Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: lIXkl5r7mCPBndxjck6WImROENcAUwrnZn7ZcFEn6YY=
Subject key identifier: 16:D7:A2:2E:B0:5C:2B:F0:11:7E:ED:29:B9:C3:89:45:B0:47:A7:AE
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 5EAF1814A7FABFE5DD7FD44D1CE4E239CB69FCDF
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:24 +0000
ROA not before: Thu 03 Nov 2022 18:38:24 +0000
ROA not after: Thu 02 Nov 2023 18:43:24 +0000
asID: 269463
IP address blocks: 2804:6504:4800::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:af:18:14:a7:fa:bf:e5:dd:7f:d4:4d:1c:e4:e2:39:cb:69:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:24 2022 GMT
Not After : Nov 2 18:43:24 2023 GMT
Subject: CN=16D7A22EB05C2BF0117EED29B9C38945B047A7AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:82:b9:13:f4:56:9e:e6:c9:13:79:db:52:
76:fa:6a:94:f0:1b:5a:32:6c:bf:05:f8:16:d9:33:
c2:9f:8b:3e:76:a9:a9:ba:07:9c:01:32:d9:7d:32:
5b:81:96:e7:a1:c0:82:25:2c:71:e9:49:0c:ec:74:
da:e2:5f:c4:af:aa:c8:c4:1c:3d:d6:9c:a3:55:7d:
17:24:09:02:a3:92:1e:ab:cb:65:4f:88:de:17:2c:
d5:de:46:f1:e4:59:4c:27:4d:05:32:e9:16:83:35:
36:90:8b:94:a0:60:b8:a0:24:39:14:c2:14:1a:b3:
26:7e:5c:44:c9:07:86:27:5b:cd:d1:6a:dc:c1:5a:
e9:55:2e:9e:38:39:9f:03:3a:8d:1f:50:fc:d7:4a:
ed:2a:3b:71:00:60:63:a2:d8:48:de:fa:df:04:76:
b1:64:36:00:d0:cb:8d:2e:b6:2b:0d:9c:21:de:4a:
71:8b:79:c6:e1:bb:9c:81:4a:21:8d:d0:1c:ae:ea:
71:50:b2:be:87:8e:d0:ed:39:bf:3c:19:4e:40:11:
d5:b7:c0:38:95:bb:43:58:9f:fe:ba:4d:3b:7f:cc:
72:cf:6d:af:be:ce:45:89:69:cc:84:41:2d:fd:9b:
5c:10:12:19:39:f4:3f:2d:da:a6:ae:24:60:f5:75:
96:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D7:A2:2E:B0:5C:2B:F0:11:7E:ED:29:B9:C3:89:45:B0:47:A7:AE
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a343830303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:4800::/38
Signature Algorithm: sha256WithRSAEncryption
1d:4c:f3:59:d1:de:6f:98:c4:fb:fe:49:64:c3:6b:b1:c9:db:
97:d0:6f:26:17:a3:2c:66:a0:80:67:f5:20:83:65:24:9a:88:
ad:24:90:f1:b3:29:2d:de:9f:10:fe:2d:3c:c3:07:5c:a9:f0:
ed:65:c8:88:15:0c:f7:fb:b0:d1:76:e4:5c:a1:6c:24:37:85:
51:ce:e7:9a:de:98:c4:0a:15:73:1d:65:44:0c:66:26:d2:a7:
ac:d1:d0:98:88:c0:19:df:39:bb:1d:0a:2c:1c:1b:5a:24:2b:
13:fc:fd:dd:34:26:04:df:fe:86:d8:1f:d3:94:7d:74:c8:83:
88:33:19:e0:83:85:d5:1c:b1:41:2c:35:f8:10:37:43:d2:70:
80:86:8d:8c:77:73:57:89:9c:d4:02:7b:29:df:3d:71:70:27:
73:e0:2f:f9:b9:cc:74:2c:b0:e2:aa:62:e7:72:e7:4d:aa:0d:
0f:cf:36:b8:73:0f:9d:b1:b7:12:c9:14:89:fd:06:13:89:e5:
41:73:b9:74:4b:81:f6:85:cf:fa:4c:84:64:94:bf:e2:e1:c0:
3f:a9:bc:5c:2d:4c:c9:89:c8:8e:82:b8:59:d0:62:c9:ef:17:
94:75:9e:2f:dc:3a:fc:04:73:7b:89:bd:09:96:a4:47:e4:cf:
27:a3:a6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:14:44 2025 by rpki-client