Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa
File: 323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa (raw, json)
Hash identifier: 7PON/KTOrsUV2aLZt9AoqAO+Rr5XqGpX7y1Kbihf9ZA=
Subject key identifier: EF:AC:E3:7D:44:7E:30:A1:A1:6B:7A:74:F3:30:D0:86:CD:B7:7E:DA
Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial: 736B0391C1132D4BA718C656234A253233FD0C4C
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa
Signing time: Thu 09 Jan 2025 14:06:45 +0000
ROA not before: Thu 09 Jan 2025 14:01:45 +0000
ROA not after: Thu 08 Jan 2026 14:06:45 +0000
asID: 263541
IP address blocks: 2804:1398:3e00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:6b:03:91:c1:13:2d:4b:a7:18:c6:56:23:4a:25:32:33:fd:0c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Validity
Not Before: Jan 9 14:01:45 2025 GMT
Not After : Jan 8 14:06:45 2026 GMT
Subject: CN=EFACE37D447E30A1A16B7A74F330D086CDB77EDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:02:b2:b0:94:8c:d6:78:b4:20:28:e2:3a:
59:5c:bc:59:74:35:ba:f4:a6:73:2d:11:97:bd:e8:
47:c8:8f:c5:38:35:73:ce:fb:b6:1f:cd:bb:e3:17:
dc:db:64:a2:15:50:29:d9:e7:85:90:aa:a7:66:c1:
d9:d2:35:00:e9:f0:0c:cf:3d:81:8e:4b:33:3b:43:
8a:96:d5:3e:72:a0:ca:f1:90:d7:76:ca:a5:b7:52:
98:87:4a:cb:66:2d:8b:60:58:1e:e6:64:f1:9c:9a:
a9:c6:4e:93:eb:df:49:98:c4:6a:91:3d:61:5a:a7:
6f:b2:67:2a:68:12:cf:28:d0:99:0e:b3:5f:45:e1:
63:ed:0d:a3:2e:dc:ca:8c:f0:13:14:50:4f:e3:03:
4a:9b:0e:c9:4e:ad:63:c5:bf:00:56:b2:02:ac:8a:
8f:92:98:a9:60:69:8b:1a:c7:27:79:4b:e3:44:e9:
13:0d:8a:13:1e:5e:bd:fc:ff:93:e4:56:00:b5:73:
47:25:c8:5b:57:cc:a3:db:f8:8d:b7:b5:2d:38:76:
c4:d6:19:d2:55:e8:88:d6:12:dd:c8:31:a5:29:c9:
33:85:31:0d:d0:2e:e0:80:54:34:4e:ec:cb:b0:36:
5c:3e:bc:3c:3a:b7:76:d9:1f:9f:f6:65:88:f9:05:
53:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:AC:E3:7D:44:7E:30:A1:A1:6B:7A:74:F3:30:D0:86:CD:B7:7E:DA
X509v3 Authority Key Identifier:
keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a336530303a3a2f34302d3430203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1398:3e00::/40
Signature Algorithm: sha256WithRSAEncryption
8d:e6:d6:53:0a:37:50:e8:de:aa:ab:e7:c6:e5:84:fb:5a:b9:
af:76:ac:18:f1:1a:1c:70:35:6b:ac:2e:08:17:48:f9:c0:43:
14:f2:c8:ae:e0:e6:e3:5e:ff:8f:ba:c3:b0:e0:6c:ec:a5:e1:
35:a0:2f:6d:36:12:0f:d8:7d:c1:95:80:fa:de:2a:ac:9b:d2:
3b:ca:7a:30:64:ca:4e:ec:d2:e7:7a:d4:d2:30:7a:ad:de:6b:
d2:79:76:71:55:a3:a4:ef:f4:4f:7a:79:e8:42:91:b8:ee:95:
d9:8b:99:2d:fd:cc:f4:81:51:ed:97:5b:3d:7f:53:d2:93:53:
2f:31:95:33:0c:12:95:b6:96:5f:bd:4a:32:22:6d:92:5b:5e:
64:38:78:3a:6d:71:0a:1c:de:02:a2:be:6d:9c:35:ae:bf:37:
e4:cd:09:ea:32:35:69:e2:6c:c9:e6:15:19:71:27:32:6d:15:
67:a7:b0:3f:36:d6:c6:da:9c:44:98:15:c8:f8:f0:c5:52:a7:
a0:76:19:0d:cf:e0:21:d4:07:94:de:34:32:e6:1c:2e:55:4a:
8a:bd:93:b0:a3:d7:f5:63:9d:c8:50:b0:1a:d9:27:de:1d:a3:
1e:00:9a:2d:ac:27:0d:f2:5c:87:d5:9e:c1:ab:82:c0:1e:bd:
76:5a:e6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:48:06 2025 by rpki-client