Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa
File: 323830343a346632343a3a2f33332d3333203d3e20323638333037.roa (raw, json)
Hash identifier: FufL0PIWX7JFJjyIAcZup2WpUWOgUOb22+anMYL2e3M=
Subject key identifier: ED:8E:AF:89:2E:0D:38:3C:EA:E2:55:EF:66:5C:AE:11:E4:C8:2D:CF
Certificate issuer: /CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Certificate serial: 04663973525644953958BDD5EFBF82244C688FBB
Authority key identifier: 43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa
Signing time: Sun 18 Aug 2024 05:06:28 +0000
ROA not before: Sun 18 Aug 2024 05:01:28 +0000
ROA not after: Sun 17 Aug 2025 05:06:28 +0000
asID: 268307
IP address blocks: 2804:4f24::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:66:39:73:52:56:44:95:39:58:bd:d5:ef:bf:82:24:4c:68:8f:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30
Validity
Not Before: Aug 18 05:01:28 2024 GMT
Not After : Aug 17 05:06:28 2025 GMT
Subject: CN=ED8EAF892E0D383CEAE255EF665CAE11E4C82DCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ce:ff:35:c3:7b:79:3c:c6:15:a1:c7:9e:80:
03:47:23:b7:2a:d3:60:59:b2:67:9e:d9:b7:35:53:
4b:b6:95:0d:c5:6b:c6:e5:e1:ff:34:f0:8e:03:7e:
73:ef:65:34:16:0d:a7:48:71:76:b1:3c:5b:db:30:
ac:e8:2d:0a:ca:84:4d:71:56:26:df:1c:23:17:a8:
ee:e0:e4:3e:a0:da:2a:c0:f9:b4:f6:03:0b:32:ce:
28:e2:af:c3:6d:e7:37:b8:c2:df:72:2e:12:c9:d2:
bd:ac:b9:2b:b0:13:e7:20:e7:84:60:e6:b8:12:bb:
4d:3f:df:b9:c4:33:33:80:06:db:21:18:ba:f8:d8:
7e:dc:1b:ce:3b:77:b1:52:d0:b3:b9:17:47:cf:1a:
93:d3:a2:13:32:8e:0a:2b:5a:ce:4f:2e:ee:75:dc:
9e:55:b9:5f:98:f6:de:96:2c:5d:61:fe:76:27:bf:
f1:09:3b:87:bb:09:c1:05:e7:75:47:5a:f4:ec:93:
f5:89:9d:3a:b8:1c:1d:fc:e6:88:1d:73:8a:93:c3:
67:aa:86:5d:a6:1a:25:ac:64:2f:7a:ae:5d:59:ad:
ec:76:74:74:63:71:a9:50:03:2f:99:f5:53:7b:92:
6f:2b:fd:d0:22:03:db:88:9a:bd:87:82:51:81:0d:
0c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:8E:AF:89:2E:0D:38:3C:EA:E2:55:EF:66:5C:AE:11:E4:C8:2D:CF
X509v3 Authority Key Identifier:
keyid:43:5F:4B:40:AD:49:CD:DD:2B:95:80:A9:F5:EE:3C:C2:59:BF:9A:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/435F4B40AD49CDDD2B9580A9F5EE3CC259BF9A30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33332d3333203d3e20323638333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f24::/33
Signature Algorithm: sha256WithRSAEncryption
6e:29:b7:52:66:8e:aa:f6:20:ac:76:c1:2b:5a:e0:b7:d7:38:
3c:bd:f2:66:30:e9:48:a5:7e:97:ce:fc:b4:94:47:2d:ec:9b:
5b:a5:a7:35:54:58:ad:65:86:b3:12:7f:3c:d9:16:a0:1c:5c:
50:cd:b9:d6:ff:54:1a:ac:71:5b:31:55:18:eb:81:a4:ab:6d:
f1:bb:61:d2:da:f9:49:0a:b3:3f:fc:7d:99:1d:0a:74:a9:ed:
7d:5e:69:ef:4f:bb:b3:ce:98:fc:ad:8e:12:99:51:c8:95:bc:
1a:37:72:7b:6a:d2:1b:82:fe:99:24:24:41:09:3c:8b:af:85:
45:dc:8d:b1:75:5a:69:6c:6a:bf:e1:b3:d4:66:9e:3b:52:15:
80:0c:39:b5:d0:83:46:93:02:48:93:db:cd:f0:e9:3e:54:ea:
34:1f:38:8b:36:c6:84:ef:5a:96:60:ca:58:eb:48:db:65:44:
7d:69:e4:8b:a4:56:a3:b8:29:58:89:4a:5a:92:3b:57:f7:74:
57:f3:c1:8c:75:1d:e4:7f:7f:d8:26:ca:bf:3b:10:f5:2e:b2:
81:b3:2a:9e:78:dd:37:66:01:c4:85:d6:07:5e:1b:7f:45:0c:
a2:46:69:22:14:bf:0b:b8:e5:9e:8b:d2:63:02:f0:d7:c7:4b:
21:44:22:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:57 2025 by rpki-client