Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa
File: 323830343a346530383a3a2f33322d3634203d3e20323638323335.roa (raw, json)
Hash identifier: eCej0gsTKHhZ/bD47zC2+gQ3Xlnxw5OoK22UGnp13H4=
Subject key identifier: AB:99:91:FB:C2:D9:5A:C7:52:FE:3F:A8:5F:5E:31:8F:EA:FB:77:07
Certificate issuer: /CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Certificate serial: 40B3885C9FFDDE68BBE186727F0EEFB672A049FC
Authority key identifier: 1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa
Signing time: Sun 03 Nov 2024 18:59:38 +0000
ROA not before: Sun 03 Nov 2024 18:54:38 +0000
ROA not after: Sun 02 Nov 2025 18:59:38 +0000
asID: 268235
IP address blocks: 2804:4e08::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b3:88:5c:9f:fd:de:68:bb:e1:86:72:7f:0e:ef:b6:72:a0:49:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE8995FC9C395145A97456B64442AC68C0DF4EB
Validity
Not Before: Nov 3 18:54:38 2024 GMT
Not After : Nov 2 18:59:38 2025 GMT
Subject: CN=AB9991FBC2D95AC752FE3FA85F5E318FEAFB7707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:8c:3d:08:62:4a:47:94:52:3a:14:85:33:
60:6e:97:a1:9f:52:ca:97:ea:5f:88:09:f6:0e:65:
3f:d4:68:ae:59:de:38:de:94:5e:ef:18:19:7b:d0:
aa:33:3a:d9:2d:bf:bd:52:fe:f3:7f:97:ee:a6:ed:
b8:b7:04:da:8a:d0:de:71:88:36:21:f7:59:13:68:
49:5e:5b:31:82:58:86:b2:ae:ba:6a:64:55:20:18:
d7:4f:7b:33:99:9c:d1:55:b1:8a:b0:9c:cc:81:6e:
27:65:28:8b:7c:c3:de:60:18:09:d8:c4:70:6f:45:
bc:3c:57:d5:c1:39:60:6f:ac:db:36:a4:7a:d4:a5:
cb:83:58:22:9f:1c:0d:88:47:d8:d4:3a:d7:8b:78:
f1:b7:b9:cc:59:f3:d1:32:ab:d3:0e:22:96:5e:4b:
05:71:91:a0:ba:b8:54:e8:c5:48:6a:b9:04:43:fa:
39:18:8d:c9:b6:69:3b:b4:d0:62:01:f5:b3:6a:44:
07:f9:4a:78:a1:94:26:0e:32:d0:dc:db:27:ce:0f:
55:52:8e:03:4c:43:30:5e:07:78:3d:69:b8:1f:d2:
44:7c:15:56:3f:b7:ae:05:0f:33:b5:a7:7f:7f:28:
c4:4c:0f:69:9b:77:8b:71:ed:32:95:7d:8b:fa:b5:
52:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:99:91:FB:C2:D9:5A:C7:52:FE:3F:A8:5F:5E:31:8F:EA:FB:77:07
X509v3 Authority Key Identifier:
keyid:1B:E8:99:5F:C9:C3:95:14:5A:97:45:6B:64:44:2A:C6:8C:0D:F4:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/1BE8995FC9C395145A97456B64442AC68C0DF4EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BE8995FC9C395145A97456B64442AC68C0DF4EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/0/323830343a346530383a3a2f33322d3634203d3e20323638323335.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4e08::/32
Signature Algorithm: sha256WithRSAEncryption
52:4f:8b:16:ca:b4:32:a7:d3:8a:62:16:aa:86:10:22:69:b7:
c9:f8:7e:2a:f8:0a:fd:e1:7e:b3:d0:71:d4:8e:83:4c:3d:10:
ab:24:11:23:73:d6:18:40:e4:17:c7:d1:d8:82:95:45:b4:10:
5e:a4:a4:98:81:ab:85:72:b7:a2:de:67:a8:ac:98:e0:c4:f2:
b1:49:1b:e7:7d:2e:f2:5a:38:f1:2c:c6:69:a1:73:a3:d6:b3:
a7:64:86:b9:00:ca:de:aa:7a:49:59:ce:ff:77:83:89:fb:5b:
03:5d:3f:7c:df:6d:69:81:84:f9:c3:77:ac:87:7f:5f:df:d6:
10:c4:46:c6:17:f5:0f:ee:3a:a4:fa:7d:1b:a4:a5:b9:b9:39:
ee:97:4d:3b:40:44:92:5e:43:07:47:ce:d6:d3:76:34:9b:8d:
51:72:c8:20:33:ed:65:f8:1f:b3:3a:63:77:66:a5:24:a1:25:
7a:85:eb:5c:3c:85:fb:fb:d8:9a:55:9f:cf:9b:21:cb:44:55:
f6:98:24:08:c9:c7:eb:19:ce:47:1d:0d:4f:7e:18:c7:fa:4b:
11:3c:80:d9:f2:b9:3b:5f:a3:90:1a:15:0b:57:b9:74:2e:47:
19:b5:71:62:16:6f:0c:6b:32:1e:d5:eb:1f:09:66:d2:d9:21:
0c:77:89:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:08 2025 by rpki-client