Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa
File: 323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa (raw, json)
Hash identifier: KGWaSNK43AifoX2EUSzNgOQQmobXbkQZ7oENLu+q9d8=
Subject key identifier: A7:FB:83:03:01:AE:2C:8A:75:BD:F3:DE:91:A6:28:4D:D8:FC:3A:E1
Certificate issuer: /CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Certificate serial: 1B188D1FE8B13305013A30C87D39E65B57EC32B2
Authority key identifier: 7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa
Signing time: Fri 06 Sep 2024 16:53:57 +0000
ROA not before: Fri 06 Sep 2024 16:48:57 +0000
ROA not after: Fri 05 Sep 2025 16:53:57 +0000
asID: 273497
IP address blocks: 2804:8f8c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:18:8d:1f:e8:b1:33:05:01:3a:30:c8:7d:39:e6:5b:57:ec:32:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3
Validity
Not Before: Sep 6 16:48:57 2024 GMT
Not After : Sep 5 16:53:57 2025 GMT
Subject: CN=A7FB830301AE2C8A75BDF3DE91A6284DD8FC3AE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:53:f9:75:88:75:36:78:2d:c8:a1:4c:9e:30:
52:17:8e:4b:2e:36:7b:b0:e4:5c:e2:c3:1f:ef:26:
9e:3c:b0:60:b7:c0:fc:09:82:8f:13:23:f5:f6:dc:
fa:cf:75:b6:bb:8a:48:24:38:18:94:ef:7e:46:b3:
9c:01:68:a9:0e:08:13:40:56:14:85:3a:ba:63:70:
0d:2e:15:5f:f5:e2:00:8a:e0:b9:f7:c9:26:63:d2:
30:72:82:63:09:1a:e1:b5:0d:b0:17:88:1d:5d:5b:
21:df:90:49:24:5d:52:1d:77:b5:df:b6:bf:76:34:
ed:23:78:71:e1:ad:cd:16:14:3d:ad:d2:55:e4:a2:
c7:d9:8c:66:dc:7f:73:21:d2:f8:f8:2c:67:70:9a:
4f:0b:c0:9e:98:66:75:dd:98:ff:0b:c0:69:fb:f5:
a1:b5:23:ee:26:51:15:d3:2b:8d:29:a4:1f:6d:47:
0a:30:40:65:85:b1:d3:61:53:ee:27:99:04:18:01:
2c:3b:47:36:63:c8:d4:a6:2c:a3:67:b4:41:1d:c3:
9a:84:74:fb:6d:b1:6c:ae:e6:90:60:a3:76:36:a3:
88:31:35:43:d0:d3:dd:8f:74:7b:d3:f1:02:95:4d:
01:85:3a:00:f5:56:80:c4:a3:08:b7:d8:17:b9:66:
28:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FB:83:03:01:AE:2C:8A:75:BD:F3:DE:91:A6:28:4D:D8:FC:3A:E1
X509v3 Authority Key Identifier:
keyid:7D:68:B4:A5:CB:64:CC:B1:93:2E:38:B5:F2:2C:05:FF:0D:D1:3F:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7D68B4A5CB64CCB1932E38B5F22C05FF0DD13FC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GagCNRKna5a18Ur5dUrPeGjaiDuv6qQ84bdivQ5e2sbt/0/323830343a386638633a633030303a3a2f33342d3334203d3e20323733343937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8f8c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
36:f9:58:47:8e:c9:12:c1:76:fd:35:48:99:65:df:03:e3:e4:
b3:9a:75:7c:a1:79:4c:eb:9d:60:6b:3f:1c:5f:50:2f:d6:ac:
7e:6e:1c:a9:c6:4c:3d:3f:60:0a:3b:ed:a2:d3:18:ed:ae:56:
c3:28:da:dc:e1:d0:b1:2b:b0:dd:3b:f0:34:78:bd:fb:06:a6:
27:29:af:34:78:bf:b4:b1:43:69:ee:1f:f0:ce:24:57:03:fe:
d9:01:c8:29:02:e8:ab:7d:2b:d2:65:75:9b:3d:de:f3:80:21:
89:fd:ea:aa:b2:c1:39:23:b0:bf:89:05:cc:ab:28:d0:3e:ac:
18:27:1a:6b:e8:0e:39:88:25:99:dd:9c:ca:f0:5b:0d:8e:a2:
5a:09:65:f7:5a:1c:da:33:ac:e5:db:d4:a3:a3:a4:b7:89:24:
34:e4:f6:46:e4:75:eb:89:1c:40:09:99:6d:fd:23:ea:df:57:
bd:c2:4c:99:ae:f2:e4:f7:9f:0d:2f:66:1c:78:31:1e:26:97:
7f:2e:95:b9:be:db:48:db:ad:a6:46:e0:c6:df:00:42:35:d7:
e2:39:48:9d:d1:52:fc:73:09:76:9f:fa:61:2a:e0:99:e7:7f:
f2:ca:c0:be:fe:66:12:9a:d1:45:57:fd:32:99:02:20:b1:ad:
48:55:34:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:28:48 2025 by rpki-client