Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa
File: 323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa (raw, json)
Hash identifier: X+tq1jAT7SxnQFvsp/CNYkbMiMMbu2Fcc98Xl8wbqbA=
Subject key identifier: 20:51:A3:F5:02:97:60:46:17:00:8F:22:7A:E1:D4:AB:47:17:3B:AF
Certificate issuer: /CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Certificate serial: 4D916B4B8B0A18AF200E8CACFCDCB5C83DB81AA0
Authority key identifier: 40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa
Signing time: Mon 13 Mar 2023 15:54:47 +0000
ROA not before: Mon 13 Mar 2023 15:49:47 +0000
ROA not after: Mon 11 Mar 2024 15:54:47 +0000
asID: 267451
IP address blocks: 2804:41b4:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:91:6b:4b:8b:0a:18:af:20:0e:8c:ac:fc:dc:b5:c8:3d:b8:1a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40F0B01508443ECF24946EA682A36F4FC13140B1
Validity
Not Before: Mar 13 15:49:47 2023 GMT
Not After : Mar 11 15:54:47 2024 GMT
Subject: CN=2051A3F50297604617008F227AE1D4AB47173BAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:69:a7:72:90:e3:2b:6c:e5:2a:64:5c:42:70:
bb:0f:bd:16:3c:7f:a4:79:be:c4:2d:c3:fa:18:36:
20:24:19:2e:b7:1e:7f:5c:87:f3:cb:24:33:76:d0:
46:cc:65:52:11:2f:55:e1:c4:c3:1c:cc:4d:1d:2e:
ca:f5:d3:64:b6:62:3c:41:9e:59:39:95:0a:e3:d6:
4e:71:93:0a:cd:af:96:66:68:d7:bd:44:09:05:a1:
e1:fb:89:bf:14:64:3a:80:b0:54:16:9b:8c:ff:38:
fb:3a:de:26:7d:c4:95:d0:02:03:e5:34:5c:3b:e6:
c0:43:4a:e1:df:e1:dc:9b:65:7e:2d:04:83:46:a8:
4d:b7:d7:3d:7b:cb:6f:41:3b:a5:39:75:6b:91:75:
ac:b6:79:0b:c3:0a:a1:48:3b:d5:86:a3:39:2a:60:
d9:5f:e4:b5:a7:02:a0:a4:63:fb:4b:1e:14:24:e5:
23:46:71:f9:b5:b7:08:aa:59:0b:2f:e6:24:8e:61:
9f:4c:47:da:d6:e3:e7:7f:ff:54:71:91:c7:f2:26:
74:d2:93:1a:08:30:a2:35:44:19:c0:9e:95:bb:1f:
fe:4e:e1:08:c8:95:a3:3b:3d:88:5c:f9:80:a4:09:
45:bb:0b:4e:d0:e8:ac:b6:5d:a7:21:34:11:69:2a:
ad:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:51:A3:F5:02:97:60:46:17:00:8F:22:7A:E1:D4:AB:47:17:3B:AF
X509v3 Authority Key Identifier:
keyid:40:F0:B0:15:08:44:3E:CF:24:94:6E:A6:82:A3:6F:4F:C1:31:40:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/40F0B01508443ECF24946EA682A36F4FC13140B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/40F0B01508443ECF24946EA682A36F4FC13140B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHEJuA7monB5FDgF2REPm39VHaiNRam1Qk3EhVm4ST3s/1/323830343a343162343a383030303a3a2f33362d3336203d3e20323637343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:41b4:8000::/36
Signature Algorithm: sha256WithRSAEncryption
06:67:b4:09:b1:d1:ee:f1:b3:c5:4c:bd:3b:56:3a:60:f6:8e:
0d:ca:5f:92:d5:4e:1b:23:de:fa:ba:59:a1:d6:3d:29:81:a1:
b2:95:f9:06:8d:a3:92:06:c1:e2:ec:d6:5e:45:ac:9e:98:39:
5d:02:63:19:04:e7:5d:79:87:68:bf:13:03:f0:29:43:08:84:
19:d8:40:a2:e2:ba:87:c6:f8:7a:9d:46:bb:d4:3e:99:80:c8:
cd:bc:92:c0:67:d8:1c:8e:d0:db:7d:5a:2d:53:ad:cc:82:26:
98:f4:55:99:1f:d3:40:2a:10:33:67:be:14:67:e9:09:cc:c7:
6a:4b:a1:15:9f:47:19:d2:a8:7c:31:45:f8:d1:6a:4d:84:fb:
a0:34:2d:12:a0:03:75:ba:13:2e:a2:87:e1:ac:5b:db:eb:85:
9a:b9:56:e1:62:94:27:50:07:ee:19:13:ca:a9:02:1e:4d:20:
6f:ce:58:34:42:c7:60:ec:52:2f:ec:88:b4:75:08:9a:2a:0c:
b0:b0:d7:01:30:0f:e9:bf:af:f7:96:cb:8a:69:02:74:77:30:
b6:0a:00:84:57:be:61:de:2e:ea:b1:55:a9:ba:40:65:59:2e:
4e:98:9e:4b:b8:bf:35:9a:03:73:0f:41:42:f2:61:b8:21:21:
1d:12:5b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 06:07:41 2025 by rpki-client