Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
File: 323830343a376339303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier: 48iShCr+/EB4os1IUwCcwOBWpudlzrj4apvdpsNJJvk=
Subject key identifier: 4D:71:CB:C8:3A:2D:30:80:EE:93:43:CB:FE:90:87:9C:D9:6C:B2:27
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 7AE56EF3CEEE6D412FAAB3A6AE27F453DA84FA43
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:43:46 +0000
ROA not before: Tue 21 Jan 2025 20:38:46 +0000
ROA not after: Tue 20 Jan 2026 20:43:46 +0000
asID: 271504
IP address blocks: 2804:7c90::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:e5:6e:f3:ce:ee:6d:41:2f:aa:b3:a6:ae:27:f4:53:da:84:fa:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:38:46 2025 GMT
Not After : Jan 20 20:43:46 2026 GMT
Subject: CN=4D71CBC83A2D3080EE9343CBFE90879CD96CB227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:45:11:bf:7c:68:e0:33:a5:51:1f:09:f9:
5e:13:a2:b2:f7:39:53:ef:03:19:b8:2a:02:18:fd:
dc:2f:b3:e4:b0:19:15:b5:bc:8e:88:4b:1c:6e:e2:
90:a6:59:c1:fb:ac:cf:a7:ac:85:9d:6b:b4:74:6a:
18:97:b9:bb:aa:10:54:c2:76:c1:34:60:94:af:d8:
df:d6:96:8d:a8:90:53:4a:ef:fe:ff:d8:12:0b:5b:
bd:b2:a8:a5:57:5e:b8:e2:aa:27:8a:8c:db:04:29:
f0:60:66:6b:79:53:9e:73:c1:d0:2b:5f:78:b1:24:
a4:88:49:3a:ca:f8:c9:39:22:f3:95:5f:93:39:4d:
70:94:c7:eb:00:ff:13:e9:bb:7d:f7:6e:56:20:be:
1f:f0:54:ec:ea:aa:2e:34:b2:88:e3:ad:5c:1f:64:
36:32:38:62:74:19:14:67:cd:37:4b:7c:27:72:67:
0f:90:39:61:c5:43:9e:83:29:58:f9:14:54:96:e0:
0e:28:74:fc:4f:45:c9:fa:fc:f8:df:ce:5a:4a:d5:
59:26:9b:19:a9:d2:03:f5:8f:cf:4a:df:27:17:2e:
5f:43:b1:ca:73:76:d0:5a:e5:a5:9d:ee:62:0b:41:
d4:35:ca:0a:47:dd:2c:c9:07:c5:da:2e:90:7b:6c:
5e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:CB:C8:3A:2D:30:80:EE:93:43:CB:FE:90:87:9C:D9:6C:B2:27
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a3a2f33342d3334203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90::/34
Signature Algorithm: sha256WithRSAEncryption
30:64:4c:90:64:e1:ad:7e:24:a0:ee:83:c4:3e:36:45:f9:7e:
7d:2e:51:53:f1:65:2c:c3:b8:23:db:08:46:01:fd:17:8e:71:
6e:aa:5a:52:92:94:94:e7:24:5a:49:d9:ab:38:0a:5c:70:e5:
50:5f:dd:07:57:94:63:26:b2:81:de:33:db:ba:53:06:21:7b:
ca:af:42:52:c2:37:6f:cd:8b:e7:50:c5:5c:1e:8e:05:b4:84:
0a:c8:7f:36:68:a5:ab:d4:e6:6e:26:90:d7:81:90:ea:98:d6:
10:48:f2:3d:67:e0:30:3a:b9:05:52:85:e3:51:00:f8:aa:04:
c2:47:85:2d:9d:c3:3b:03:9b:9e:de:aa:71:17:48:97:98:28:
d7:b0:a9:5a:0a:9f:82:17:60:94:79:a1:1d:15:a4:d8:4e:39:
23:dc:30:ca:49:dc:cd:b2:54:15:b3:7c:cc:e2:ae:81:e2:cf:
dc:a3:e6:a0:87:e8:d2:10:f2:97:76:86:b8:46:f1:42:97:4e:
c6:44:70:7e:14:22:f6:63:f9:6e:9a:11:bd:b7:54:3e:49:b0:
50:f3:9d:3c:59:b8:35:95:76:1e:13:1a:52:a5:ff:60:cd:78:
7f:76:46:b7:d8:8d:73:8f:1f:fe:9a:be:20:95:c8:f1:58:0f:
7a:a7:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:24:22 2025 by rpki-client