Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323830303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a323830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: Abc3YlPA2aiBKgJQ2Adck2M8nvSw8xVbSGSwxRROSLI=
Subject key identifier: B8:B9:F4:8C:85:11:B8:F6:E4:1C:2F:D5:4D:CF:5F:EC:6B:5D:27:09
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 32047ECD6444062E002F3E3E30F4CB69A450A896
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323830303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:28 +0000
ROA not before: Thu 03 Nov 2022 18:38:28 +0000
ROA not after: Thu 02 Nov 2023 18:43:28 +0000
asID: 269463
IP address blocks: 2804:6504:2800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:04:7e:cd:64:44:06:2e:00:2f:3e:3e:30:f4:cb:69:a4:50:a8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:28 2022 GMT
Not After : Nov 2 18:43:28 2023 GMT
Subject: CN=B8B9F48C8511B8F6E41C2FD54DCF5FEC6B5D2709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:51:ad:84:31:2d:13:cb:7b:24:be:17:0a:
6b:80:09:71:88:da:f8:3a:f7:29:00:e2:ac:4d:97:
78:46:d2:4a:17:8c:7b:c4:30:c7:ee:3e:7e:39:ff:
80:95:03:d4:54:cd:81:84:92:af:90:b0:75:d5:ab:
2d:34:78:02:1b:39:2c:53:3a:eb:55:97:03:7a:06:
3b:62:7a:9f:87:57:c9:95:61:15:2b:7d:a4:b7:cf:
be:5b:00:6c:85:44:b8:1b:18:61:90:91:a8:4c:bf:
f6:dd:bf:db:4e:ec:db:a2:7e:a6:11:7d:b6:a3:ca:
0a:27:a1:95:c1:15:bf:05:13:bf:f8:8d:47:33:fc:
99:24:5e:e1:fc:99:92:e9:20:01:64:f7:f9:6c:b5:
27:95:7b:0c:46:c0:18:b6:9a:82:99:d6:d1:58:19:
f0:b3:ce:08:6c:fa:8f:55:c2:8a:06:2c:fe:23:1e:
79:79:10:9f:14:6b:24:3a:02:3b:30:27:8b:38:59:
92:72:6a:6a:3f:f3:ad:00:ba:58:b3:ac:dc:28:b1:
f4:1b:70:3b:25:89:fa:e0:3d:89:d3:16:4a:0f:b5:
3b:f1:20:60:f3:96:48:47:e4:a2:50:dc:1d:4d:ae:
72:d3:ea:cf:0d:48:b7:d0:9b:2d:f6:58:98:1a:df:
53:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B9:F4:8C:85:11:B8:F6:E4:1C:2F:D5:4D:CF:5F:EC:6B:5D:27:09
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a323830303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:2800::/38
Signature Algorithm: sha256WithRSAEncryption
94:0d:4a:a3:89:5d:40:87:28:bf:f6:1f:df:77:6e:33:39:5d:
97:c7:fd:63:be:31:14:78:b6:f0:b6:a5:93:49:25:33:a1:c8:
f0:ab:a7:b9:74:41:d4:6f:37:09:d4:94:a1:74:8f:d8:7f:c3:
9e:10:f5:91:8c:3d:ff:d4:f5:95:aa:41:5b:2a:03:f5:f7:c1:
43:5b:45:d7:e7:40:a1:ed:79:0f:78:9c:cd:a4:f6:8a:92:0f:
26:ee:5c:08:47:ea:07:c1:01:a3:1d:6d:b2:0a:90:0d:bd:65:
6d:2c:57:ad:5a:1d:07:99:ab:27:57:a1:4d:e6:4e:25:90:21:
22:27:f2:21:57:e3:50:aa:57:dd:ee:91:6a:4a:79:95:ed:6f:
e4:12:d7:37:9f:d5:bd:06:ca:47:4a:af:10:9b:97:14:89:f5:
65:ae:cf:0f:79:03:df:93:43:62:d1:5d:f8:b3:5c:8c:c0:1e:
59:0c:6b:aa:75:ae:58:3a:cc:b6:53:1e:bd:83:7f:9b:2a:97:
b3:06:45:d5:fd:1b:01:d1:b0:a1:ef:a0:93:e7:2c:f5:a8:68:
de:94:fa:d4:06:09:37:00:20:dc:ec:2d:67:06:ea:79:b5:7f:
98:07:82:65:88:29:4f:8d:ce:f7:f5:01:d0:10:6c:80:40:f6:
35:47:df:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:50:04 2025 by rpki-client