Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/323830343a346563343a3a2f33322d3438203d3e20323638323831.roa
File: 323830343a346563343a3a2f33322d3438203d3e20323638323831.roa (raw, json)
Hash identifier: KtyLsqbTbS2nryarqWO1vDwjk+rmBqu8hh330yXmNKo=
Subject key identifier: 55:5B:9D:E9:EC:2E:61:79:34:81:68:C3:30:26:1E:02:F0:16:A1:56
Certificate issuer: /CN=7C0967496D9B879D984F400EFDAE9073C30F0EBD
Certificate serial: 370F8E02260C6F8FD680F4EFE4F829C251B919FB
Authority key identifier: 7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/323830343a346563343a3a2f33322d3438203d3e20323638323831.roa
Signing time: Sat 17 Feb 2024 19:59:56 +0000
ROA not before: Sat 17 Feb 2024 19:54:56 +0000
ROA not after: Sat 15 Feb 2025 19:59:56 +0000
asID: 268281
IP address blocks: 2804:4ec4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:0f:8e:02:26:0c:6f:8f:d6:80:f4:ef:e4:f8:29:c2:51:b9:19:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C0967496D9B879D984F400EFDAE9073C30F0EBD
Validity
Not Before: Feb 17 19:54:56 2024 GMT
Not After : Feb 15 19:59:56 2025 GMT
Subject: CN=555B9DE9EC2E6179348168C330261E02F016A156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:83:fa:97:38:8d:9a:22:33:55:a0:c8:3f:29:
85:eb:81:82:fc:9d:3d:d3:92:01:a3:75:ff:61:7b:
03:79:70:7c:23:fd:4c:ab:f6:57:83:89:55:d4:23:
cc:6c:b5:73:81:b5:a5:ca:6d:a4:d0:3b:29:74:85:
ee:f0:ad:69:6e:56:4b:e2:90:2c:c3:a1:e2:3d:e3:
1d:8a:85:d8:d1:f3:69:03:48:42:19:d8:bf:2d:c3:
5e:ff:ed:0a:64:71:e2:fe:53:08:2d:51:de:cc:59:
7e:79:de:ee:e9:23:e5:35:44:65:32:cb:bb:e6:c4:
e4:c5:e7:dc:48:7e:b6:6d:46:00:cc:b0:52:d9:bf:
a4:d9:02:ce:4b:e4:7e:d5:e0:8d:33:31:df:48:ae:
32:a5:ff:8a:b9:40:38:c1:58:80:f6:9e:79:50:31:
5d:4d:23:61:12:c2:c0:6b:62:5b:dd:30:5d:dc:f3:
fa:d0:6c:8b:1d:ac:2b:51:c0:3f:ea:17:af:fd:d0:
6f:25:e3:19:d2:71:23:94:cf:ad:46:b0:19:cf:75:
94:39:ca:b9:25:76:4f:1d:41:aa:76:37:aa:92:54:
8c:3e:3c:e1:e2:91:eb:9a:41:e1:2e:b2:2f:6f:73:
81:d7:62:0f:a7:ff:1a:68:63:b2:27:43:52:33:f7:
e9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5B:9D:E9:EC:2E:61:79:34:81:68:C3:30:26:1E:02:F0:16:A1:56
X509v3 Authority Key Identifier:
keyid:7C:09:67:49:6D:9B:87:9D:98:4F:40:0E:FD:AE:90:73:C3:0F:0E:BD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7C0967496D9B879D984F400EFDAE9073C30F0EBD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H88UdHUTsB7UbUmDVvyHJtPX593irterXzDJkSEgg45D/0/323830343a346563343a3a2f33322d3438203d3e20323638323831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4ec4::/32
Signature Algorithm: sha256WithRSAEncryption
35:dd:d2:97:6d:ce:ca:f0:b4:13:5f:fa:77:b3:50:9f:79:f9:
8d:8b:27:19:9a:3d:03:00:23:b2:e7:ad:a2:53:b3:cc:36:ee:
a7:78:60:71:dd:a4:b3:e5:57:2a:6d:34:ea:de:a4:06:45:af:
20:eb:a1:21:ce:73:fb:55:ca:99:34:8f:c8:e5:96:d0:f4:07:
c8:e9:99:82:79:c8:02:61:3a:2f:a0:ee:d8:41:6f:2d:ed:0a:
d5:8d:47:51:b3:4b:3b:17:0c:7a:08:19:33:7b:07:c1:09:0a:
eb:ce:9e:7d:9e:15:81:56:00:69:21:37:fa:be:75:73:c0:17:
43:d7:15:1d:27:94:da:76:d9:e3:f5:0f:0a:41:3f:15:82:03:
6a:2b:b5:a8:98:6d:25:32:6d:86:4c:52:4e:78:1f:4c:75:15:
e6:fd:0b:1b:43:87:4d:88:3f:74:bd:f5:46:22:81:7b:8d:0f:
52:34:b6:4b:a3:ad:fe:77:c4:f7:9f:9e:17:16:d5:6b:85:59:
9b:70:07:22:31:fe:72:a7:78:44:6e:3d:c2:9c:ff:fa:43:ce:
96:98:07:47:f0:f4:02:ca:e9:10:14:ff:44:9e:0c:45:53:75:
5a:7d:dd:0f:57:ad:1c:22:44:0c:a6:21:fe:79:c2:60:c6:df:
b9:c8:dc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 18:10:11 2025 by rpki-client