Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
File: 323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa (raw, json)
Hash identifier: 6/OSs+SN3aSkwjmEi3fDeG5jsej6QDhkpT3xH4PfHrE=
Subject key identifier: 83:B9:B6:DE:43:FE:E2:F8:C8:7D:E7:2B:B9:A9:C1:B6:45:31:3D:F2
Certificate issuer: /CN=D8C211ABAD958D5A26D33AF78B82405676017796
Certificate serial: 4A4AC5C62293E9FD7F4A2287BE2FF8BEBA65A26B
Authority key identifier: D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
Signing time: Mon 23 Dec 2024 03:55:56 +0000
ROA not before: Mon 23 Dec 2024 03:50:56 +0000
ROA not after: Mon 22 Dec 2025 03:55:56 +0000
asID: 270966
IP address blocks: 2804:5984:b400::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:4a:c5:c6:22:93:e9:fd:7f:4a:22:87:be:2f:f8:be:ba:65:a2:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8C211ABAD958D5A26D33AF78B82405676017796
Validity
Not Before: Dec 23 03:50:56 2024 GMT
Not After : Dec 22 03:55:56 2025 GMT
Subject: CN=83B9B6DE43FEE2F8C87DE72BB9A9C1B645313DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b5:89:fb:0d:7b:31:48:7d:82:7a:c5:67:74:
55:87:6c:7f:ce:09:d4:a7:cd:d4:c1:68:d0:3b:3a:
05:63:5b:7c:52:2b:cb:67:48:bd:37:8e:a2:ab:b1:
ea:f4:2c:f0:b3:4b:d8:83:a6:f9:7b:5b:be:40:7f:
76:0c:39:d0:f9:92:33:28:e2:4b:db:30:65:6d:2d:
17:9b:23:d8:8b:33:a7:cb:47:bf:a0:53:97:cd:17:
64:1a:2c:bf:36:1a:c0:bb:79:1e:99:3c:fd:84:42:
9d:b6:7f:71:50:a9:eb:61:bb:02:81:0a:63:c5:5f:
e4:44:67:60:ad:07:28:43:c5:14:22:59:98:6e:5d:
b5:ac:ca:b0:1e:99:b5:41:ee:13:20:1b:19:6e:a0:
34:5c:48:9d:65:31:52:3e:21:bc:9c:cd:6d:fa:13:
1a:c4:0c:24:b8:1c:2e:de:37:dc:e1:a8:e9:c6:88:
60:be:61:48:09:04:17:7a:71:37:77:59:87:1f:b0:
32:1b:69:75:12:84:57:8d:de:33:b1:6b:c2:da:b3:
d3:51:e9:8f:48:c5:ef:14:6a:89:e5:e2:51:b1:15:
e1:bb:06:74:4f:c8:34:4f:5f:eb:b2:ea:b5:19:f0:
81:e7:7b:75:82:6a:50:0f:3b:4b:c7:76:c4:30:f2:
e3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B9:B6:DE:43:FE:E2:F8:C8:7D:E7:2B:B9:A9:C1:B6:45:31:3D:F2
X509v3 Authority Key Identifier:
keyid:D8:C2:11:AB:AD:95:8D:5A:26:D3:3A:F7:8B:82:40:56:76:01:77:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/D8C211ABAD958D5A26D33AF78B82405676017796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8C211ABAD958D5A26D33AF78B82405676017796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqEDqu5RNh8FtMjeyGnkWhPCVgLS2uqf4ymRhUK7r9EV/0/323830343a353938343a623430303a3a2f34302d3430203d3e20323730393636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5984:b400::/40
Signature Algorithm: sha256WithRSAEncryption
4a:c6:0e:25:e5:3a:91:7f:0d:05:f1:75:26:2b:4b:53:23:47:
e1:c3:fb:6e:2f:0d:16:31:d0:63:56:97:66:e1:98:1f:3a:79:
9d:2c:41:77:15:8b:9e:a7:f4:90:6a:c4:f6:1b:2a:c5:ce:dd:
51:61:b8:cc:45:57:c8:dd:37:f7:f2:05:b4:1f:d5:d9:88:4e:
66:dc:00:f2:1e:18:52:cc:34:03:90:c2:8e:54:44:f6:74:06:
bf:a7:58:d9:18:90:cb:25:c8:e1:3a:1a:92:80:e8:c4:3c:28:
fd:b4:e4:3a:6e:37:d7:01:02:db:88:55:ec:a4:3b:3a:57:28:
8c:03:33:51:14:14:d2:87:21:15:26:a5:15:61:9f:05:e3:d0:
8d:7a:48:60:db:bb:ca:25:b6:8d:95:b2:bd:c5:47:ca:d6:33:
b4:7e:50:73:29:b2:88:ed:c7:51:b1:34:d0:ff:9f:f5:1e:83:
3e:13:38:4c:15:cd:39:56:c7:fb:26:b8:ca:ad:f7:50:2a:70:
0c:40:db:11:51:e2:8a:79:7b:79:e4:68:a5:ea:d7:87:4f:cb:
66:b0:27:be:be:cf:5c:12:41:2c:ff:45:32:93:32:df:bb:eb:
5c:fd:43:18:e5:6e:68:10:00:3c:4c:14:7e:64:f3:e0:d4:fd:
b8:78:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:29:28 2025 by rpki-client