Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33322d3438203d3e20323634303034.roa
File: 323830343a323933383a3a2f33322d3438203d3e20323634303034.roa (raw, json)
Hash identifier: PXaFQhJBMmkDtZeIsGM+SvMKQTLXgykSAyqzv0oCCQU=
Subject key identifier: 85:6B:F4:86:AB:30:42:11:0F:83:98:27:FC:E7:25:D6:9C:EC:C7:6E
Certificate issuer: /CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
Certificate serial: 505F20BB8D9ED751FF15975BBD927F5D5DC00290
Authority key identifier: 67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33322d3438203d3e20323634303034.roa
Signing time: Wed 01 Nov 2023 21:01:22 +0000
ROA not before: Wed 01 Nov 2023 20:56:22 +0000
ROA not after: Wed 30 Oct 2024 21:01:22 +0000
asID: 264004
IP address blocks: 2804:2938::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:5f:20:bb:8d:9e:d7:51:ff:15:97:5b:bd:92:7f:5d:5d:c0:02:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67888316D81746EE5C19F9656CE9D9B96EE806AA
Validity
Not Before: Nov 1 20:56:22 2023 GMT
Not After : Oct 30 21:01:22 2024 GMT
Subject: CN=856BF486AB3042110F839827FCE725D69CECC76E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:b7:6d:5d:ad:e2:ae:19:29:31:38:f6:30:
09:fc:c6:94:ae:4c:71:76:aa:27:f4:77:90:55:cb:
44:eb:73:0e:b1:f6:01:f6:23:28:f3:62:61:24:c1:
cd:bc:1d:e3:de:43:5e:0b:ae:06:4a:34:5b:78:3b:
9f:18:dd:88:fb:35:bc:30:51:7e:84:2c:61:87:ef:
81:09:df:0d:0d:cd:89:2b:c6:e5:d0:9e:da:c2:88:
51:66:7f:87:08:0d:f9:65:43:ff:44:4d:8c:44:fa:
90:86:36:ac:ba:ee:2d:9b:e5:52:fb:a2:4c:f7:bc:
af:35:fc:6e:bb:d1:43:43:3a:39:13:28:57:b7:b1:
47:e8:b1:64:0f:e1:d1:3e:2a:de:b3:fd:19:e7:a1:
91:15:90:8b:da:c4:ac:86:98:5a:10:ee:6a:05:88:
80:02:bc:36:7e:92:bf:1c:e4:49:1a:3c:f9:5b:25:
8d:81:d5:63:4a:f4:8f:e1:b4:0c:eb:b1:b9:81:09:
94:9c:d2:1e:fc:29:02:d7:be:ed:2a:be:d4:48:54:
f3:fb:61:65:13:f0:da:e5:ea:a2:7a:19:32:dc:3f:
cb:8e:25:5e:03:83:00:c8:d0:d0:b3:29:54:ce:e5:
51:b7:cb:99:ee:5e:b5:0f:d4:bc:79:5e:5c:a6:6b:
bc:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:6B:F4:86:AB:30:42:11:0F:83:98:27:FC:E7:25:D6:9C:EC:C7:6E
X509v3 Authority Key Identifier:
keyid:67:88:83:16:D8:17:46:EE:5C:19:F9:65:6C:E9:D9:B9:6E:E8:06:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67888316D81746EE5C19F9656CE9D9B96EE806AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FTo4qprKHstPmEmUV25HAtqFuSYpD9ABsuZagkgSXX7x/0/323830343a323933383a3a2f33322d3438203d3e20323634303034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2938::/32
Signature Algorithm: sha256WithRSAEncryption
a4:0e:88:4d:cb:f2:0f:2d:b8:f4:d5:62:9e:f1:0d:21:1a:0a:
d7:94:c4:6c:58:00:dc:b5:1c:5e:d0:eb:d2:6e:d4:f9:6f:e0:
cf:67:01:17:fb:26:86:8c:d7:94:37:cd:18:71:e3:29:af:4e:
fd:cc:5a:f5:26:1c:24:e5:a2:4c:9e:f9:ff:63:5a:61:63:68:
fc:1d:ff:b4:a3:0d:0c:59:44:00:40:87:d9:0e:3e:fc:b2:96:
b9:fd:97:60:1a:4e:b8:f2:a4:0c:4b:6a:7e:15:ff:20:c0:36:
62:4a:8b:e9:f0:39:9f:16:ff:b9:c2:ce:1e:ff:a5:fd:2c:ee:
a1:0b:c8:59:82:06:2b:a9:59:4f:35:63:45:78:ec:5f:71:26:
96:81:7f:81:f5:e2:ba:88:d5:ff:8f:66:fe:d6:c7:de:40:25:
ae:ca:f9:7e:a4:f4:53:e3:8e:7d:36:06:0b:0e:7e:bf:06:f4:
81:cc:6f:4b:0b:3d:ef:01:b7:23:c8:21:d8:55:9e:e0:11:83:
19:ee:a1:24:fc:ff:2a:a0:ff:e6:58:51:03:77:d2:e9:16:7a:
61:02:90:14:19:e5:a4:1f:41:bd:4d:33:3e:e3:79:1b:e9:0f:
8f:12:6a:44:a2:e3:9c:e2:3b:a9:ff:c9:5a:93:d1:0c:1d:ac:
ba:0f:ae:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:54:13 2025 by rpki-client