Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333830303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a333830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: ci1djgihJtwXpvBm2DhULkOu+OJA9twPQQu3gU40lVc=
Subject key identifier: FE:D4:76:35:71:62:C4:D8:6D:E0:D6:C2:29:74:12:F4:B0:B6:48:FC
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 69E7BC225A3BD0FC283292830F6BEE1BB2F56E77
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333830303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:22 +0000
ROA not before: Thu 03 Nov 2022 18:38:22 +0000
ROA not after: Thu 02 Nov 2023 18:43:22 +0000
asID: 269463
IP address blocks: 2804:6504:3800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:e7:bc:22:5a:3b:d0:fc:28:32:92:83:0f:6b:ee:1b:b2:f5:6e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:22 2022 GMT
Not After : Nov 2 18:43:22 2023 GMT
Subject: CN=FED476357162C4D86DE0D6C2297412F4B0B648FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:69:4d:21:8f:97:e2:12:5c:42:62:4b:f8:63:
f7:95:17:da:f8:74:c1:d8:96:b9:24:c5:f6:05:b7:
b2:f2:be:e5:c5:81:71:8d:0f:b5:dc:b7:59:08:61:
c9:80:eb:35:61:f0:b7:ff:81:01:69:db:38:b3:ea:
08:8c:03:5c:c8:0d:56:a1:8b:76:86:9c:bb:74:f4:
b4:a2:8c:9a:f7:6c:b8:9f:a8:75:a0:46:75:6d:62:
5b:d5:2a:24:5a:cd:ff:9c:88:f0:ff:44:61:12:40:
a4:73:10:63:e4:0a:94:23:10:6b:f7:bd:87:43:b1:
de:d2:73:cd:9f:47:88:2c:d2:66:28:ad:78:f2:04:
dc:87:8c:23:d7:a7:bb:65:51:23:39:f3:46:84:61:
bd:02:cc:e3:c0:da:58:c0:fb:b9:04:f5:88:13:d0:
85:c1:3b:65:ec:d2:fa:12:58:da:0f:01:7c:74:5d:
70:9d:e0:d4:d3:39:64:e3:ca:af:d5:91:c8:cb:0e:
1e:16:20:66:2c:3f:ca:95:69:56:d7:8d:6a:76:9c:
c1:ba:c7:7f:72:4c:69:c4:21:70:3c:c3:61:52:49:
7d:21:3f:d8:47:2c:e1:80:22:a1:84:bd:0e:cc:4d:
d9:df:56:58:f3:e7:b5:fa:11:fe:ff:94:f4:e0:8e:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:76:35:71:62:C4:D8:6D:E0:D6:C2:29:74:12:F4:B0:B6:48:FC
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a333830303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:3800::/38
Signature Algorithm: sha256WithRSAEncryption
33:14:29:97:76:1b:35:34:ac:b5:57:6d:7a:fd:83:a6:3f:56:
c5:4a:0d:3a:da:4d:98:19:81:85:fd:b9:e8:c2:25:fc:82:4d:
a0:e3:c9:47:98:e7:fe:65:99:44:42:0f:65:17:36:5f:73:62:
4b:5a:6a:6f:84:f5:bb:d6:9b:c3:0d:80:79:e9:1f:60:ef:48:
f7:84:c2:cf:4e:bd:af:cf:8a:d6:d5:08:b0:75:60:2d:e6:e4:
7d:9f:a3:f1:93:8f:74:85:5a:66:18:ee:34:88:8f:7b:02:5d:
32:88:d6:2c:27:65:f8:86:f6:8e:48:b4:c1:58:0f:1f:1e:48:
05:33:e6:b1:34:b7:e8:7e:c6:d0:4d:55:b4:3b:f0:83:73:a0:
5b:50:ae:61:c4:4f:5e:47:0f:94:04:e4:36:1a:63:e9:8d:3f:
a4:ad:cf:b0:2d:44:c2:d9:5b:cc:50:7a:8d:6c:d5:45:a8:18:
6e:cd:60:74:71:57:19:78:d2:c2:2e:84:a5:b0:81:be:3b:d4:
54:ac:b6:a5:2d:b0:3f:98:54:12:5c:fb:e5:f4:a9:59:d2:dd:
68:cf:28:6c:8e:d8:51:7c:37:fd:a9:3e:d9:9b:73:f9:48:f8:
7d:cc:85:a5:53:91:60:ce:1d:3d:5b:98:99:84:52:7f:ad:3f:
ad:b0:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:49:37 2025 by rpki-client