Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33322d313238203d3e20323637333639.roa
File: 323830343a346336383a3a2f33322d313238203d3e20323637333639.roa (raw, json)
Hash identifier: C26tjZtGDVJ14abJw7U1uBj31aJFCN0Y0/l/nshdnv4=
Subject key identifier: 17:B2:47:01:42:AD:30:22:0B:1A:68:8D:04:F1:E8:52:B2:C2:0B:6D
Certificate issuer: /CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
Certificate serial: 10A8A9424085588E9B7A02F49374838C4AB05139
Authority key identifier: AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33322d313238203d3e20323637333639.roa
Signing time: Thu 20 Mar 2025 18:55:31 +0000
ROA not before: Thu 20 Mar 2025 18:50:31 +0000
ROA not after: Thu 19 Mar 2026 18:55:31 +0000
asID: 267369
IP address blocks: 2804:4c68::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:a8:a9:42:40:85:58:8e:9b:7a:02:f4:93:74:83:8c:4a:b0:51:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8
Validity
Not Before: Mar 20 18:50:31 2025 GMT
Not After : Mar 19 18:55:31 2026 GMT
Subject: CN=17B2470142AD30220B1A688D04F1E852B2C20B6D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:af:14:a2:88:c4:ed:2f:4c:6b:00:f1:c8:
8c:dd:d4:b2:3c:46:0b:59:22:79:82:9d:4b:1a:c6:
e8:17:15:45:fe:56:9a:f1:69:09:db:6b:52:b1:e3:
7e:2b:44:b5:43:5f:79:74:80:7c:56:6d:bd:3a:9c:
8d:0e:35:d5:f8:66:8d:72:48:5f:6e:c0:e7:ec:62:
f5:b4:9b:ee:53:c3:78:88:9d:af:75:23:24:62:49:
05:e6:36:7b:31:14:89:a3:d3:13:ac:46:7a:77:7a:
48:89:6e:40:1b:5f:62:15:46:1e:5f:e5:e5:a4:d0:
f5:15:db:8b:45:5e:5b:d1:f2:9c:f6:55:b5:26:7d:
4b:6c:f9:d1:3f:ca:5d:63:ea:b9:b0:7c:b9:df:9a:
89:63:1d:e8:e6:c5:49:b6:25:42:a3:0c:3f:97:e8:
25:38:90:46:97:a0:6c:9f:fb:d6:d2:9a:77:c9:18:
9d:b7:55:ad:cd:a7:a0:ff:94:ae:2a:95:a3:f0:80:
cd:60:13:fc:06:de:90:8d:cd:53:64:b3:6f:5d:10:
d0:4a:53:72:05:d9:42:d0:8d:51:bb:d5:de:a9:7e:
c0:d8:3b:65:db:c8:3d:d9:0d:05:a3:4f:ea:2c:55:
81:6e:98:48:e6:80:71:d8:12:6c:bc:96:03:5d:3f:
9e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B2:47:01:42:AD:30:22:0B:1A:68:8D:04:F1:E8:52:B2:C2:0B:6D
X509v3 Authority Key Identifier:
keyid:AF:AB:10:CE:6D:C6:17:64:DC:EE:9F:8E:1B:C6:7B:5B:D8:A6:19:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFAB10CE6DC61764DCEE9F8E1BC67B5BD8A619E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DLUSCxSmEG7jNQdPkyqqBjbrNAvLPCRunqXLC1oxAeAk/0/323830343a346336383a3a2f33322d313238203d3e20323637333639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c68::/32
Signature Algorithm: sha256WithRSAEncryption
9a:02:38:d6:f1:38:f6:79:66:ad:6a:a8:8b:30:50:a2:af:1a:
0f:df:d9:a1:c7:77:fb:e5:3b:f8:1b:59:ec:e1:25:8b:64:96:
8e:94:27:b0:ac:bf:ea:23:d5:31:3a:0c:67:51:ba:67:be:43:
3b:47:bb:3d:d6:a8:b2:03:af:43:8a:6b:a1:49:c4:0d:06:b8:
d7:77:7d:3a:c4:6e:1e:50:85:20:41:ca:31:cc:3d:d1:b0:0a:
9e:1b:df:0d:2b:8c:f4:c3:d2:de:b4:ab:24:82:b0:f5:ef:cf:
ec:d1:8d:d7:49:c7:ea:c7:f2:0c:3a:1b:e7:6b:5c:24:47:d2:
eb:7f:52:94:34:0b:60:48:1c:93:82:f8:8f:d1:e9:f1:4d:12:
6d:b0:b8:32:6c:fd:52:d3:59:3c:22:76:1f:90:92:73:0b:62:
ea:49:ea:90:d1:bc:b4:0d:db:af:30:ac:dd:ba:9f:11:13:df:
03:a6:ae:4b:ca:b3:46:99:c1:21:55:a9:47:e1:27:ac:3a:68:
2e:bc:fb:85:a4:58:6e:4c:26:18:08:9a:04:37:bc:01:2f:d9:
6e:ec:c4:30:2f:9e:2d:de:4f:62:f6:75:ab:cf:7e:38:ab:34:
17:c6:6b:a2:10:3b:be:dc:13:26:75:2c:a3:c6:6a:03:e8:60:
05:a5:ac:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:23:10 2025 by rpki-client