Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa
File: 323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier: XR5nVMrryzRmzJ3vsLVrMuo02JiPNtxYlb8HxL/Wc8I=
Subject key identifier: A1:69:A4:26:E6:4D:B0:32:44:B1:20:97:46:70:05:CF:2D:8C:1F:8E
Certificate issuer: /CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Certificate serial: 684E7655A650B30021A20AC83299E10BEEC4D5EA
Authority key identifier: D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa
Signing time: Mon 10 Feb 2025 17:25:10 +0000
ROA not before: Mon 10 Feb 2025 17:20:10 +0000
ROA not after: Mon 09 Feb 2026 17:25:10 +0000
asID: 265080
IP address blocks: 2804:3278:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4e:76:55:a6:50:b3:00:21:a2:0a:c8:32:99:e1:0b:ee:c4:d5:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38
Validity
Not Before: Feb 10 17:20:10 2025 GMT
Not After : Feb 9 17:25:10 2026 GMT
Subject: CN=A169A426E64DB03244B12097467005CF2D8C1F8E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:13:64:ac:b3:60:87:b2:cd:6b:1d:17:9e:11:
09:92:2b:7e:a0:55:0a:b2:fe:29:cd:e5:7a:18:ec:
f1:20:7a:e9:d9:f0:0f:b3:30:5c:91:28:a9:fd:82:
3d:94:1b:de:26:25:50:9a:f7:50:2a:b1:a4:1f:8a:
83:48:08:4e:9a:47:83:68:53:f9:6e:98:10:7a:3a:
11:a4:7b:a5:03:b5:d8:de:b3:8e:1a:9c:b8:52:a9:
3c:da:eb:0c:42:84:dc:4b:ca:c1:7e:35:3f:62:0b:
5a:92:a5:b4:45:c9:cb:91:d6:48:74:ad:58:c6:ba:
34:bf:21:d5:04:c8:f0:77:be:11:eb:1a:b5:16:ce:
28:ac:08:26:9b:3f:a1:b0:eb:c7:b0:7f:5a:b4:b6:
91:d8:5a:72:45:4d:e1:7c:dd:2f:df:ec:fd:e7:62:
14:14:e3:50:4b:dc:85:a7:8c:e0:f8:47:35:8d:82:
f8:d7:55:26:c5:40:52:6b:83:3a:c8:10:b1:c7:c9:
9c:5e:46:8b:cd:34:bc:b3:a3:08:f5:08:08:ef:3d:
d0:6e:77:53:c2:81:15:b2:67:f5:f5:d0:66:82:3b:
64:4b:27:d8:5e:af:aa:f0:f9:73:fa:fa:27:b9:5e:
db:7b:ef:d6:4d:8c:ea:c5:df:76:b3:bb:ff:02:fb:
5b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:69:A4:26:E6:4D:B0:32:44:B1:20:97:46:70:05:CF:2D:8C:1F:8E
X509v3 Authority Key Identifier:
keyid:D6:06:CC:74:EC:93:6A:A8:ED:7F:38:4A:9E:1B:7C:0A:94:5C:0A:38
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D606CC74EC936AA8ED7F384A9E1B7C0A945C0A38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a633030303a3a2f33342d3334203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278:c000::/34
Signature Algorithm: sha256WithRSAEncryption
0c:e8:46:73:99:b4:db:13:8e:24:81:30:6d:cd:d9:b3:73:9e:
06:41:ba:ba:03:92:41:a0:d6:a3:79:23:66:31:16:af:f8:4b:
5c:54:d6:8d:ad:a4:85:64:99:c1:a9:77:ea:35:8b:5a:a3:a7:
4a:55:16:a5:66:03:2e:06:76:d6:8b:4b:bb:6f:67:82:10:7f:
6c:6c:33:39:d0:d8:16:71:b1:2a:78:a9:b3:c4:a9:8c:9c:d5:
6e:ec:75:1a:3a:56:6f:cc:4c:11:40:15:56:53:b2:95:c6:59:
b9:39:14:39:a1:99:75:be:5e:eb:d9:d7:d6:8c:50:df:85:e3:
89:72:f6:d5:e2:cb:68:f9:30:7f:5c:c9:7b:f4:79:cb:88:88:
75:34:b2:36:97:31:cc:73:ac:a2:b4:c9:c8:d3:af:0a:51:86:
eb:eb:56:38:c3:5a:d1:4f:1c:83:89:0c:66:6e:d7:e0:c1:d3:
e9:b4:73:4a:19:83:05:b5:65:78:09:2b:91:eb:01:eb:aa:13:
49:6a:ce:7e:77:6f:94:eb:fa:da:71:74:79:3a:7e:5a:e8:bc:
f1:60:29:ca:ed:1c:1b:10:60:e6:fe:98:a4:d8:cb:79:e0:7f:
bf:41:e9:c7:0e:d0:84:81:df:74:a3:c1:27:e7:ff:b9:fd:5d:
70:22:06:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:14:42 2025 by rpki-client