Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
File: 323830343a353938343a3a2f33332d3333203d3e20323638373037.roa (raw, json)
Hash identifier: 8zj9a1zzLLRHci53m7xkDQDByn7s0m1SZaMjfBOanRc=
Subject key identifier: 13:EA:73:F8:40:25:35:08:64:20:72:7D:3C:06:4C:EC:D6:AF:54:1E
Certificate issuer: /CN=D8C211ABAD958D5A26D33AF78B82405676017796
Certificate serial: 35782FDA1D282680A72646A9C7F980315198C47D
Authority key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
Signing time: Mon 23 Dec 2024 03:55:38 +0000
ROA not before: Mon 23 Dec 2024 03:50:38 +0000
ROA not after: Mon 22 Dec 2025 03:55:38 +0000
asID: 268707
IP address blocks: 2804:5984::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:78:2f:da:1d:28:26:80:a7:26:46:a9:c7:f9:80:31:51:98:c4:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Validity
Not Before: Dec 23 03:50:38 2024 GMT
Not After : Dec 22 03:55:38 2025 GMT
Subject: CN=13EA73F8402535086420727D3C064CECD6AF541E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f8:41:47:55:9d:5f:1c:94:64:fc:57:b1:9b:
e1:66:e5:00:29:11:a4:09:a3:ed:44:e1:9b:bf:31:
19:89:34:11:c0:63:65:a3:f2:6f:e5:97:7a:3d:fe:
73:ce:7f:f5:e3:79:0b:f7:9d:42:b9:1a:59:2c:91:
67:c1:0e:90:9d:eb:35:da:cc:e1:4d:83:03:d7:8a:
41:67:fc:9b:82:c5:0a:f2:ce:86:80:47:fa:c9:62:
f6:c0:f8:d5:5f:77:56:af:6c:e8:37:2e:6e:ac:cc:
40:0e:5d:a5:ed:e1:36:69:f5:68:db:e4:70:a4:52:
04:ee:61:51:99:bd:a2:f5:61:8b:ad:7e:d7:b5:67:
05:98:28:ba:cd:d3:bb:42:85:fc:1a:c1:c8:5e:09:
d9:9e:70:a4:f1:da:50:f0:c8:8b:71:31:0f:42:ee:
25:5d:ff:34:19:a3:60:b8:76:44:62:4b:a0:b4:77:
84:f7:1e:5b:ac:12:42:d9:e5:67:68:34:0f:64:1f:
b7:6e:b5:f8:3c:96:25:25:7f:c2:8d:7d:78:c1:04:
0c:dd:9d:e2:a1:2d:30:fd:70:32:b5:20:86:64:d2:
77:e3:c0:66:d0:de:4c:88:d2:b3:a2:0e:c1:fa:e2:
63:1b:ae:62:6f:40:c2:7d:84:ec:c4:13:75:41:4d:
23:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EA:73:F8:40:25:35:08:64:20:72:7D:3C:06:4C:EC:D6:AF:54:1E
X509v3 Authority Key Identifier:
keyid:D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3333203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984::/33
Signature Algorithm: sha256WithRSAEncryption
4d:3b:c6:18:9b:41:64:90:e4:35:3b:18:d3:78:9d:c0:7c:9f:
38:0b:36:75:4d:77:84:d4:5a:1e:35:e9:4b:b4:9a:eb:8a:c5:
1b:08:59:2d:ab:f1:6f:0d:88:3d:b6:33:05:a2:a7:cd:3b:61:
9d:b1:91:c6:32:1c:4c:1c:43:41:95:d1:c0:68:9d:0c:39:03:
1b:1e:02:05:b2:e3:fb:dc:ee:29:45:cb:5a:a1:36:cf:4f:5d:
7e:a0:98:be:ca:73:bd:15:47:ab:d8:d5:93:f3:f3:cc:3a:7a:
d7:18:e5:2d:6b:c6:cd:ef:55:bc:68:8b:68:20:c6:f3:27:bd:
b1:5c:01:7e:72:02:6f:ec:65:9e:c3:cc:b0:dc:aa:de:28:cb:
dd:97:b6:79:7c:35:fc:2c:f3:89:fa:5b:e0:61:65:40:a4:be:
32:3a:f0:d7:ff:ea:b9:e9:fe:2e:22:cf:5e:c5:88:cd:79:03:
9b:00:15:95:03:fc:8b:1f:d9:58:ed:68:b9:a1:09:76:e6:50:
9f:2f:eb:b5:22:4d:57:29:a8:b3:ab:7b:ab:dc:e8:b7:18:ed:
57:83:bc:ce:76:a0:fc:97:6a:32:06:c1:23:8a:0f:02:77:e9:
7d:d5:8d:38:4f:de:27:2f:d7:67:26:bb:e4:90:f4:17:e4:19:
eb:31:ed:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:23:14 2025 by rpki-client