Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3334203d3e20323730353737.roa
File: 323830343a366532303a3a2f33322d3334203d3e20323730353737.roa (raw, json)
Hash identifier: dqpQkaS/QLPPW/pBPz8Mq/heXZcYEpWJMGp+uB0b3qo=
Subject key identifier: F3:22:39:53:15:12:56:C0:C1:29:20:86:4C:CA:6D:7C:B9:18:3D:62
Certificate issuer: /CN=9C1E7856C241ECF5872A2E00792054BE423DCD53
Certificate serial: 0D8BE42C5CFE84003108E8EC3DE0CBA0A2B75C9D
Authority key identifier: 9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C1E7856C241ECF5872A2E00792054BE423DCD53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3334203d3e20323730353737.roa
Signing time: Mon 13 Jan 2025 14:05:23 +0000
ROA not before: Mon 13 Jan 2025 14:00:23 +0000
ROA not after: Mon 12 Jan 2026 14:05:23 +0000
asID: 270577
IP address blocks: 2804:6e20::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:8b:e4:2c:5c:fe:84:00:31:08:e8:ec:3d:e0:cb:a0:a2:b7:5c:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C1E7856C241ECF5872A2E00792054BE423DCD53
Validity
Not Before: Jan 13 14:00:23 2025 GMT
Not After : Jan 12 14:05:23 2026 GMT
Subject: CN=F3223953151256C0C12920864CCA6D7CB9183D62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a6:95:f1:a0:69:7c:e9:13:be:f7:fe:e4:5f:
dd:9c:ab:76:b2:46:bb:21:0c:b0:be:3c:f0:45:c1:
19:be:6d:45:33:7c:12:87:e0:11:e2:af:18:33:4c:
2b:97:08:7b:c7:2d:01:8a:64:45:49:d8:e0:a6:81:
7e:db:f4:ac:62:81:bb:ed:b0:f6:5f:22:0f:9f:03:
a6:f6:35:c9:b6:92:0a:61:fd:b5:c9:34:30:c2:50:
b5:25:0f:be:51:7c:e7:62:41:87:86:7b:73:5d:90:
93:7f:61:c4:47:06:b8:9a:69:cf:e1:44:74:bf:61:
1a:3f:d3:80:de:41:c2:bd:02:6b:3b:3a:3b:90:cd:
27:c1:d2:af:b4:1b:27:e9:84:10:a8:ff:6c:bf:60:
a4:95:a7:d0:6c:b5:fc:b7:0a:a7:eb:c2:2d:0b:d4:
93:6d:0c:40:46:e3:2c:c2:c7:78:0d:34:4f:dc:81:
e4:f3:10:83:34:35:ec:af:fb:7c:f7:2e:fa:ef:5c:
23:16:a9:12:18:63:73:b4:af:e4:9f:82:37:27:47:
56:65:e5:fd:51:25:7f:4d:e7:4e:b6:d0:64:31:fe:
b1:1f:fd:c1:20:bf:58:b8:32:6f:78:10:6e:e2:68:
b4:18:00:5d:f2:d9:1a:3d:17:78:18:a5:ba:28:c4:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:22:39:53:15:12:56:C0:C1:29:20:86:4C:CA:6D:7C:B9:18:3D:62
X509v3 Authority Key Identifier:
keyid:9C:1E:78:56:C2:41:EC:F5:87:2A:2E:00:79:20:54:BE:42:3D:CD:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/9C1E7856C241ECF5872A2E00792054BE423DCD53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C1E7856C241ECF5872A2E00792054BE423DCD53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3334203d3e20323730353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e20::/32
Signature Algorithm: sha256WithRSAEncryption
15:28:74:7f:0c:b1:4b:01:45:d1:02:56:fe:c4:00:2e:d8:83:
5c:52:12:16:f1:87:ed:95:41:42:62:42:6a:a3:1b:39:29:ac:
f3:39:a7:85:cc:0a:63:86:98:9a:c2:75:96:a8:e0:d6:07:54:
4f:f1:89:5f:7c:83:4b:02:18:6b:e0:b2:a0:7a:ec:4e:fd:b8:
d8:ca:2f:5f:61:08:08:ef:51:51:c1:35:7b:35:55:0a:27:3f:
4b:5f:54:d0:35:45:5f:1d:1c:08:d1:88:11:73:20:35:e9:ff:
c3:5d:61:00:3c:2b:86:50:b5:e4:54:94:07:5d:a0:b7:7d:69:
45:d3:07:1e:de:7f:62:45:b1:0c:54:cd:6f:48:4b:e4:b6:c9:
ac:b6:79:79:e5:d2:30:e2:60:94:22:f0:f2:a8:18:da:9d:c4:
3d:3d:ec:7e:85:6f:08:3e:34:f4:53:fd:34:c5:df:3c:8e:7e:
64:6c:51:fc:f5:5d:01:6b:83:cb:fb:9b:8e:3e:65:b3:26:59:
e1:02:53:92:a9:ef:db:28:4f:61:23:94:1b:80:22:16:5c:53:
e9:86:91:02:d2:12:c5:bb:4b:1f:f3:98:9b:dc:1c:96:c5:27:
d2:f6:1d:6c:33:49:7f:11:7a:79:6b:20:e7:ac:1a:e9:48:c5:
a1:6d:09:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 03:58:29 2025 by rpki-client