Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33342d3334203d3e20323731353034.roa
File: 323830343a376339303a383030303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier: EgW0zzUOf5LFfh03smgHvfKq6f/7u7Qifo8ngWvJZBk=
Subject key identifier: F8:96:CD:6E:D2:97:2F:AC:62:BD:D4:BC:2C:EC:84:43:C3:5E:50:70
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 3571AF22354C96B1F636C40C01313139CC3CBC25
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33342d3334203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:05 +0000
ROA not before: Tue 21 Jan 2025 20:39:05 +0000
ROA not after: Tue 20 Jan 2026 20:44:05 +0000
asID: 271504
IP address blocks: 2804:7c90:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:71:af:22:35:4c:96:b1:f6:36:c4:0c:01:31:31:39:cc:3c:bc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:05 2025 GMT
Not After : Jan 20 20:44:05 2026 GMT
Subject: CN=F896CD6ED2972FAC62BDD4BC2CEC8443C35E5070
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e1:a2:d7:49:4c:df:6a:79:a7:34:84:7f:ef:
b4:86:60:05:d4:cb:b8:b8:0f:f2:e0:9f:41:95:78:
0a:fd:40:96:5d:05:f8:85:db:9a:b7:30:1f:b6:06:
0c:35:82:31:5d:1c:95:22:9c:60:00:c2:fa:50:46:
d8:4f:a6:21:4b:56:e8:8c:ba:81:ee:8f:00:5b:91:
43:79:c1:7c:f2:9b:33:22:60:2b:78:d8:0b:8d:0d:
89:47:c3:f2:fb:55:2c:e1:b5:56:ca:dc:5e:cd:66:
90:da:a4:34:55:46:27:22:24:4b:cb:87:de:14:66:
0b:6a:73:76:73:99:95:df:61:d3:99:74:03:0a:08:
96:db:0d:71:a6:57:0e:70:e5:9c:8d:b1:f3:77:59:
af:6a:4e:39:e6:d1:31:86:70:e2:2c:76:da:3b:67:
32:2e:3b:29:ea:7d:14:f4:12:60:e7:d5:86:3f:cb:
32:4d:1f:e3:07:98:a4:12:dc:1c:60:69:2a:ca:af:
53:ef:22:20:77:8c:7d:21:b9:9e:7e:11:31:eb:6a:
82:ec:2b:fd:be:47:8e:08:64:a2:bc:96:0b:73:54:
6e:e5:d7:23:4a:29:0d:a5:fa:b8:e3:22:53:fe:13:
9c:ab:e2:ac:af:06:99:fa:b2:e9:27:0c:b7:d2:df:
2e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:96:CD:6E:D2:97:2F:AC:62:BD:D4:BC:2C:EC:84:43:C3:5E:50:70
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33342d3334203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90:8000::/34
Signature Algorithm: sha256WithRSAEncryption
a1:7c:f9:db:8d:2b:40:d5:a8:c8:c8:fa:7e:fc:b9:87:74:c2:
e1:d4:8d:ef:a5:ac:ba:9b:9c:40:09:d2:8b:be:e1:10:02:e4:
fb:81:ca:d5:48:82:7b:cd:6c:28:5a:cd:df:07:3c:af:ce:51:
75:bf:b1:40:89:4b:1c:b4:ea:b8:a5:1d:06:57:96:da:b5:af:
63:ed:c8:b7:4d:f1:2c:6e:66:11:44:d2:4a:1a:62:3a:91:eb:
c9:72:c3:4a:fb:fe:ba:0d:32:9e:70:ed:03:9a:7d:05:dc:75:
4f:38:c5:84:e1:08:e3:d3:b2:22:92:75:75:62:2f:58:b4:c5:
38:85:37:66:ed:04:dd:f8:e5:50:9d:32:96:35:a5:3e:22:dd:
49:b9:8b:83:8f:09:9d:ff:d1:3d:58:eb:76:d3:c9:67:bc:ed:
4f:79:5f:5d:d3:6d:85:57:13:7f:65:8a:a6:df:95:0b:d2:12:
81:dd:69:39:7d:91:f5:59:99:b9:c0:98:8b:62:02:31:07:e9:
dc:68:c7:00:5b:2b:c4:d1:b4:b3:74:d8:2b:a7:1b:26:83:70:
96:55:34:a0:92:cd:1b:1a:7c:0e:8b:0e:5d:6e:83:38:60:49:
c7:90:e7:e9:31:fa:9e:9f:94:55:79:a7:65:09:9a:c2:95:5f:
f3:8e:3d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:54:18 2025 by rpki-client