
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa
File: 323830343a343131343a3a2f33322d3438203d3e20323636303032.roa (raw, json)
Hash identifier: a4NYkVdo5aPWye3tCRJ4yAurrDJnbIRoOQNsCCCc7QM=
Subject key identifier: B2:41:5C:29:6E:AF:5D:DC:37:CA:A5:8A:1C:B6:E1:05:DC:27:0D:BF
Certificate issuer: /CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Certificate serial: 4BE64D8DEA9F0D7B81A6254E6271DB2EF3216461
Authority key identifier: 65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa
Signing time: Thu 19 Dec 2024 15:58:26 +0000
ROA not before: Thu 19 Dec 2024 15:53:26 +0000
ROA not after: Thu 18 Dec 2025 15:58:26 +0000
asID: 266002
IP address blocks: 2804:4114::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:e6:4d:8d:ea:9f:0d:7b:81:a6:25:4e:62:71:db:2e:f3:21:64:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=658D206948C4D2E8D5E6077E923EB5A551F916BE
Validity
Not Before: Dec 19 15:53:26 2024 GMT
Not After : Dec 18 15:58:26 2025 GMT
Subject: CN=B2415C296EAF5DDC37CAA58A1CB6E105DC270DBF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a7:c8:26:72:98:28:93:d2:f5:b9:a0:9e:8d:
88:26:80:a6:6c:16:99:a6:fd:8c:1b:b9:33:90:d7:
da:5e:54:3a:19:90:8e:0f:ce:c5:8e:44:46:15:8c:
3d:9e:08:5e:6c:af:9e:4b:01:4e:6c:ff:1d:be:72:
4c:e1:2c:e7:f7:6f:d6:3d:e1:72:cf:00:35:30:8c:
cf:b3:d5:35:94:db:25:69:fd:d6:e0:91:bb:9c:ea:
5e:7f:cb:0c:10:8c:dd:c6:21:c2:76:49:ba:de:c5:
3b:04:07:f6:3f:09:bc:36:bf:a0:4e:1e:3e:ad:14:
8d:07:42:01:76:66:37:4e:23:eb:ff:19:ae:10:44:
a2:bf:62:b6:ff:64:6a:91:4d:31:6e:b6:66:6f:fd:
5a:c7:aa:18:e6:d2:d8:0b:ad:6d:53:af:24:2e:86:
19:1b:fb:11:b8:e7:fa:06:dc:41:47:61:81:39:a2:
1d:f0:f9:67:b3:a9:f6:d0:b7:43:9c:39:a1:53:04:
54:4b:57:ac:94:ca:cb:e4:6e:a1:b7:d1:ab:8e:03:
9d:96:db:78:75:21:71:21:a7:23:8c:1e:be:6b:a3:
56:52:4e:70:3f:f9:66:a0:e0:8b:2c:9b:29:7f:5f:
53:65:b8:04:ed:3a:4e:42:2b:66:e3:d8:20:90:fb:
40:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:5C:29:6E:AF:5D:DC:37:CA:A5:8A:1C:B6:E1:05:DC:27:0D:BF
X509v3 Authority Key Identifier:
keyid:65:8D:20:69:48:C4:D2:E8:D5:E6:07:7E:92:3E:B5:A5:51:F9:16:BE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/658D206948C4D2E8D5E6077E923EB5A551F916BE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/658D206948C4D2E8D5E6077E923EB5A551F916BE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EGNf3S4j7Yt8pVNmzGDK3RcWe9VcnTQpSGz3qj1YKnTW/0/323830343a343131343a3a2f33322d3438203d3e20323636303032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4114::/32
Signature Algorithm: sha256WithRSAEncryption
41:e0:5d:66:28:b5:a3:57:e3:cf:bc:ff:f0:99:cd:62:2e:c7:
26:5b:a6:10:db:91:3e:af:cb:c3:38:09:c8:48:0d:c6:df:fd:
ff:2a:26:49:3c:81:9d:6d:0d:50:b0:3f:95:92:9f:a8:fe:97:
2a:0a:ae:6f:df:94:85:f4:cb:31:9b:e1:56:c3:c0:da:07:47:
a6:dd:6f:b0:9c:4e:a6:2e:63:37:e6:74:8c:f1:2a:06:b9:38:
40:7c:94:e8:61:a3:4f:91:84:02:5f:1b:ce:67:36:d1:bc:7b:
4a:85:5d:03:c7:83:bc:5b:c0:16:b9:ab:ef:7d:21:1e:99:16:
da:d9:6e:bd:7f:da:a4:4e:db:9a:24:e9:7c:46:9b:14:b9:8a:
a7:e7:b7:ac:d4:cf:2f:0b:65:58:8d:06:cd:1b:65:77:4f:e5:
ff:c3:d8:84:37:0b:47:71:e1:06:27:c5:c8:4b:ad:ac:da:0f:
f8:ac:b1:d0:a6:e2:4c:54:f7:bc:08:34:c9:22:29:c8:90:35:
ef:84:12:5f:af:1d:e3:56:b1:45:18:a9:0f:71:22:24:91:f5:
1f:a7:2a:06:c6:1b:15:dc:bb:52:4f:4a:9a:47:2b:c0:d3:c6:
f9:d1:15:b5:1e:a5:fc:eb:a8:73:37:c3:17:c8:a3:ae:97:c9:
d1:07:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 07:54:28 2025 by rpki-client