Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: urz0X726y78Fp2gtohIvMYCl6K3e0PAaQrbzqbD7E44=
Subject key identifier: 04:DF:DD:21:71:D5:65:1C:F5:E8:D2:A3:28:D4:67:C4:7B:8F:FF:05
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 647173E2F451FD80155F52F01540697485B8B0B5
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:31 +0000
ROA not before: Thu 03 Nov 2022 18:38:31 +0000
ROA not after: Thu 02 Nov 2023 18:43:31 +0000
asID: 269463
IP address blocks: 2804:6504:c000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:71:73:e2:f4:51:fd:80:15:5f:52:f0:15:40:69:74:85:b8:b0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:31 2022 GMT
Not After : Nov 2 18:43:31 2023 GMT
Subject: CN=04DFDD2171D5651CF5E8D2A328D467C47B8FFF05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:3a:df:1f:6a:46:06:d9:fd:cc:ba:bf:4a:
48:e9:a3:1f:96:74:c3:16:26:f0:fd:e7:7c:63:d4:
c2:de:c7:af:6c:d3:94:e2:64:2c:f1:ad:f7:9a:62:
5f:c2:9e:1f:e8:f2:e9:a6:df:4a:8d:e7:9c:13:d3:
aa:01:b1:1c:0a:a6:b7:f2:5b:37:21:04:31:a3:27:
e1:c9:74:af:ad:13:df:73:f9:4c:76:6f:a6:99:5d:
15:fe:86:dc:6f:bd:f0:4b:0d:0e:fe:f2:e7:c5:26:
c8:77:0d:d0:ac:ae:a0:38:e7:4d:11:7c:98:ee:30:
d0:86:1c:d8:bd:04:fd:b0:42:ae:4b:b7:53:a3:6a:
a6:b0:cd:b0:ed:e0:84:98:c1:9c:4f:fc:87:ce:d6:
92:2c:18:0a:3a:83:dc:6d:a8:f8:dc:c0:b5:96:a9:
ab:8e:2a:49:d6:8e:0b:2c:63:b0:4a:f3:d2:80:3e:
04:2c:12:42:2d:83:0a:67:8c:41:c6:8f:87:62:a7:
3f:45:2c:b1:49:ea:a8:07:3f:97:9b:79:06:cb:5b:
c1:2c:7f:d4:8f:85:ed:66:50:d1:fb:9c:a2:69:74:
15:ae:5d:3a:64:d9:f0:b8:c4:1f:d9:9f:d0:30:e5:
05:5a:fd:2c:1f:c9:d8:99:2e:10:c8:9c:41:73:88:
ec:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DF:DD:21:71:D5:65:1C:F5:E8:D2:A3:28:D4:67:C4:7B:8F:FF:05
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a633030303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:c000::/38
Signature Algorithm: sha256WithRSAEncryption
52:6a:55:62:25:14:62:b7:a0:d3:06:3e:b5:d6:01:d3:ca:09:
5a:2c:c3:cd:71:8f:bb:a3:0f:2d:90:fd:94:79:34:17:f4:ea:
67:39:a4:e2:a9:ea:cb:4e:aa:9c:53:68:59:4d:20:e5:9c:e7:
47:31:92:06:c6:85:68:02:3b:32:25:52:e5:a5:ba:24:82:63:
8b:ae:42:01:f7:2a:c1:cf:ae:fa:88:c4:e4:f9:55:6f:48:84:
07:ff:21:50:22:19:88:34:41:7f:2a:47:24:4a:30:2e:d4:b8:
dd:29:f1:ee:2b:86:46:b8:ff:bd:4c:3c:8e:4a:4d:59:f3:da:
77:3c:67:c9:91:0d:f2:c6:6d:1e:25:98:10:3b:3c:3e:71:5c:
2f:99:90:4d:79:3c:9d:5a:60:59:5c:f3:8b:6a:11:86:b6:27:
a0:2a:61:61:5f:25:f1:88:e1:c1:af:78:a4:d9:c6:c2:d8:78:
c7:35:ad:4f:b7:73:0c:96:37:cf:85:21:ff:2d:40:40:0f:89:
30:1e:d3:84:76:41:a8:df:5e:0d:7f:41:95:23:5d:9e:b4:04:
c4:4d:f2:70:84:7d:1a:6b:aa:1e:f7:3a:56:b4:01:6a:2c:a0:
fc:d7:0e:ab:55:70:ed:1b:49:47:74:9f:d3:f3:bd:21:f1:fe:
55:41:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:43:12 2025 by rpki-client