Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa
File: 323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier: UYJ6zJlRA+Mn16uXVGTsOm3K1jOTKJ/CI18qOsTeFxI=
Subject key identifier: CA:F9:8B:CB:C6:23:C8:23:67:BB:90:27:D6:B0:67:C8:06:6C:9C:59
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 6CA306CC3F05D2C24AB7E96770277780EB767392
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:43:54 +0000
ROA not before: Tue 21 Jan 2025 20:38:54 +0000
ROA not after: Tue 20 Jan 2026 20:43:54 +0000
asID: 271504
IP address blocks: 2804:7c90:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:a3:06:cc:3f:05:d2:c2:4a:b7:e9:67:70:27:77:80:eb:76:73:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:38:54 2025 GMT
Not After : Jan 20 20:43:54 2026 GMT
Subject: CN=CAF98BCBC623C82367BB9027D6B067C8066C9C59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:f1:d6:aa:58:3f:22:ba:51:d9:4e:c3:bc:
c6:e2:1c:cc:17:f7:62:20:db:ff:08:b9:17:f6:5f:
34:4f:6d:e3:3a:8f:94:72:3b:a1:7d:24:70:96:ff:
a8:c1:ec:52:6b:c3:86:92:fd:f3:fe:8f:16:4b:f9:
9e:a2:6a:de:34:3c:ff:c7:dd:de:a7:ed:00:24:d1:
22:fd:f0:6c:91:19:90:97:26:f9:66:3d:92:43:72:
c9:aa:0b:96:63:2f:3c:89:e8:7a:52:1d:3f:a9:18:
c1:92:35:6d:b5:59:cf:6e:f0:e7:b1:7e:cf:db:e3:
19:9f:08:0e:8e:26:13:f3:77:af:76:61:a4:2a:73:
2d:0a:db:4c:76:73:0c:61:7f:9f:15:f1:b9:7e:fd:
c0:9d:74:d7:e0:bb:cf:a8:11:7b:41:72:d2:21:13:
8d:97:bd:b7:d7:a1:32:cb:48:09:2a:ef:24:34:e3:
dd:27:08:d0:a0:23:7f:9b:58:03:27:4c:7d:0c:b9:
64:82:a0:0b:23:c0:c2:79:56:95:66:74:f8:d4:84:
00:14:64:ed:91:5f:c2:ff:85:f6:95:a3:27:34:77:
ee:6f:c6:cf:50:ab:76:c3:32:06:70:b1:27:2a:dc:
39:8e:ae:75:ba:d0:4b:6a:5a:a2:6a:02:c3:bd:b8:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:8B:CB:C6:23:C8:23:67:BB:90:27:D6:B0:67:C8:06:6C:9C:59
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a343030303a3a2f33342d3334203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90:4000::/34
Signature Algorithm: sha256WithRSAEncryption
33:a8:f1:0a:c0:d6:2a:66:8d:14:e6:e3:b2:3b:ad:a8:d9:22:
78:ad:01:ce:67:a1:03:26:76:eb:70:67:2f:23:c2:57:3c:ea:
3d:74:8c:4a:2d:14:6d:af:71:f5:73:8c:5f:76:a1:5b:a9:36:
32:73:27:64:16:72:86:74:5b:b9:9c:12:8e:68:47:1e:35:30:
c4:50:b8:1f:3f:2e:e8:ba:16:63:c4:8c:a9:6c:63:fd:dd:36:
c0:e6:f7:c8:b3:fd:b2:7d:60:e6:f1:de:fa:f1:d7:1a:eb:d8:
03:bb:69:56:1b:73:90:1e:20:0e:25:02:0a:7e:e7:8b:dd:24:
8a:6f:4e:f3:9c:2a:16:db:81:8d:5c:af:00:22:06:20:a8:2e:
8b:49:a6:ec:e3:44:bd:1a:ee:c7:ca:79:53:2d:ed:b2:52:3b:
87:d5:5e:73:ea:1f:dc:e5:64:94:bf:c6:31:80:93:3e:a8:30:
af:7c:0e:7c:5e:03:98:2a:57:8a:31:47:75:fa:4a:86:b4:5f:
40:8b:f7:69:1e:fb:56:0a:7b:25:7f:72:2a:49:7f:bf:94:3b:
91:68:3b:e5:83:2b:2e:72:22:74:fc:46:98:54:27:95:88:62:
d4:4f:a4:fa:a5:92:5e:fb:d9:4f:4e:3e:1c:1a:fe:95:65:03:
0e:13:62:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:39:27 2025 by rpki-client