Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa
File: 323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa (raw, json)
Hash identifier: z/jXNMTddgAmn7JT++iApmMHW1inFV42oOQ5hImQ3xo=
Subject key identifier: DD:FD:98:67:C1:71:C4:5D:8D:93:70:85:82:D5:BF:91:1A:71:8C:69
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 6BED520C78E4A1D52224A8C18ECA953949A2556C
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:11 +0000
ROA not before: Tue 21 Jan 2025 20:39:11 +0000
ROA not after: Tue 20 Jan 2026 20:44:11 +0000
asID: 271504
IP address blocks: 2804:7c90:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:ed:52:0c:78:e4:a1:d5:22:24:a8:c1:8e:ca:95:39:49:a2:55:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:11 2025 GMT
Not After : Jan 20 20:44:11 2026 GMT
Subject: CN=DDFD9867C171C45D8D93708582D5BF911A718C69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:64:d1:5a:14:55:83:b5:6d:3f:b2:33:63:
10:da:88:25:b1:e4:3a:d9:86:aa:24:1c:ab:69:8a:
94:94:d4:f4:83:75:ba:eb:f0:44:a6:df:2e:1c:b3:
16:91:bf:8a:d7:ea:23:ad:04:e3:1f:d0:97:0f:ca:
7a:fe:01:cc:a8:5e:8a:9a:97:9c:f5:0c:2f:8c:c0:
ac:5f:d2:4f:b2:1d:a5:79:69:28:31:91:2f:b6:34:
ab:da:4a:db:e9:74:f1:92:be:91:2c:0b:71:bf:ff:
c9:97:99:37:c7:72:b2:ed:58:ec:29:a3:63:af:cf:
ff:ae:8e:f7:b9:7e:9d:ca:77:09:fa:37:5a:7d:d3:
96:ed:fd:d0:e1:09:96:ee:83:72:94:64:1b:3e:46:
27:c5:37:0c:f9:e9:4c:a5:53:ba:76:a7:b2:58:03:
8b:fa:af:d3:de:cd:d2:ad:96:cd:1a:68:b9:7a:ee:
27:1f:3c:ef:51:ea:04:c3:36:fa:21:bb:f5:6d:fe:
a1:cc:fe:28:f3:29:39:de:9c:2d:43:6c:78:7a:20:
72:31:79:6d:1a:4c:19:4c:69:60:da:9f:45:5a:6a:
e6:06:3b:cc:cb:7e:ab:79:8f:bb:1d:5f:3c:78:30:
dc:ba:dc:8f:d3:cb:79:c2:49:4b:e5:dd:10:f8:d1:
f4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:98:67:C1:71:C4:5D:8D:93:70:85:82:D5:BF:91:1A:71:8C:69
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a633030303a3a2f33342d3334203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90:c000::/34
Signature Algorithm: sha256WithRSAEncryption
5b:3e:25:d2:9f:96:34:40:d2:9c:58:6d:57:4b:70:ff:32:24:
f6:26:33:83:04:6b:e2:36:6b:9b:38:ef:da:26:01:88:3b:3f:
2f:9c:13:ca:6c:76:f7:d1:b8:c1:d0:fe:fe:c4:21:44:65:ba:
72:36:19:f5:7c:bf:05:4d:2d:49:64:9a:f2:68:5d:6a:6a:c5:
a6:f4:37:fa:62:f9:b2:32:3d:0d:25:1b:b7:88:03:8d:7a:bb:
6f:e8:a5:57:4a:3b:0f:57:cc:0c:ef:30:e5:0e:6f:fc:d7:f9:
87:32:c5:93:18:2c:ae:79:9b:20:24:d9:2c:af:98:c3:8c:b2:
b7:91:3b:d2:99:46:3b:53:3b:93:5c:f7:e7:a3:cb:a4:b4:ed:
b2:0a:13:9d:10:aa:15:e8:2f:19:4b:70:7d:3f:a8:0c:61:e0:
9c:f7:5c:b3:9f:4f:b7:98:5f:78:e3:c9:80:15:18:ce:d3:e0:
9c:30:ab:9b:b1:ac:5a:da:be:e5:e1:c9:13:cc:d4:97:3a:3a:
31:d6:95:92:de:48:dc:d6:8c:1c:98:55:d7:cf:7a:50:3a:b6:
a3:ff:66:0b:be:48:c9:ed:66:5b:5b:d8:6f:b3:e1:46:cf:d0:
e6:29:1f:61:18:cb:9c:92:b0:5e:e4:f6:df:fc:87:8c:93:17:
52:f2:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:23:19 2025 by rpki-client