Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33342d3334203d3e20323635323639.roa
File: 323830343a326434303a3a2f33342d3334203d3e20323635323639.roa (raw, json)
Hash identifier: X4SZTbBYO9IQf2TgYkHSrqfuuv74hQXNOeik7BvkuFE=
Subject key identifier: 86:9C:01:ED:A9:46:9B:00:0F:00:B5:39:F9:72:44:2D:FA:01:EF:8B
Certificate issuer: /CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Certificate serial: 1D5363DC190C13EEB0753F9476628DC2F640EA11
Authority key identifier: C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33342d3334203d3e20323635323639.roa
Signing time: Tue 28 Jan 2025 14:19:00 +0000
ROA not before: Tue 28 Jan 2025 14:14:00 +0000
ROA not after: Tue 27 Jan 2026 14:19:00 +0000
asID: 265269
IP address blocks: 2804:2d40::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:53:63:dc:19:0c:13:ee:b0:75:3f:94:76:62:8d:c2:f6:40:ea:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C11AA9A7A538C22A0258E74DEBE32F5B6628E186
Validity
Not Before: Jan 28 14:14:00 2025 GMT
Not After : Jan 27 14:19:00 2026 GMT
Subject: CN=869C01EDA9469B000F00B539F972442DFA01EF8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:f8:44:ee:b3:e2:77:95:a8:01:66:34:fa:
c7:aa:7d:e9:83:a1:1f:48:f3:a2:87:dc:24:b5:a5:
67:0b:77:97:be:2f:cf:4f:35:9b:ca:9f:68:76:bc:
d6:aa:fc:24:79:7c:bd:76:17:bc:57:d4:11:d5:50:
50:57:b9:7d:ee:46:ab:63:bb:4b:31:f6:6e:f7:d6:
ce:e7:df:95:c8:40:b1:d4:ae:57:00:b2:58:d5:c5:
b7:85:cc:ed:39:6b:36:5a:fc:d5:30:8b:0b:75:67:
a2:7a:8b:c6:16:ef:fb:73:9e:e0:bd:ac:1e:c8:8e:
64:dd:bb:dd:4a:26:7b:9f:fc:0c:ee:fa:19:2b:88:
97:af:04:af:03:a0:9d:be:c8:e8:95:ba:3b:56:26:
76:41:b3:ae:4c:bc:59:1a:2c:17:33:61:0d:db:36:
54:5c:63:11:69:dd:1c:f6:55:91:86:57:f5:51:f7:
69:40:9f:8d:85:05:b3:6d:6e:33:f3:67:0d:c8:13:
ae:ab:ca:44:f0:25:1a:24:e5:72:21:30:91:4b:63:
f4:5a:f4:eb:cb:2e:ce:e0:a2:67:e0:14:2c:8a:45:
34:8b:bc:02:0d:16:e9:fc:d4:8c:e0:35:88:63:3d:
f4:f8:44:89:69:75:03:13:72:f6:6b:0c:d1:b7:0b:
23:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9C:01:ED:A9:46:9B:00:0F:00:B5:39:F9:72:44:2D:FA:01:EF:8B
X509v3 Authority Key Identifier:
keyid:C1:1A:A9:A7:A5:38:C2:2A:02:58:E7:4D:EB:E3:2F:5B:66:28:E1:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C11AA9A7A538C22A0258E74DEBE32F5B6628E186.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33342d3334203d3e20323635323639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d40::/34
Signature Algorithm: sha256WithRSAEncryption
b7:a3:16:29:e7:09:3e:9d:16:ad:6a:b3:52:53:1f:ff:fc:36:
a2:51:86:fe:7a:95:4d:7c:84:2b:0e:63:06:05:94:67:89:3f:
40:05:b8:71:90:36:92:eb:aa:d5:b3:93:ca:06:c6:92:8f:cc:
b2:a1:30:07:53:5c:62:e6:6e:d8:4d:bd:52:d0:87:06:61:83:
c1:2e:06:66:ed:5d:92:29:17:9c:38:7a:5f:f9:07:86:00:31:
21:e3:86:cc:8a:39:94:93:fa:5d:11:1e:01:23:89:ad:85:f0:
5f:1d:ea:3c:6c:20:f9:68:d5:eb:50:85:0a:25:e5:cb:7f:b2:
db:ea:6d:f9:44:a4:a9:72:ae:26:94:24:9a:bc:7e:59:12:1d:
37:67:cf:78:44:3c:22:ba:80:d0:f9:04:dd:11:9b:b5:ce:42:
3d:a8:22:84:cc:54:29:50:d8:76:b3:86:88:b7:08:16:0a:5f:
4f:4b:ba:75:4c:13:c9:df:27:38:ac:9d:21:0c:d8:ef:2a:95:
69:5d:76:07:c5:2a:89:6a:62:8d:f3:f0:e9:86:f8:a5:f1:cf:
44:63:01:44:1a:f1:3e:52:13:90:a0:66:0f:17:0c:34:87:63:
18:53:9c:2d:da:1e:ee:43:5e:ed:85:8f:54:54:f8:8b:a5:02:
40:e9:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:26:22 2025 by rpki-client