Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa
File: 323830343a3462343a3a2f33332d3333203d3e20323632343630.roa (raw, json)
Hash identifier: srilESbXze/l4R+zAP06NXoVjl/B5f17zCEhVGS41A4=
Subject key identifier: B0:79:FC:39:2C:25:91:54:AF:F7:FE:E5:B0:DC:71:5F:13:47:B1:4A
Certificate issuer: /CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Certificate serial: 691444CC4D3EB70D3DC395661A61C4339C1A02B9
Authority key identifier: 32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa
Signing time: Tue 07 Jan 2025 19:19:43 +0000
ROA not before: Tue 07 Jan 2025 19:14:43 +0000
ROA not after: Tue 06 Jan 2026 19:19:43 +0000
asID: 262460
IP address blocks: 2804:4b4::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:14:44:cc:4d:3e:b7:0d:3d:c3:95:66:1a:61:c4:33:9c:1a:02:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E
Validity
Not Before: Jan 7 19:14:43 2025 GMT
Not After : Jan 6 19:19:43 2026 GMT
Subject: CN=B079FC392C259154AFF7FEE5B0DC715F1347B14A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:7c:0b:24:d6:fc:31:76:97:ac:3e:41:61:
22:44:64:cf:9f:37:95:22:16:fe:00:ee:40:28:38:
97:78:5b:7e:13:19:89:c6:bb:d8:8a:9c:bf:97:c8:
a4:30:28:a6:63:08:b4:a9:81:e5:89:b9:30:46:2b:
7e:e2:54:cc:f6:1e:81:46:96:36:38:3e:3d:d4:5d:
17:9a:67:0a:76:d2:42:4f:12:20:d7:99:e5:82:9e:
5d:cd:d2:fe:be:a9:fb:ba:9f:29:46:b5:5b:36:e2:
54:cf:4f:5c:3a:71:d1:bd:a3:f6:0f:f1:0e:69:a2:
15:79:50:1f:b3:ba:90:c5:b8:57:2d:a3:e6:1f:a5:
e6:ac:f3:5c:1b:bc:88:17:7d:19:a4:d5:ed:45:13:
2a:ce:4a:08:07:a4:dc:79:2e:5f:ab:1d:43:6f:20:
58:ec:c9:97:e4:b4:b0:91:0b:5b:0b:c6:f2:16:d9:
c8:6b:4a:ee:f3:1c:d9:30:1d:c1:db:08:96:48:c9:
1a:3a:0f:af:25:2b:50:44:54:d6:1e:5f:3e:15:31:
14:71:6c:41:fa:f0:63:d5:ef:4b:08:4b:e6:83:94:
1e:1c:eb:01:11:48:66:8a:4b:09:d3:b8:d2:38:3b:
57:7f:12:90:50:01:ce:88:38:1a:9c:ce:0e:bb:ca:
37:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:FC:39:2C:25:91:54:AF:F7:FE:E5:B0:DC:71:5F:13:47:B1:4A
X509v3 Authority Key Identifier:
keyid:32:4A:8D:C3:B7:8A:5D:18:1C:0D:AC:3F:C7:D5:A5:F1:48:E0:23:5E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/324A8DC3B78A5D181C0DAC3FC7D5A5F148E0235E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GctGUw1naZxQ9w8DDUqYPehBYFi2wHt9jLbtGKFi4TZN/0/323830343a3462343a3a2f33332d3333203d3e20323632343630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b4::/33
Signature Algorithm: sha256WithRSAEncryption
af:1e:95:b9:98:b1:e2:7d:e0:08:56:fd:3a:a3:3a:92:a5:6a:
a1:95:16:d3:2b:f2:75:ee:23:c0:1e:f9:09:96:8a:77:2a:e2:
a7:27:47:97:e5:9f:6b:cc:e5:39:90:31:41:7f:9c:21:ad:96:
fe:1b:a2:2a:6d:37:ad:a7:39:af:ab:83:c5:e9:c1:ad:3d:3a:
3a:cd:7b:2a:a7:b9:1a:01:f9:1b:a9:2d:96:e5:de:1c:88:dc:
58:8e:6a:3f:e7:25:75:cf:83:d7:83:13:e4:52:ec:b2:a7:44:
49:69:9f:84:1f:a1:87:41:7a:07:24:2d:26:1b:3c:95:11:79:
d6:a2:11:18:b1:e7:f9:85:67:be:38:f7:51:cf:42:de:36:41:
81:fd:d3:d0:8e:25:e7:83:7f:7f:b8:3c:36:f7:e0:ba:a4:61:
76:f3:ce:5a:85:08:2a:9d:c2:ca:33:43:33:af:e8:10:34:de:
9a:52:1c:3c:8a:1a:71:12:c2:96:c2:bd:80:37:7c:db:96:36:
93:08:f7:14:38:e8:73:f2:31:35:21:72:93:73:83:cb:f9:e0:
e0:7b:a5:62:4a:11:84:db:7b:56:51:d6:84:13:71:12:1a:7d:
d3:80:cf:bd:4a:7e:4c:e7:a2:f0:bc:9b:72:f7:74:15:6d:8b:
35:18:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 05:31:32 2025 by rpki-client