Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
File: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (raw, json)
Hash identifier: xO1/nRAFvispYNC87CuzbhjHZ8+qCIcPrweIyZV6XJM=
Subject key identifier: 04:26:B8:9F:21:DB:9A:BE:6A:AB:1E:70:C7:1D:3D:2D:C1:19:3B:7E
Certificate issuer: /CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
Certificate serial: 3D970A4F4541ED9EDC87BEC26AA0647C2CA725D3
Authority key identifier: D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
Signing time: Mon 13 Nov 2023 23:38:05 +0000
ROA not before: Mon 13 Nov 2023 23:33:05 +0000
ROA not after: Mon 11 Nov 2024 23:38:05 +0000
asID: 53029
IP address blocks: 2804:628::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:97:0a:4f:45:41:ed:9e:dc:87:be:c2:6a:a0:64:7c:2c:a7:25:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D863FA75123EC7A1F87D434661F5FAB079ADF8BF
Validity
Not Before: Nov 13 23:33:05 2023 GMT
Not After : Nov 11 23:38:05 2024 GMT
Subject: CN=0426B89F21DB9ABE6AAB1E70C71D3D2DC1193B7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:89:c6:51:1a:45:ee:af:12:30:f8:08:31:53:
4b:0c:5a:0e:03:53:c6:b0:b1:d5:21:ac:8b:db:52:
b3:ed:22:02:57:01:40:bb:b4:2b:c8:12:c5:59:6a:
a7:be:88:60:f7:d8:75:99:e6:bd:63:fc:e2:3a:cb:
0b:46:18:7c:15:88:8d:33:da:e0:7a:04:49:34:36:
78:cd:82:46:31:0f:5e:d8:9d:0b:40:a7:79:12:4d:
a2:5c:32:80:2d:69:1b:df:a5:8d:cf:b9:38:18:43:
63:f3:71:89:16:29:d3:b2:c5:af:f2:27:53:de:03:
5d:66:96:84:09:92:f2:44:cd:65:cb:43:9d:e0:4a:
eb:96:75:19:f1:3c:d6:6b:dd:ab:a4:1c:ab:89:53:
40:0e:73:f7:d0:59:2d:71:c6:5a:a1:ba:1f:61:3f:
c0:69:eb:82:9c:41:53:a7:d2:b2:53:25:66:c0:10:
95:5b:2c:29:8d:f0:19:8d:b2:e7:43:7d:ae:6f:cd:
da:76:b7:48:92:6c:2e:08:76:94:31:a7:90:7d:03:
02:1a:a3:f6:7c:8d:52:71:60:f2:94:50:8a:50:49:
3e:39:86:ca:aa:b4:08:0f:e8:9c:73:74:35:2f:3e:
68:75:a6:d5:ff:44:d5:a3:5e:f7:54:e8:b1:e2:7d:
e0:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:26:B8:9F:21:DB:9A:BE:6A:AB:1E:70:C7:1D:3D:2D:C1:19:3B:7E
X509v3 Authority Key Identifier:
keyid:D8:63:FA:75:12:3E:C7:A1:F8:7D:43:46:61:F5:FA:B0:79:AD:F8:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D863FA75123EC7A1F87D434661F5FAB079ADF8BF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/0/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:628::/32
Signature Algorithm: sha256WithRSAEncryption
a7:8c:aa:fe:9c:0b:4c:f8:31:17:a0:77:0e:a9:d6:78:40:15:
41:be:ce:6f:f5:c4:c5:d2:11:4a:dc:92:0d:be:80:84:65:d5:
d7:77:10:79:8c:a1:0e:2b:0f:ff:ad:f2:d3:71:83:4e:8f:0e:
53:eb:1b:a2:55:10:59:e8:fe:5c:3d:19:8b:40:5c:84:3d:41:
db:00:9a:76:c8:fe:e6:0d:f1:b3:61:4c:16:d4:c0:43:dc:18:
11:af:fc:2a:88:49:f4:00:49:a1:9f:b0:28:05:db:a9:51:c5:
ee:dd:1c:c2:67:93:6e:99:88:a2:45:c4:e6:0f:d2:eb:39:c1:
39:29:d5:b4:b2:f4:6f:66:5b:1b:b3:21:74:8a:66:df:7d:e1:
8e:86:e2:56:24:d3:90:8b:7e:04:71:06:10:88:a2:b4:61:2a:
36:8d:5b:49:88:d8:d7:8e:34:76:a3:3a:ee:58:36:b1:7b:5c:
37:9d:9f:53:d3:d8:14:96:ac:2c:5f:b9:af:76:eb:24:d1:be:
5b:3a:1d:51:03:bd:e8:13:8d:8a:f8:4b:21:a3:f0:a9:93:f2:
70:c9:34:ed:62:07:02:f5:1a:04:a4:b3:82:f5:a6:aa:eb:13:
1c:44:77:92:c2:88:c3:08:4b:57:cb:9f:88:e1:b6:b6:40:80:
d9:1d:9b:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:02 2025 by rpki-client