Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3332203d3e20323636343937.roa
File: 323830343a333862383a3a2f33322d3332203d3e20323636343937.roa (raw, json)
Hash identifier: 6qYcWtm32X47wp1wypc+BKmL+Mr8+tzk/5PTYSJ2xGc=
Subject key identifier: 43:F4:BD:E7:20:9A:1B:B0:89:4B:D8:E1:F8:BA:DC:06:93:68:1E:40
Certificate issuer: /CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Certificate serial: 31848A3EBA76520DA64EFF917CCCAD57A9C795FC
Authority key identifier: A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3332203d3e20323636343937.roa
Signing time: Fri 06 Dec 2024 16:52:03 +0000
ROA not before: Fri 06 Dec 2024 16:47:03 +0000
ROA not after: Fri 05 Dec 2025 16:52:03 +0000
asID: 266497
IP address blocks: 2804:38b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:84:8a:3e:ba:76:52:0d:a6:4e:ff:91:7c:cc:ad:57:a9:c7:95:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0DAE8CDD320603218B6BE37D484CD0B492A9E94
Validity
Not Before: Dec 6 16:47:03 2024 GMT
Not After : Dec 5 16:52:03 2025 GMT
Subject: CN=43F4BDE7209A1BB0894BD8E1F8BADC0693681E40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:2e:6f:6a:7b:d1:21:07:a7:02:3a:a0:28:
8a:c0:c3:2a:4a:c3:b6:26:a2:e1:93:1b:08:ca:0c:
6d:11:ca:70:d1:f7:da:9b:67:13:4f:b0:db:48:93:
6f:7c:37:9d:21:a1:cb:5e:b5:73:0e:ca:8b:d3:6a:
90:1b:ab:83:74:a1:44:70:93:80:6c:ba:a7:91:52:
b5:a8:71:c9:af:49:52:f1:65:77:c1:20:09:1f:76:
eb:d2:24:df:ab:51:8f:38:f5:78:7c:16:15:75:90:
94:6c:b7:71:c7:66:bc:8f:e3:63:7d:81:2f:61:4b:
61:d2:1e:9f:1b:37:72:e5:3e:ed:bb:37:ff:db:ea:
0e:57:5e:64:50:33:dc:b7:23:63:3a:cf:bc:56:60:
ba:3c:82:e4:af:50:f0:a6:18:71:7e:1f:0a:64:bd:
ff:16:d0:d0:0b:5e:7f:38:27:f4:d4:c0:86:8d:60:
bc:7c:8a:0c:7a:2c:49:9a:35:fb:67:89:da:68:91:
01:e1:00:3c:af:b7:05:55:9f:eb:94:df:e7:f3:69:
81:b8:33:66:ed:91:10:ed:68:27:48:20:34:32:2a:
da:dc:b2:c5:86:b1:01:37:58:9e:ec:46:d8:77:df:
f1:19:83:a5:fb:81:21:37:9a:f0:71:0e:6f:7d:e2:
15:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:BD:E7:20:9A:1B:B0:89:4B:D8:E1:F8:BA:DC:06:93:68:1E:40
X509v3 Authority Key Identifier:
keyid:A0:DA:E8:CD:D3:20:60:32:18:B6:BE:37:D4:84:CD:0B:49:2A:9E:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0DAE8CDD320603218B6BE37D484CD0B492A9E94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bi57bpt2KLcrKhwYFofUJbqgi26q2DqdjuJVRWfXdZP7/0/323830343a333862383a3a2f33322d3332203d3e20323636343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:38b8::/32
Signature Algorithm: sha256WithRSAEncryption
18:37:ad:58:21:69:59:63:15:16:ad:ac:25:f6:d7:d0:0d:79:
15:df:a5:1b:ad:5b:09:6a:5d:71:82:c3:f1:29:1d:45:72:a2:
7e:aa:86:fa:a9:82:dc:a9:ec:05:5f:d4:05:25:16:d9:b2:16:
9f:06:37:33:cb:f4:6f:41:f2:c9:c8:2f:60:e8:5a:02:ad:2e:
37:3a:1e:d9:77:14:67:ce:3b:07:6e:b3:67:8c:27:ea:d7:8e:
e2:2d:68:9d:80:a5:df:65:20:36:5f:de:b4:18:4c:fd:99:30:
50:a4:0a:24:b1:54:7e:7c:3e:41:1e:40:f0:48:19:97:03:39:
f7:68:a9:f3:79:67:7d:fa:41:09:00:3a:0a:5b:21:0d:44:b3:
9d:15:68:5b:7a:cf:dd:d5:35:dd:d6:89:7f:f1:f1:01:60:9f:
52:c2:bc:09:11:31:9b:c7:a9:07:06:92:62:b0:78:43:bf:e7:
98:2f:c6:9b:d9:5f:7b:1f:87:ba:5e:f8:54:f4:28:83:e7:33:
1b:74:af:f8:34:33:a4:95:86:95:35:ca:9c:3e:e7:07:20:8d:
d2:5f:e7:1c:f2:9c:bf:2f:d6:71:77:25:ab:7b:f1:3f:a9:ed:
a2:6b:28:05:a9:d2:6b:f0:fe:46:e1:28:b7:67:5c:e4:30:fc:
41:8a:90:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:54 2025 by rpki-client