Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa
File: 323830343a353236633a3a2f33322d3332203d3e20323638353137.roa (raw, json)
Hash identifier: 1edYG6ORLKxvpi5PdxNm3YF3gN4a2I3mE68BHjZdgwU=
Subject key identifier: 2B:90:D8:36:5B:29:60:A3:DC:EB:C1:6A:F2:03:1F:58:89:69:54:6B
Certificate issuer: /CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Certificate serial: 34FF799B9A15EFD414AC3C2B3CAC7A0A11FC6490
Authority key identifier: D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa
Signing time: Thu 11 Apr 2024 01:29:38 +0000
ROA not before: Thu 11 Apr 2024 01:24:38 +0000
ROA not after: Thu 10 Apr 2025 01:29:38 +0000
asID: 268517
IP address blocks: 2804:526c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:ff:79:9b:9a:15:ef:d4:14:ac:3c:2b:3c:ac:7a:0a:11:fc:64:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D029A3E7478998493D96D0D6B9C212CDC5530659
Validity
Not Before: Apr 11 01:24:38 2024 GMT
Not After : Apr 10 01:29:38 2025 GMT
Subject: CN=2B90D8365B2960A3DCEBC16AF2031F588969546B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5a:d0:05:73:73:d5:ff:af:54:af:42:5c:83:
71:e3:07:be:ae:b6:9a:10:b0:2f:d6:54:bf:dc:83:
58:c6:c8:22:96:01:17:d3:79:eb:3f:8d:c4:d0:a9:
75:15:7d:46:93:b3:98:27:e8:88:17:58:c7:04:37:
81:e8:51:40:01:15:7f:57:a7:f4:a3:3a:7d:13:a0:
c9:bb:be:0a:b6:25:55:c4:35:d5:74:95:3d:88:78:
3c:28:c4:60:55:8d:ee:9c:4a:ce:bf:95:9b:d4:b0:
ba:aa:48:bd:92:86:fb:6f:33:8f:aa:47:2d:62:db:
6c:0b:62:5c:a0:b0:73:e9:14:d4:ad:8b:58:0f:84:
b5:19:9b:e7:6f:8f:ca:6e:a0:b0:05:a3:e7:e6:c9:
c4:ce:3d:93:d8:c3:ee:00:49:2c:01:8c:9d:2a:e1:
78:1d:2e:19:99:c7:72:12:ca:55:1c:75:92:b9:0c:
c9:9d:18:3c:b2:b1:78:5a:c2:96:9d:be:1b:c5:bf:
ac:78:47:9c:d5:bd:62:0b:61:07:c3:09:c3:f3:46:
99:fa:2f:95:af:0e:db:db:56:4c:28:ea:42:92:27:
6a:2b:10:31:a0:92:ec:ed:c0:83:50:f2:d0:1c:d6:
76:14:cf:fd:fd:ed:32:46:cc:d1:48:16:2c:87:47:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:90:D8:36:5B:29:60:A3:DC:EB:C1:6A:F2:03:1F:58:89:69:54:6B
X509v3 Authority Key Identifier:
keyid:D0:29:A3:E7:47:89:98:49:3D:96:D0:D6:B9:C2:12:CD:C5:53:06:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/D029A3E7478998493D96D0D6B9C212CDC5530659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D029A3E7478998493D96D0D6B9C212CDC5530659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/1/323830343a353236633a3a2f33322d3332203d3e20323638353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:526c::/32
Signature Algorithm: sha256WithRSAEncryption
7a:f7:45:0f:92:4d:46:bf:9f:28:bc:09:87:47:5f:7b:eb:2d:
a4:39:09:41:38:9a:0b:72:f8:90:75:0f:cb:5e:e9:e4:d3:d0:
53:e1:c6:8b:ae:e5:2c:51:f6:98:0a:7f:19:e8:f7:a7:4a:e0:
31:2f:a7:f8:cb:65:f8:1a:4a:3c:ac:dd:14:86:16:8c:d3:fa:
32:b2:6b:c1:dd:5c:81:68:b7:51:f4:a3:ee:87:c8:36:d7:42:
30:c4:bc:6c:15:76:1b:26:9d:d7:8f:86:54:dd:46:52:82:94:
d7:c8:a0:a7:05:d1:47:96:67:01:13:e3:bb:0b:51:4f:dd:6b:
81:4a:5a:b9:21:39:67:a2:61:c7:77:b5:81:eb:b1:5b:21:8b:
c1:a7:06:f2:0e:71:b9:8c:05:6e:8c:2c:5d:64:47:85:23:8c:
f8:49:11:a7:2a:d6:03:c1:be:24:90:53:b4:af:c8:7b:3b:a2:
e7:cb:2c:fd:8f:39:bf:32:40:80:aa:4a:9e:78:86:15:d0:1d:
4c:7f:6b:fa:3a:0f:9b:73:a7:62:3b:a9:93:c4:47:be:fb:61:
ed:fc:80:56:e5:ad:ec:e0:38:f5:e6:98:59:e4:bf:79:63:d3:
9c:04:39:77:38:56:0b:3b:12:4b:fe:f4:5e:e1:bd:ae:f6:8c:
c1:ce:35:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:49 2025 by rpki-client