Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
File: 323830343a343863303a3a2f33322d3438203d3e20323637313432.roa (raw, json)
Hash identifier: wf3PSbxaQoz04LuH+DpJ300lgKtkTir3v4uSeMTRXRA=
Subject key identifier: 41:66:8F:60:C3:5A:E3:FF:D7:BA:52:13:25:56:E2:6F:CB:60:F6:4B
Certificate issuer: /CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Certificate serial: 66ADC27BC555502010E8038D7AD0541B2A46BBF8
Authority key identifier: AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
Signing time: Sun 09 Feb 2025 23:07:14 +0000
ROA not before: Sun 09 Feb 2025 23:02:14 +0000
ROA not after: Sun 08 Feb 2026 23:07:14 +0000
asID: 267142
IP address blocks: 2804:48c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ad:c2:7b:c5:55:50:20:10:e8:03:8d:7a:d0:54:1b:2a:46:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFFAF320E60531FB95C6C685842B56D1BDFCED45
Validity
Not Before: Feb 9 23:02:14 2025 GMT
Not After : Feb 8 23:07:14 2026 GMT
Subject: CN=41668F60C35AE3FFD7BA52132556E26FCB60F64B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:58:1f:ec:7a:de:1e:81:5e:76:7f:26:82:7e:
4d:33:ab:39:fb:95:68:65:8e:c7:88:68:bf:43:c0:
88:30:9a:05:e7:9a:bd:b0:08:0f:a2:cf:78:93:30:
e4:23:44:f0:42:a8:71:5a:80:79:c5:a9:f2:0e:f8:
13:b9:bb:be:2d:30:b8:98:22:e8:1e:b9:48:d2:b9:
1b:11:20:61:9a:ea:3f:95:b2:21:16:9d:be:9e:c7:
66:b2:a3:e7:94:4d:88:34:80:63:49:d4:bf:de:08:
9d:e9:d3:60:d2:62:a0:29:f1:b5:18:1e:86:99:06:
a9:60:1d:7c:8f:42:be:42:e6:74:27:e6:7e:5b:51:
a5:d0:c0:a2:fc:9f:15:ba:20:d5:83:59:43:b1:00:
fb:b8:ee:60:2a:2a:a5:d2:46:e7:f7:42:ab:de:cd:
e1:68:98:67:f2:81:6a:45:1d:4c:22:31:ab:25:39:
5d:87:ef:3a:22:5d:7d:03:7b:d0:ad:35:ae:45:d6:
32:50:fd:7a:ae:56:d4:97:2e:dd:03:2f:1f:fd:d8:
81:0c:01:d4:91:80:c4:a9:66:18:76:87:f1:78:85:
b1:21:87:5b:49:ed:e3:68:0f:76:1b:56:aa:f8:3a:
1e:82:32:df:75:47:c3:e4:b7:89:74:37:77:97:4d:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:66:8F:60:C3:5A:E3:FF:D7:BA:52:13:25:56:E2:6F:CB:60:F6:4B
X509v3 Authority Key Identifier:
keyid:AF:FA:F3:20:E6:05:31:FB:95:C6:C6:85:84:2B:56:D1:BD:FC:ED:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/AFFAF320E60531FB95C6C685842B56D1BDFCED45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFFAF320E60531FB95C6C685842B56D1BDFCED45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhhacJFgWs9wK9CuEPTXeQC1XDwjhgMNJs3zTh9w9tBU/0/323830343a343863303a3a2f33322d3438203d3e20323637313432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48c0::/32
Signature Algorithm: sha256WithRSAEncryption
21:b8:a2:78:b2:90:12:c4:11:e4:65:75:3b:de:07:ec:cf:e7:
92:cf:c5:68:12:ac:76:d5:6c:09:9a:f8:83:13:12:73:ce:e6:
dd:17:4e:b6:2b:58:9c:1d:e7:e7:7f:63:97:9e:fc:96:7d:35:
0f:16:df:e1:97:1e:7d:c7:93:f2:a6:1a:c3:10:61:b5:5e:72:
7d:20:84:6b:6a:f8:22:29:f2:e7:29:03:7a:e1:0c:2b:48:56:
0c:ae:e4:9d:9d:da:ac:b3:7c:17:a5:3f:5e:69:71:c8:5a:23:
28:0c:c2:c4:8b:50:1e:0b:e1:6a:1a:bb:9d:65:e9:7d:69:87:
f8:b4:f8:fb:32:80:97:dc:ac:ed:4d:fc:1e:f4:d4:dc:76:08:
3d:cf:c9:af:ca:1f:ca:9f:44:3c:0c:ed:d7:8d:75:f4:eb:3e:
1b:28:ab:45:37:03:2c:7a:0a:15:fa:38:0b:5e:27:6d:ba:40:
0b:b7:d2:6a:d2:f7:8d:ed:83:a2:62:8a:97:93:79:24:91:1e:
75:16:35:c7:2c:a3:a6:76:92:f9:6d:78:f3:e4:88:7d:94:b3:
96:44:aa:51:92:62:55:c8:16:12:85:30:07:8c:99:27:78:db:
73:67:56:f8:52:48:e1:66:00:32:d4:10:68:0e:f1:a5:43:34:
37:38:22:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:39:27 2025 by rpki-client