Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
File: 323830343a333836633a3a2f33322d3336203d3e20323636343736.roa (raw, json)
Hash identifier: 2GvlRynMXEvu3A0kCDLQB+Gp55iYyLUR7ENalGcUhBc=
Subject key identifier: 6B:55:39:CE:B4:92:90:53:7D:7B:70:2B:6E:12:13:37:CD:0C:BE:BA
Certificate issuer: /CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Certificate serial: 37E20A55478F4C2B7D8C064567DCEEB7AB285D4E
Authority key identifier: C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
Signing time: Wed 05 Feb 2025 12:05:22 +0000
ROA not before: Wed 05 Feb 2025 12:00:22 +0000
ROA not after: Wed 04 Feb 2026 12:05:22 +0000
asID: 266476
IP address blocks: 2804:386c::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:e2:0a:55:47:8f:4c:2b:7d:8c:06:45:67:dc:ee:b7:ab:28:5d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F
Validity
Not Before: Feb 5 12:00:22 2025 GMT
Not After : Feb 4 12:05:22 2026 GMT
Subject: CN=6B5539CEB49290537D7B702B6E121337CD0CBEBA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a8:a9:c9:6e:ce:02:ab:22:92:63:ee:34:17:
91:c2:95:04:ab:e9:db:63:5b:4b:b1:2c:d6:79:c0:
c1:47:dd:5e:1e:6b:b7:16:1e:df:43:8d:2c:73:81:
3a:f2:a5:cf:02:6d:45:fa:b6:4b:75:94:30:1d:da:
2e:24:a0:cf:1d:ad:92:2d:b6:65:57:30:ef:e9:33:
75:87:01:20:42:78:a1:75:ff:0d:91:6e:aa:b2:fe:
48:3b:94:7e:8a:dd:38:c3:90:04:63:4a:d7:cd:7d:
f8:e9:d9:03:1c:85:f3:09:fe:cd:d7:94:f8:75:57:
71:8b:d9:24:f4:db:41:6f:3d:c8:46:3f:fc:32:0c:
a6:54:79:4d:e5:6f:23:c4:9d:ee:07:bc:2e:33:fd:
43:b9:8b:64:e8:74:5c:ce:1b:61:67:45:e7:4e:9f:
12:56:30:c2:69:4c:6b:5f:52:0b:3b:12:1d:c1:7a:
94:86:b8:f6:b0:ca:ac:9a:df:71:59:6d:11:1a:db:
7a:0d:7e:56:e9:d4:5b:d9:d6:a9:38:d3:a7:16:e6:
e1:69:f0:50:8e:c7:d7:1e:ad:87:a9:da:f7:34:83:
86:83:5e:cb:9b:06:0f:d7:66:4f:b2:9a:8a:90:52:
e2:9b:86:3d:50:fd:d8:35:e9:49:38:7a:51:d5:ab:
64:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:55:39:CE:B4:92:90:53:7D:7B:70:2B:6E:12:13:37:CD:0C:BE:BA
X509v3 Authority Key Identifier:
keyid:C3:29:B9:ED:4E:5F:36:AA:39:0B:AE:0F:D9:C5:41:28:D4:90:DC:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C329B9ED4E5F36AA390BAE0FD9C54128D490DC4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9QJy4rD7YsPrsRQQNCY8saAa2hqNQyygqRB3zFpdXrp/0/323830343a333836633a3a2f33322d3336203d3e20323636343736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:386c::/32
Signature Algorithm: sha256WithRSAEncryption
b3:52:e0:52:bb:1d:20:b4:5c:bc:51:08:94:2d:3f:11:ac:1c:
7d:77:ee:dc:7c:4a:25:1d:41:6f:f5:f0:ce:23:4b:b8:c4:a5:
e1:e3:39:97:75:2b:ea:22:9a:81:03:6f:e5:c8:ba:1d:30:ed:
f6:34:ed:e8:c6:bb:4f:95:e3:b3:65:d5:d6:ed:3b:b4:2e:30:
cd:ca:50:19:72:03:68:3c:d2:65:fd:04:d2:9c:8d:5d:21:8e:
20:d2:8f:23:24:d2:28:e3:aa:83:3b:17:0f:60:7c:e7:ab:e8:
97:70:47:9a:f6:aa:c4:dd:8f:60:d0:72:48:66:9e:a2:03:5a:
71:8b:b9:49:eb:17:c2:32:b0:87:f9:10:e5:6e:c7:e2:51:bc:
55:58:35:a2:4e:e0:0a:84:ab:ce:7e:23:71:1c:c7:0d:3f:66:
97:b3:a0:c9:5e:cf:da:c4:d9:fc:6d:3b:c8:b9:8e:91:9b:90:
ec:29:bc:06:d6:a2:43:4f:36:2a:9e:a1:db:a0:de:c2:59:1c:
02:35:40:e5:ec:a6:56:b6:86:b2:75:4e:c7:05:f8:70:9c:4c:
f3:48:48:b8:1c:b2:2a:af:8b:9d:73:b1:12:9b:5f:ef:6d:50:
4e:a6:26:7b:b9:2e:43:8d:17:ca:5e:8c:10:7c:44:92:f5:0b:
07:62:65:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:49:01 2025 by rpki-client