Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a383030303a3a2f33342d3334203d3e20323636323332.roa
File: 323830343a336363303a383030303a3a2f33342d3334203d3e20323636323332.roa (raw, json)
Hash identifier: 6iWO9OtXgPKm1cFnXj1Otnrhirtl1dwMevpwm6xE0+s=
Subject key identifier: 03:F8:86:DD:C2:8A:AE:CB:15:E4:99:97:51:CE:4E:2E:1C:4A:F5:71
Certificate issuer: /CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
Certificate serial: 7DE8D7B5672D716234C0CADC03A6E440AA04E5D7
Authority key identifier: 8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a383030303a3a2f33342d3334203d3e20323636323332.roa
Signing time: Mon 20 Mar 2023 02:09:27 +0000
ROA not before: Mon 20 Mar 2023 02:04:27 +0000
ROA not after: Mon 18 Mar 2024 02:09:27 +0000
asID: 266232
IP address blocks: 2804:3cc0:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:e8:d7:b5:67:2d:71:62:34:c0:ca:dc:03:a6:e4:40:aa:04:e5:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F
Validity
Not Before: Mar 20 02:04:27 2023 GMT
Not After : Mar 18 02:09:27 2024 GMT
Subject: CN=03F886DDC28AAECB15E4999751CE4E2E1C4AF571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:97:d7:5a:15:0b:42:0f:d4:23:6e:ff:1c:
79:ee:ed:60:2a:b0:ef:25:c8:ff:99:ed:6b:ef:3f:
bf:a6:ff:9a:a4:a2:f3:b8:ec:c0:8e:63:16:ca:74:
ec:74:54:a0:94:f6:e8:44:77:ff:92:cb:1c:79:f8:
06:5f:84:49:49:76:49:bb:62:cb:e0:d8:f4:6a:e2:
1e:c8:fa:cd:22:72:38:53:30:65:f1:50:74:a3:a5:
7d:89:ed:4e:2c:01:08:a3:13:94:c7:e9:92:ae:a8:
84:82:56:8f:bc:b5:c1:8c:dc:31:69:02:a4:6a:b8:
a3:98:2f:eb:0c:21:23:4e:c1:5b:a1:26:e3:79:cd:
02:c3:5d:d9:9a:f8:a0:e1:e2:f6:27:5d:62:c5:db:
d3:ed:12:d5:66:e9:54:2d:53:4c:8f:ee:18:49:b4:
e3:3d:17:23:42:9c:ce:26:34:94:09:ba:99:f4:c3:
db:a7:5c:9f:dd:80:ff:af:ff:82:00:9d:fa:04:78:
d2:30:de:0d:10:f8:41:17:76:d8:92:ae:3c:f9:0c:
51:6e:37:60:37:43:c1:79:47:4d:d3:3c:0f:6a:ad:
ca:f2:19:23:34:5d:ad:50:5b:08:5d:b9:a5:ad:3c:
86:10:fa:b5:47:2e:86:8f:d6:96:8a:dd:c4:b1:c3:
e8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F8:86:DD:C2:8A:AE:CB:15:E4:99:97:51:CE:4E:2E:1C:4A:F5:71
X509v3 Authority Key Identifier:
keyid:8A:99:42:1A:DB:1D:C9:BA:7F:69:83:7F:10:8B:27:A7:9F:BE:FA:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A99421ADB1DC9BA7F69837F108B27A79FBEFA9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a383030303a3a2f33342d3334203d3e20323636323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3cc0:8000::/34
Signature Algorithm: sha256WithRSAEncryption
a7:69:5f:0a:de:f2:78:95:ed:ce:c4:3d:e3:97:54:3e:52:48:
5e:38:c5:b3:bf:06:d0:9c:03:69:80:9d:2d:8e:00:6f:f8:33:
7c:7d:69:1f:fe:61:6a:7f:91:84:5b:10:96:8f:44:62:84:b1:
ce:a5:7a:61:b1:95:d5:43:24:44:3d:d6:c6:66:e9:5c:f0:4a:
00:1c:0f:80:55:b8:56:e7:df:17:b6:b4:03:79:14:f4:15:e5:
48:23:c7:7a:0e:04:2a:d0:65:f8:87:6b:a7:1c:ae:76:fd:7f:
de:6a:f2:6a:dd:12:87:74:c4:63:19:4d:db:23:d2:4e:cf:ae:
88:8c:95:dc:f0:db:4a:92:90:dd:94:2e:71:49:90:2d:82:0f:
34:b2:fd:3d:3d:71:cb:af:ac:41:7e:94:d7:50:a7:96:6e:84:
bc:b7:bf:5c:67:2e:58:12:ed:18:d1:33:13:2a:7a:d6:8c:fd:
e0:52:be:94:b9:8e:d5:d9:93:a8:2b:69:7c:2a:f8:de:f4:d8:
40:da:76:2f:42:8e:03:d4:f2:4d:9e:42:4f:65:07:90:f1:3c:
b7:bc:b8:b5:c1:67:7d:7e:1b:90:1e:89:5b:ec:88:52:8d:5b:
d2:84:0f:70:a1:99:b1:1f:a8:e0:fa:c6:7c:78:eb:f7:50:6f:
34:21:ff:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:36:42 2025 by rpki-client