Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3438203d3e20323734373131.roa
File: 323830343a393237303a3a2f33322d3438203d3e20323734373131.roa (raw, json)
Hash identifier: NgaC6Fm3fgmyNBnE1wRv3Eju/rnlchhKbq/BoZnHR9Q=
Subject key identifier: 66:53:CA:7D:B0:4A:E3:2B:95:B3:CD:AC:C3:F5:2F:79:32:C9:8C:79
Certificate issuer: /CN=3016DDAB8089F34765FB0A27DE20FCF992A221B7
Certificate serial: 77A796F879622963A6C1EC13646C1B18621DF954
Authority key identifier: 30:16:DD:AB:80:89:F3:47:65:FB:0A:27:DE:20:FC:F9:92:A2:21:B7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3016DDAB8089F34765FB0A27DE20FCF992A221B7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3438203d3e20323734373131.roa
Signing time: Mon 20 Jan 2025 16:55:02 +0000
ROA not before: Mon 20 Jan 2025 16:50:02 +0000
ROA not after: Mon 19 Jan 2026 16:55:02 +0000
asID: 274711
IP address blocks: 2804:9270::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:a7:96:f8:79:62:29:63:a6:c1:ec:13:64:6c:1b:18:62:1d:f9:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3016DDAB8089F34765FB0A27DE20FCF992A221B7
Validity
Not Before: Jan 20 16:50:02 2025 GMT
Not After : Jan 19 16:55:02 2026 GMT
Subject: CN=6653CA7DB04AE32B95B3CDACC3F52F7932C98C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:75:55:87:49:e6:c2:83:a2:69:06:54:5c:
fa:a3:b8:0b:16:6b:bd:2f:2f:80:37:c2:30:6c:d9:
2d:ef:9f:2d:00:7b:8b:dc:ca:f6:e2:62:e9:53:a1:
9c:ed:11:bf:bb:57:f6:31:d4:9c:53:5c:04:72:ad:
e9:8a:a7:46:fa:ad:ad:7a:de:bd:f5:1b:0e:79:17:
dc:ee:fe:70:06:10:0d:06:a8:cc:59:12:a5:15:e0:
d7:8b:57:bf:9a:ba:f1:c5:f8:f9:0e:e8:6e:39:c5:
ea:01:59:25:38:16:04:de:20:58:e3:25:66:58:b5:
bf:2b:5c:1e:ee:35:f0:c1:ba:60:fb:5f:c6:85:ce:
f3:d0:30:da:f3:5c:cf:03:4e:5e:19:2c:19:06:17:
18:65:3f:bb:7e:a6:09:f5:c2:3e:99:38:05:20:b8:
2b:fd:c7:4d:9b:d9:e1:bd:33:44:e0:8b:2f:74:c7:
3e:94:57:dd:91:df:76:d1:51:55:da:49:c6:04:08:
b5:18:c5:a4:28:c9:e0:11:6c:e3:bd:11:f7:80:d1:
1e:e8:38:d7:6f:a4:d9:d4:f0:89:7b:64:d2:58:6a:
68:fd:42:f4:4f:95:b1:fd:ee:8d:47:36:de:62:40:
f5:19:51:f8:59:4f:a1:6e:65:2b:1e:6c:84:dd:ca:
71:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:53:CA:7D:B0:4A:E3:2B:95:B3:CD:AC:C3:F5:2F:79:32:C9:8C:79
X509v3 Authority Key Identifier:
keyid:30:16:DD:AB:80:89:F3:47:65:FB:0A:27:DE:20:FC:F9:92:A2:21:B7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/3016DDAB8089F34765FB0A27DE20FCF992A221B7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3016DDAB8089F34765FB0A27DE20FCF992A221B7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Atn78x485oJgsCPBMjcoQvTx6i7kp2eswPP9nr6sgNFn/0/323830343a393237303a3a2f33322d3438203d3e20323734373131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9270::/32
Signature Algorithm: sha256WithRSAEncryption
04:af:b7:4b:85:66:3e:fd:4e:74:f9:a4:5a:91:c0:ea:2f:99:
c2:8e:4a:50:36:ae:2b:f3:56:e7:ba:9b:57:d2:88:ab:32:04:
ac:d7:ac:95:2d:8d:f1:1e:f2:7b:98:97:2f:ad:3f:7e:f8:9b:
0a:eb:5f:ee:d1:01:33:64:49:68:0e:02:e8:9e:a8:13:dd:e0:
e2:39:4f:2e:14:67:6e:f3:49:a9:19:9b:f2:83:a0:1a:77:ad:
37:fc:4d:1d:7f:66:b9:cf:57:00:13:1e:7f:36:4c:2e:a7:83:
f6:15:c8:18:21:86:2b:24:82:ce:75:b5:41:e8:cc:24:cc:45:
ce:c3:00:36:3d:f8:b1:a4:51:a9:11:ca:2b:a8:2f:28:3d:bd:
3f:61:b5:63:fe:5c:78:a3:1d:40:91:3e:13:0d:87:cc:69:c7:
dd:11:39:63:fd:4d:75:19:e8:fa:48:d6:e1:18:8f:ea:46:ef:
9e:cb:53:da:19:87:79:08:2f:b5:01:33:d8:8c:4d:7a:ee:bc:
1a:8f:2a:a0:e2:b5:b9:42:b9:1f:ad:ba:26:05:3b:97:d8:ed:
dc:74:9d:0f:b3:05:2f:84:39:92:34:80:17:ad:b8:d1:ca:7b:
87:08:4e:22:c6:4d:4c:46:3a:30:36:f9:d2:3c:d3:69:6b:5b:
ff:d7:50:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:34:21 2025 by rpki-client