Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33342d3334203d3e20323634333937.roa
File: 323830343a316464343a383030303a3a2f33342d3334203d3e20323634333937.roa (raw, json)
Hash identifier: R2mekOgGs9gJEWP+UkGr98r8eHR4BWEUba5WpssJhdU=
Subject key identifier: F8:9B:68:A5:FF:B3:73:24:81:C4:0C:DA:7C:9F:22:75:08:C9:ED:C9
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 2DE4AD73C48600EE8A5A55388AC6CB6C17CD0EAE
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33342d3334203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:45 +0000
ROA not before: Mon 16 Dec 2024 16:22:45 +0000
ROA not after: Mon 15 Dec 2025 16:27:45 +0000
asID: 264397
IP address blocks: 2804:1dd4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e4:ad:73:c4:86:00:ee:8a:5a:55:38:8a:c6:cb:6c:17:cd:0e:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:45 2024 GMT
Not After : Dec 15 16:27:45 2025 GMT
Subject: CN=F89B68A5FFB3732481C40CDA7C9F227508C9EDC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:8f:c2:75:24:0c:67:3c:26:7e:df:46:57:
38:c8:c9:ce:35:93:06:9b:be:0e:a0:5e:a6:87:fa:
29:ca:25:d4:9d:95:2f:dc:16:a0:61:4e:6a:ef:c1:
bf:5d:3b:e4:56:05:f7:db:2e:37:00:91:66:d5:ca:
a2:74:00:89:5f:3f:3e:e5:fc:48:e0:49:11:73:72:
05:cb:0a:e2:de:46:36:1e:f2:a4:f3:d4:48:0a:13:
51:19:8f:58:23:48:ab:f5:71:97:a8:dd:59:a2:9d:
e5:87:57:81:ca:b4:89:37:5d:29:bf:6e:df:25:8b:
c8:e1:65:bb:8a:3e:c6:4d:01:3a:38:91:1f:cb:45:
99:6e:ac:52:fc:d1:03:11:f5:dd:02:2e:8d:99:da:
48:09:4c:71:01:2e:52:00:cf:53:ce:3c:8f:a5:07:
53:e2:74:04:4d:50:3f:00:2c:4b:ff:29:88:06:33:
ea:d4:17:f8:6f:11:59:21:47:7f:24:16:1c:e6:bd:
6f:a9:ca:de:82:af:64:11:ce:a1:8e:9a:19:3a:57:
e9:18:e7:6d:e1:61:c4:22:6b:e6:d8:70:5a:6e:62:
82:e2:e9:a8:74:5c:16:f8:33:05:bb:0f:d8:64:42:
6f:92:1f:19:82:55:d8:81:85:68:8f:5a:1c:27:ac:
10:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9B:68:A5:FF:B3:73:24:81:C4:0C:DA:7C:9F:22:75:08:C9:ED:C9
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a383030303a3a2f33342d3334203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
16:ff:f0:02:cf:84:53:d7:34:9c:34:60:2c:94:94:08:07:f1:
26:26:40:f1:6c:cc:d3:42:c7:cd:9a:e4:e1:2a:54:9a:cb:2e:
ba:11:7f:8a:55:26:2e:77:4e:65:19:89:e8:a4:0d:e9:35:e1:
aa:c4:58:86:0a:97:6c:ba:c4:f8:7c:c5:92:c1:dc:59:5d:74:
58:1e:75:5e:29:82:92:a6:06:86:2f:4a:81:c2:70:d8:20:98:
0d:1c:b8:27:b2:7a:00:6b:2e:f4:26:2a:6d:49:8c:41:0a:9d:
d0:bf:f9:34:5a:fa:2a:61:78:3b:93:12:ec:d6:3f:84:f5:25:
4c:39:1d:92:ed:75:16:3f:b8:08:48:fe:9e:d2:5f:be:6e:ed:
25:a7:9c:88:b6:45:9f:e4:1e:bc:0d:a0:bd:f9:93:52:e4:7f:
d9:20:1a:a9:c8:67:9b:74:81:f8:7f:b5:e9:88:3c:90:1d:3d:
63:c2:c0:68:f2:3f:a2:d6:90:d7:2c:16:28:02:fa:6d:52:5e:
03:b4:5c:d0:20:73:5b:f5:75:b0:45:cb:28:c2:c2:47:08:e8:
5f:f8:19:c6:3d:dd:81:4e:36:5f:75:82:66:33:09:cb:f6:95:
32:05:9c:a2:5c:05:59:53:e8:e0:c5:87:66:95:17:c8:d7:66:
6b:07:29:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:39 2025 by rpki-client