Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3438203d3e20323638373037.roa
File: 323830343a353938343a3a2f33332d3438203d3e20323638373037.roa (raw, json)
Hash identifier: yQe9tejGabIRrG/Y8VIItmfwYNugpb1YP12VyuCjqrA=
Subject key identifier: 92:DD:B3:C7:A6:3B:77:BF:21:F0:D5:1E:94:35:15:19:82:62:F0:A5
Certificate issuer: /CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Certificate serial: 02730DC98094E0CF495F1F748632D185559DB791
Authority key identifier: 3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3438203d3e20323638373037.roa
Signing time: Sun 19 Jan 2025 00:40:38 +0000
ROA not before: Sun 19 Jan 2025 00:35:38 +0000
ROA not after: Sun 18 Jan 2026 00:40:38 +0000
asID: 268707
IP address blocks: 2804:5984::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:73:0d:c9:80:94:e0:cf:49:5f:1f:74:86:32:d1:85:55:9d:b7:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1
Validity
Not Before: Jan 19 00:35:38 2025 GMT
Not After : Jan 18 00:40:38 2026 GMT
Subject: CN=92DDB3C7A63B77BF21F0D51E943515198262F0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:ed:10:5c:90:10:3c:d3:57:1c:cc:d7:6c:
6a:4a:69:dd:19:e8:04:50:f2:70:40:93:8e:8c:d8:
01:21:9d:b4:42:5a:79:e9:10:e4:14:2f:e9:d2:c1:
6e:4e:2d:17:f6:f4:65:e4:78:2e:e6:1c:57:3d:59:
6b:cf:3d:d0:f7:6e:06:6d:0c:d5:2b:f6:ed:1e:19:
bd:09:a8:c6:33:12:d9:7c:c7:fa:30:bd:e2:1c:17:
5a:46:d2:d2:92:78:d9:66:96:84:f6:5d:f0:c6:28:
32:b6:41:2c:fe:8b:c0:cb:4a:d3:50:7a:ea:3f:d6:
31:50:89:00:98:12:c6:f9:83:29:41:db:b3:38:55:
fa:8b:79:b0:6b:aa:fc:12:75:18:ac:72:2c:dd:48:
45:ae:4f:89:43:92:26:6d:25:bb:0e:cd:31:ee:3e:
b0:30:12:19:76:88:c1:8d:72:6f:18:7b:df:74:2a:
e0:03:ca:59:4e:5e:ca:ed:af:0e:03:6b:88:10:57:
d1:14:e7:f5:bb:7b:3f:e5:7a:62:0f:77:af:88:a1:
d0:12:c7:6d:a2:3a:61:77:df:55:7d:fa:d7:8d:06:
1e:01:49:a1:b1:b3:9d:54:82:b1:8d:e3:26:46:ad:
8c:3d:85:66:37:31:f5:4b:d1:80:57:2f:a0:93:4c:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:DD:B3:C7:A6:3B:77:BF:21:F0:D5:1E:94:35:15:19:82:62:F0:A5
X509v3 Authority Key Identifier:
keyid:3A:05:53:EF:24:FC:84:C7:40:FC:8D:E9:25:78:01:A2:C7:A0:AD:A1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3A0553EF24FC84C740FC8DE9257801A2C7A0ADA1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a3a2f33332d3438203d3e20323638373037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984::/33
Signature Algorithm: sha256WithRSAEncryption
d6:81:aa:f6:05:87:98:57:07:c0:31:6e:33:36:30:3d:4a:e7:
e2:e3:46:48:65:da:17:9f:24:31:49:95:7e:fd:09:ed:6d:7c:
a3:42:aa:b2:b6:ed:bb:01:41:0f:04:19:28:f7:fc:a1:ee:32:
2b:97:8e:9b:50:5c:b7:36:40:59:43:03:22:06:4c:c3:c0:be:
47:13:65:d6:67:43:c2:82:f8:ce:1c:bc:bb:48:98:1f:70:1c:
e6:11:ed:1e:62:54:1d:2b:b4:c2:95:25:ec:8f:1c:54:c2:66:
a1:99:f2:c2:56:b8:56:3f:c8:53:49:e2:3a:d6:77:a2:e6:21:
be:02:fc:74:42:fa:56:2b:b2:18:3b:24:34:b2:5e:91:29:32:
42:3f:f3:52:e4:11:7d:7f:d9:dc:d4:e3:d5:2a:ec:5b:d3:8b:
8b:33:14:e2:11:1d:39:ad:50:a7:91:a3:60:97:c2:35:32:cc:
1b:9f:23:a3:c6:f6:7e:25:7c:bf:f0:a7:dc:e5:92:87:12:ac:
e4:4c:90:e6:a5:77:d7:1d:aa:06:f0:d1:c0:03:c8:ad:b8:1d:
a3:7f:b7:03:61:96:45:0f:ac:a1:41:ab:5e:a1:c7:03:b9:47:
96:5e:84:c3:7a:32:cb:15:2a:3c:15:58:7b:28:2d:0c:39:77:
54:39:8b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:20:38 2025 by rpki-client