Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa
File: 323830343a376133303a3a2f33322d313238203d3e203134383430.roa (raw, json)
Hash identifier: 3Y9LK/owpRMe5psyYcwSh5o0Wz0RKrtJ8nRLKcF3mYc=
Subject key identifier: 18:BF:6C:2B:97:A9:D6:B0:DD:84:68:3B:FF:0B:52:24:0B:C9:40:92
Certificate issuer: /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial: 457DCD383BCFDFBFF5D14FE740AB172DD3F8637D
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa
Signing time: Tue 28 Feb 2023 13:48:28 +0000
ROA not before: Tue 28 Feb 2023 13:43:28 +0000
ROA not after: Tue 27 Feb 2024 13:48:28 +0000
asID: 14840
IP address blocks: 2804:7a30::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:7d:cd:38:3b:cf:df:bf:f5:d1:4f:e7:40:ab:17:2d:d3:f8:63:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Validity
Not Before: Feb 28 13:43:28 2023 GMT
Not After : Feb 27 13:48:28 2024 GMT
Subject: CN=18BF6C2B97A9D6B0DD84683BFF0B52240BC94092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e0:e8:74:75:cc:86:76:6e:06:d9:0b:f4:5f:
92:2e:ce:6c:51:02:28:42:d6:2c:4e:18:5d:cf:6a:
80:b6:75:98:1c:e7:6f:c4:94:ae:1c:e7:da:2a:ec:
40:cf:e4:05:48:ae:fd:45:89:a5:dd:5b:ac:41:7d:
f0:f9:fb:64:c7:34:a5:19:b2:e3:d2:f7:c7:2f:16:
9f:90:35:98:40:74:89:12:d6:ef:cf:9c:ca:cb:c8:
ee:d2:19:b8:a1:80:13:5e:9d:90:ce:05:2e:c0:f7:
a6:83:9b:23:41:1f:54:0b:23:77:08:cc:6f:13:88:
e4:60:ec:1a:e3:d2:82:03:0e:b5:07:b7:0c:18:01:
0e:f4:30:ec:e9:55:48:96:e6:f4:55:15:44:4a:40:
94:f5:f3:10:eb:37:c1:b7:5d:76:30:34:57:65:b8:
bc:83:b0:77:46:7b:01:c4:5e:0f:d9:d0:5d:3b:a5:
cc:80:85:b8:cf:3e:55:77:2d:7a:1d:17:51:97:e5:
c4:33:83:77:38:f1:fa:06:fe:c5:23:19:c9:03:69:
72:56:7d:e2:01:5f:57:1e:44:cb:76:cf:a6:7a:8f:
93:35:30:44:dd:af:77:48:cd:a3:73:37:22:c9:e5:
be:33:2e:0c:31:7c:4c:a1:d8:c1:f5:fc:2c:d4:4e:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:BF:6C:2B:97:A9:D6:B0:DD:84:68:3B:FF:0B:52:24:0B:C9:40:92
X509v3 Authority Key Identifier:
keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e203134383430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a30::/32
Signature Algorithm: sha256WithRSAEncryption
4e:ce:4b:6a:b1:a4:02:ac:c8:0b:6d:65:d3:60:32:5e:7b:af:
c1:f7:b3:7b:49:cf:06:5a:3d:ad:31:67:4b:72:c3:28:d9:18:
9f:95:92:75:c9:0a:bc:83:ca:08:93:9d:fc:26:f4:e5:82:88:
32:56:f1:96:aa:3b:94:75:0e:8c:5f:2f:79:64:29:15:f3:44:
72:cd:b0:2b:21:5a:8a:d7:1d:7a:ca:3e:eb:7a:3a:06:79:b4:
81:53:0d:37:22:89:ba:c7:83:68:53:62:3d:13:72:b1:d0:b2:
e0:e8:0e:01:b7:a5:fc:c4:71:5f:e1:e5:a8:17:ef:8e:b5:98:
8f:ef:4e:55:55:1b:91:c2:7d:5a:7e:7a:77:f8:d3:0c:ba:cb:
91:66:77:3d:51:b2:3b:14:be:98:6f:c8:3d:5d:32:2e:d0:eb:
11:23:dd:e0:b8:73:29:b6:11:2c:e0:ac:7e:d5:fc:71:02:34:
30:fe:d7:ec:c7:b1:e8:ae:01:dd:1b:49:ec:77:d9:e3:6b:be:
13:01:0d:39:9b:a2:ce:97:4a:f7:91:b6:d3:05:83:13:9c:15:
d1:c9:26:89:0b:4e:72:46:02:0f:1e:61:0a:bd:9e:75:6d:2a:
0e:0a:d3:7c:39:98:e9:43:10:ef:49:19:17:2c:04:5c:dd:34:
9a:16:39:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:45 2025 by rpki-client