Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa
File: 323830343a363566633a3a2f33322d313238203d3e20323939353236.roa (raw, json)
Hash identifier: g10uClWBCz7BfNMI/0Idhcp5g+45Ri6FVlAOlHb1Y0c=
Subject key identifier: B8:A1:2C:0E:F4:2E:A8:69:DC:50:D5:B5:18:8A:CE:63:A6:36:E8:8B
Certificate issuer: /CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
Certificate serial: 0D42A4F2D38237CE9602ABF503F11178CA8353AB
Authority key identifier: 3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa
Signing time: Wed 31 Jan 2024 16:06:03 +0000
ROA not before: Wed 31 Jan 2024 16:01:03 +0000
ROA not after: Wed 29 Jan 2025 16:06:03 +0000
asID: 299526
IP address blocks: 2804:65fc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:42:a4:f2:d3:82:37:ce:96:02:ab:f5:03:f1:11:78:ca:83:53:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5
Validity
Not Before: Jan 31 16:01:03 2024 GMT
Not After : Jan 29 16:06:03 2025 GMT
Subject: CN=B8A12C0EF42EA869DC50D5B5188ACE63A636E88B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d4:08:5c:ed:1d:01:65:87:05:b5:3d:50:52:
c5:51:6c:d3:27:3f:2d:52:2d:a4:32:71:67:17:01:
15:6c:d7:51:53:40:06:aa:98:8e:26:79:b2:d1:6c:
8d:fd:9b:93:16:97:e3:6e:e6:55:d8:34:37:07:b2:
ba:19:99:09:f6:53:91:c8:c2:3e:b4:d0:7a:ff:cc:
11:74:f7:56:f8:d3:f0:ec:f5:bb:59:95:22:30:70:
83:80:c3:07:87:ab:d3:8a:66:d2:86:11:1c:b0:2b:
37:2b:2f:a5:94:fa:50:8b:01:0f:2f:1a:d2:fb:6b:
a0:68:4c:b4:11:32:66:0c:0f:23:fe:e2:43:7c:3f:
a5:ea:6c:4e:d3:fd:4b:36:70:59:2b:e2:12:61:2b:
5d:d4:af:f9:29:74:fe:b6:ac:8f:da:ec:81:22:d9:
0e:da:fd:ae:31:3b:a0:e9:1c:50:2a:cc:13:da:d3:
2e:c5:f1:fc:5b:03:ac:7f:27:32:f4:f5:90:55:01:
98:2e:50:6c:2f:1a:cb:b0:fd:e1:87:16:98:2f:98:
b5:4c:70:6b:3c:0c:07:6f:0b:88:da:d6:e4:b0:e6:
53:32:7e:60:55:f0:3e:69:43:c1:e1:50:dd:00:63:
7d:6f:86:60:fb:ea:59:f5:38:41:82:ed:5d:dc:58:
20:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A1:2C:0E:F4:2E:A8:69:DC:50:D5:B5:18:8A:CE:63:A6:36:E8:8B
X509v3 Authority Key Identifier:
keyid:3E:BD:05:E7:C5:9D:11:2E:CB:00:A7:3F:8D:33:BC:D8:94:C5:FA:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBD05E7C59D112ECB00A73F8D33BCD894C5FAE5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CLxp8uwnFaNgkQyUyXpMCw6qWJtr1ZiQreKGofJeVxpg/0/323830343a363566633a3a2f33322d313238203d3e20323939353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:65fc::/32
Signature Algorithm: sha256WithRSAEncryption
4d:87:29:eb:31:d7:c7:3e:2c:eb:7c:d0:be:fe:45:57:24:8e:
b7:0d:4c:cb:34:7a:26:6a:04:a5:f5:1e:9a:bf:87:41:ca:e9:
bf:f2:16:0f:3b:76:98:e6:51:e4:bf:86:71:83:99:c6:c5:e5:
4b:55:98:75:ec:f9:e1:b9:fe:d9:25:4e:0e:b7:40:98:12:4f:
81:70:99:0d:a9:74:47:83:48:ca:19:fc:97:cd:c9:05:59:28:
d8:8b:0e:cc:45:c4:1c:36:c7:73:d4:3b:1f:37:2b:bc:b5:70:
fd:a7:c3:02:1f:ce:74:a8:de:f1:1f:4a:52:7c:2f:79:6c:4e:
b1:08:8c:d4:30:13:01:4a:77:8b:63:62:4e:c5:4d:2a:b7:0b:
1b:0d:3e:a6:42:51:5c:11:9f:71:06:80:db:19:d1:3a:78:3f:
8a:9b:1a:44:79:c1:a7:5a:cb:13:1c:2b:8b:bf:21:9d:a2:ca:
80:bb:98:3a:fd:ad:ab:bd:1d:e4:4b:50:56:15:94:1d:02:7e:
3d:73:4d:a9:46:b2:78:66:d8:7b:8f:40:66:76:ea:b1:19:1d:
6c:98:0d:c8:32:24:5a:9f:b6:4f:68:1d:7d:1a:15:ef:71:85:
33:de:d3:a6:29:37:15:0f:56:cf:94:c0:bc:60:6b:3c:12:6c:
2d:92:7f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:26:15 2025 by rpki-client