15 2025 by rpki-client