Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a343030303a3a2f33342d3334203d3e20323635323639.roa
File: 323830343a326434303a343030303a3a2f33342d3334203d3e20323635323639.roa (raw, json)
Hash identifier: c1K52VrL7/xg4fpRG1MNdIH0YEUzZQrlfHuxRyxPt7Q=
Subject key identifier: 4F:94:36:18:1A:D9:88:3D:8A:EC:A7:BE:29:CA:64:27:C0:2C:89:35
Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial: 6605427622A0AF051591EA766AE4902445925A2F
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a343030303a3a2f33342d3334203d3e20323635323639.roa
Signing time: Tue 28 Jan 2025 14:17:39 +0000
ROA not before: Tue 28 Jan 2025 14:12:39 +0000
ROA not after: Tue 27 Jan 2026 14:17:39 +0000
asID: 265269
IP address blocks: 2804:2d40:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:05:42:76:22:a0:af:05:15:91:ea:76:6a:e4:90:24:45:92:5a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Validity
Not Before: Jan 28 14:12:39 2025 GMT
Not After : Jan 27 14:17:39 2026 GMT
Subject: CN=4F9436181AD9883D8AECA7BE29CA6427C02C8935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f4:eb:f2:b2:f8:ee:78:e1:22:65:bf:a5:c2:
10:52:3b:c2:59:26:4e:e2:50:ca:a0:fd:53:b6:89:
fa:17:91:f1:1b:1d:e3:34:88:f6:c4:20:08:cd:5a:
f7:9f:b2:f3:c8:70:8a:a7:e6:ac:56:7d:84:5b:2b:
19:40:68:14:d4:ca:88:0b:ba:56:65:c3:7d:15:b7:
da:3b:01:e3:6c:26:d2:9a:e5:4f:b2:c2:e3:e2:57:
03:10:1b:7e:6c:fb:4d:6c:7d:31:a1:bc:07:95:72:
27:e4:e8:63:b2:53:21:e5:5c:98:92:ef:aa:44:d8:
d4:fb:cc:12:d5:0d:e7:fa:84:2a:a2:50:18:0f:f7:
66:e2:1f:90:f7:1a:f5:8e:3d:ac:4b:2e:a6:28:43:
0d:e9:dd:40:81:80:45:f9:a9:9f:64:b4:48:66:cc:
d1:d4:94:2e:17:6a:bc:c7:10:94:52:d6:3e:68:aa:
c0:28:0b:65:db:7b:e0:c1:39:3d:81:d1:62:aa:23:
81:4a:da:61:7c:f8:c6:d8:08:b9:96:1b:78:33:a1:
20:bb:2b:68:ed:80:05:b5:c2:9c:2e:12:94:e1:d4:
b9:b5:aa:21:70:a6:cc:88:db:ae:e6:29:95:d0:20:
b2:2f:6e:c2:4c:36:da:05:6d:e7:ed:43:16:99:2d:
a3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:94:36:18:1A:D9:88:3D:8A:EC:A7:BE:29:CA:64:27:C0:2C:89:35
X509v3 Authority Key Identifier:
keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a343030303a3a2f33342d3334203d3e20323635323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d40:4000::/34
Signature Algorithm: sha256WithRSAEncryption
ad:69:b7:21:e4:94:2c:1b:5f:aa:6a:c9:45:47:0c:f1:6c:81:
00:0c:55:26:61:be:52:58:57:1d:8e:d3:54:b7:28:3f:f6:6b:
da:57:71:a3:68:5a:e0:6f:5c:14:36:cb:89:c1:9b:e9:cd:9f:
8c:6e:f7:08:61:a8:b2:13:23:c2:51:3a:b5:a3:8a:19:ee:59:
b7:c0:18:a2:4e:f8:21:45:ef:da:11:ed:75:94:1f:b9:a8:c7:
05:13:98:75:8a:f5:69:da:de:0c:92:5f:09:17:e6:92:d8:9c:
89:33:84:29:35:7f:aa:38:18:d8:1b:90:94:5c:61:6b:ff:7e:
dd:f5:7a:d1:0d:6e:6b:10:40:b0:7b:24:36:0b:45:fd:50:ec:
22:fc:82:03:88:05:a3:a8:8b:d5:4c:e5:d8:e6:e7:c5:4d:a7:
c6:41:27:c5:4c:77:79:68:22:a6:24:40:70:a3:2a:81:ff:01:
ad:6c:d5:e1:c2:36:61:de:2a:81:11:01:e6:d3:d2:7c:13:22:
28:de:99:44:4b:fa:45:e0:1d:cf:0e:83:ba:a3:6a:3b:42:25:
ca:8c:62:9f:f8:77:b2:e0:2c:4a:39:45:d7:22:79:c5:ea:69:
05:a2:4f:6a:1c:5a:72:74:b9:5b:5f:a0:40:e4:94:28:dc:3c:
9a:2c:87:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 20:46:26 2025 by rpki-client