Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a383030303a3a2f33332d3333203d3e20323632343630.roa
File: 323830343a3462343a383030303a3a2f33332d3333203d3e20323632343630.roa (raw, json)
Hash identifier: up2JsN1cqKQiFJ+mBCET67vHNqZMCXg9vkJHlRVt5RY=
Subject key identifier: 99:A4:65:8F:CB:CE:15:94:59:34:A4:EE:80:D3:07:59:A6:E7:62:F5
Certificate issuer: /CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Certificate serial: 6D9BB0BA54BD728A940AC0C9809093E9F08D7176
Authority key identifier: 32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a383030303a3a2f33332d3333203d3e20323632343630.roa
Signing time: Tue 07 Jan 2025 19:19:43 +0000
ROA not before: Tue 07 Jan 2025 19:14:43 +0000
ROA not after: Tue 06 Jan 2026 19:19:43 +0000
asID: 262460
IP address blocks: 2804:4b4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:9b:b0:ba:54:bd:72:8a:94:0a:c0:c9:80:90:93:e9:f0:8d:71:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Validity
Not Before: Jan 7 19:14:43 2025 GMT
Not After : Jan 6 19:19:43 2026 GMT
Subject: CN=99A4658FCBCE15945934A4EE80D30759A6E762F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b2:41:08:88:09:87:0c:6e:c5:85:74:72:99:
77:21:43:6f:97:0d:d2:3d:33:24:30:b5:28:38:8c:
d9:74:61:14:91:4b:af:47:81:cb:88:53:e6:87:1a:
da:00:89:1c:53:7b:ce:f5:42:ba:a7:64:e4:ce:85:
f2:20:01:24:e3:3a:d3:5a:45:11:0f:e4:75:6c:a1:
f0:f3:08:53:07:7d:52:ad:f2:70:69:56:60:af:70:
86:18:93:50:72:a3:2c:30:fd:c5:55:4d:e8:3a:4b:
e6:79:7e:1d:d9:4a:89:cb:78:9d:af:0b:cd:41:18:
fe:92:03:9a:ec:f6:fd:00:47:c0:22:12:77:66:51:
54:2b:6a:db:b1:ab:20:6e:68:82:9b:da:07:70:02:
9f:21:c9:b1:4c:0e:32:3f:5d:5d:89:08:3e:09:fe:
f5:31:c5:97:d4:63:b9:9a:88:36:60:ec:b0:1a:0a:
56:6d:12:1f:a1:a6:11:d2:7f:16:99:b0:59:4e:90:
63:0f:95:03:06:9e:1d:19:f1:be:40:54:af:b2:56:
a0:53:7f:56:f6:17:21:ef:4b:62:26:8d:13:f9:d0:
5f:9d:69:22:28:8d:3e:00:ae:56:fe:db:b6:ed:d4:
b0:b2:3f:b7:c8:d0:bc:1e:75:17:6a:9a:4b:e4:f9:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:A4:65:8F:CB:CE:15:94:59:34:A4:EE:80:D3:07:59:A6:E7:62:F5
X509v3 Authority Key Identifier:
keyid:32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a383030303a3a2f33332d3333203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
cc:76:4c:8a:08:50:d9:b7:e1:d4:3a:0a:7e:ab:97:4e:63:fe:
1b:f1:21:7b:07:cb:08:15:25:d8:a8:bf:01:4a:68:72:98:9e:
91:50:32:48:90:ca:95:12:03:5c:5f:50:71:cb:5a:d5:86:46:
f2:73:44:82:49:90:d9:bb:76:d4:15:03:e5:3e:50:8d:5b:3a:
3b:e4:45:24:ef:df:9a:8a:a2:73:cb:ba:40:de:73:2b:12:d5:
02:95:24:d5:3c:d2:42:4e:ed:9c:8a:cc:f6:0f:36:8f:32:46:
9d:90:d2:f5:41:eb:09:b6:a3:ca:80:fd:cc:b4:16:0d:0c:d7:
2e:57:67:df:36:7c:f7:69:fd:8c:65:90:0f:a9:b8:c3:16:5d:
a6:1a:1f:15:c1:cc:0a:c6:ee:be:7c:e5:c9:68:29:e7:40:25:
35:4f:b3:04:59:0e:c7:73:4b:49:af:e4:42:16:5e:b0:62:49:
97:c4:1e:b0:1b:2e:b6:95:43:d7:05:9f:dc:23:84:1b:24:8c:
f7:ae:da:cd:1c:d9:21:a7:9b:9a:57:05:2c:7c:f1:68:57:d7:
52:44:65:2e:2a:a4:84:69:6c:03:cc:c3:16:90:04:49:2d:5a:
3c:5d:e4:8c:61:d0:1d:3e:7b:b0:82:12:96:78:cb:cc:f5:2f:
74:6d:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:04:18 2025 by rpki-client