Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3438203d3e20323637353432.roa
File: 323830343a343330303a3a2f33322d3438203d3e20323637353432.roa (raw, json)
Hash identifier: GIGHAfvQ0uaiaMZ9qXQg1yB+jtky+oLsVFn9+i5aGec=
Subject key identifier: D9:C4:E9:95:86:12:59:F4:78:C2:04:11:FC:10:9F:4B:B7:BC:86:6E
Certificate issuer: /CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Certificate serial: 4A49125FDEBA019C6805A892508FB53D6C9F3A27
Authority key identifier: D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3438203d3e20323637353432.roa
Signing time: Wed 22 May 2024 11:53:34 +0000
ROA not before: Wed 22 May 2024 11:48:34 +0000
ROA not after: Wed 21 May 2025 11:53:34 +0000
asID: 267542
IP address blocks: 2804:4300::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:49:12:5f:de:ba:01:9c:68:05:a8:92:50:8f:b5:3d:6c:9f:3a:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D18394BAA91A5D89736A3DB4C144FDC15F2EB677
Validity
Not Before: May 22 11:48:34 2024 GMT
Not After : May 21 11:53:34 2025 GMT
Subject: CN=D9C4E995861259F478C20411FC109F4BB7BC866E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:14:88:0f:bf:3f:61:35:95:11:f3:00:94:
44:b5:e4:97:5c:19:81:08:34:97:43:4c:d0:09:1f:
51:b7:50:fd:0e:66:03:98:f3:16:f6:c4:12:46:b9:
bf:57:f9:7c:a2:32:b5:ce:88:05:2d:73:51:94:79:
0b:1d:36:3c:d8:21:9e:d3:f7:23:3b:24:16:93:ab:
89:ff:87:8f:2d:c9:e5:64:0d:83:fd:48:46:96:81:
17:87:d7:de:e5:25:25:d0:a9:a0:80:a8:77:7b:ec:
61:48:8e:fa:dc:bf:ef:3d:b9:75:e7:45:d0:8d:7d:
69:47:d6:c2:fe:8a:4c:a3:45:e7:84:80:4c:7e:18:
d9:67:b7:1e:2f:91:a6:45:a2:dc:b4:8d:53:2e:94:
35:38:c3:ac:d4:93:ac:ea:b8:48:ed:9f:4f:64:8f:
ca:d4:dd:e3:de:3c:2a:f7:97:28:7d:77:ea:97:f1:
a6:ea:9f:62:5d:38:9a:fa:6e:3f:fb:2e:fd:e2:d0:
3d:9c:61:37:15:f5:4f:d3:dc:0b:8d:06:82:03:79:
1a:4e:1e:84:41:b5:47:63:9c:b1:51:16:24:a3:58:
d5:4b:80:75:7a:ed:c6:d2:8d:72:a1:48:26:c8:5b:
95:f5:39:06:d4:52:ea:63:db:c2:66:85:bf:19:ff:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:C4:E9:95:86:12:59:F4:78:C2:04:11:FC:10:9F:4B:B7:BC:86:6E
X509v3 Authority Key Identifier:
keyid:D1:83:94:BA:A9:1A:5D:89:73:6A:3D:B4:C1:44:FD:C1:5F:2E:B6:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D18394BAA91A5D89736A3DB4C144FDC15F2EB677.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GJ56oSfruP9FjS6sr749N4ndgTJnARkypfungt127aRH/0/323830343a343330303a3a2f33322d3438203d3e20323637353432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4300::/32
Signature Algorithm: sha256WithRSAEncryption
42:e9:7a:3c:17:75:f9:40:d8:f6:fa:ee:04:a9:e9:31:b1:bf:
bc:64:3b:f3:23:f9:d8:37:ca:39:e0:c5:9d:af:3e:85:b4:ec:
8f:13:de:63:88:68:c3:ee:50:a6:42:50:dd:12:d1:8b:16:8b:
20:e3:82:c6:a3:0a:2d:fd:b6:91:da:e9:64:57:4e:3a:96:5e:
43:6a:01:09:9d:30:8d:5e:44:3c:17:1a:c0:ca:21:32:a2:d4:
47:21:7f:de:5e:1d:f6:f3:32:fd:ee:8f:ed:db:7b:a3:73:61:
09:b9:1b:05:79:fe:e0:ba:f9:94:d4:d0:1f:aa:9c:d7:69:1d:
78:5c:96:b7:25:25:7d:fc:cf:b9:f2:24:b3:13:12:a8:01:a1:
6e:c6:64:46:f1:8a:cf:2a:81:c6:87:e5:48:be:99:c9:dd:fe:
ce:f3:25:b2:b6:b3:83:b4:06:4f:52:29:6f:7a:99:13:a4:92:
c6:8f:a3:59:d1:98:3d:22:e5:68:ce:be:fc:4d:70:96:89:72:
25:b5:58:9e:16:95:55:2a:db:f4:ab:63:83:e0:35:14:98:57:
ab:9b:22:54:93:40:9e:f7:cf:64:00:77:52:0a:be:79:a2:16:
47:a0:b8:cf:6e:bd:cd:12:07:05:28:af:a2:a6:08:7c:39:2e:
d5:1f:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:41:27 2025 by rpki-client