Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313230303a3a2f34302d3430203d3e20323639323137.roa
File: 323830343a363132383a313230303a3a2f34302d3430203d3e20323639323137.roa (raw, json)
Hash identifier: 9qBYyQLuK7R5K7bEIshFL1Iz3bsfC5x9Ujj/8FniOO8=
Subject key identifier: 56:33:DF:D6:D0:DB:68:9C:51:68:2D:5F:75:83:11:80:02:D1:96:39
Certificate issuer: /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial: 752DBAFFF14B585FD695199D38C13A7689A26E28
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313230303a3a2f34302d3430203d3e20323639323137.roa
Signing time: Wed 15 Jan 2025 14:53:55 +0000
ROA not before: Wed 15 Jan 2025 14:48:55 +0000
ROA not after: Wed 14 Jan 2026 14:53:55 +0000
asID: 269217
IP address blocks: 2804:6128:1200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:2d:ba:ff:f1:4b:58:5f:d6:95:19:9d:38:c1:3a:76:89:a2:6e:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Validity
Not Before: Jan 15 14:48:55 2025 GMT
Not After : Jan 14 14:53:55 2026 GMT
Subject: CN=5633DFD6D0DB689C51682D5F7583118002D19639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b8:19:91:54:b2:48:03:34:ce:dc:ed:25:a7:
2c:43:cf:4f:53:be:ac:9b:b9:50:88:ee:75:5a:17:
58:da:f9:cf:5c:7d:fb:0b:ba:26:79:b3:a7:78:0f:
ab:ad:02:c3:f4:d8:96:28:59:b3:95:ec:8b:90:ca:
3a:e2:e7:b2:a3:bf:b4:22:26:8f:01:e2:b3:36:16:
33:4f:a4:c7:bc:4a:c3:0e:41:5a:c6:35:d0:6c:76:
f2:88:36:46:f2:f4:b6:9e:c6:73:41:ff:d0:f6:17:
96:f9:20:92:a1:42:97:f7:fa:aa:35:a3:f9:d5:b5:
1a:27:77:46:e0:42:8a:03:80:4b:5e:72:a0:77:76:
39:67:63:2f:1c:60:e5:16:d0:d9:55:e1:4e:ec:74:
a3:67:68:96:7d:69:38:ad:10:b7:9e:4f:c0:4b:e3:
c7:02:0c:1b:f1:de:be:9c:34:8d:80:5b:4d:45:bb:
16:c9:b5:04:aa:21:2d:c3:5c:44:2e:31:bf:5b:70:
47:d6:5e:8c:d8:c1:fc:e6:01:3c:7a:8b:51:af:aa:
7d:1b:4b:91:63:62:52:44:21:e1:97:ec:d6:f7:2a:
3c:45:d0:ac:c2:d4:1f:df:5c:0a:9c:d7:94:8e:9e:
3f:78:3a:f3:63:42:f6:cd:03:b3:e9:b7:68:61:49:
77:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:33:DF:D6:D0:DB:68:9C:51:68:2D:5F:75:83:11:80:02:D1:96:39
X509v3 Authority Key Identifier:
keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a313230303a3a2f34302d3430203d3e20323639323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6128:1200::/40
Signature Algorithm: sha256WithRSAEncryption
a8:31:72:c4:44:cd:dc:e0:91:af:c8:cd:40:3d:8e:ff:a7:f8:
46:7a:28:3a:aa:39:0a:f6:57:d6:14:76:fd:22:ac:47:9e:4e:
2f:a1:34:9f:4c:8c:a3:02:38:c5:d8:f7:85:96:40:4a:b5:cd:
39:8a:5b:14:80:64:09:6b:8f:99:0a:aa:4b:77:21:56:b1:5b:
e3:5f:8a:d9:83:b3:cf:e7:47:7d:37:8c:fb:78:52:f7:42:60:
f9:bf:15:7a:39:4f:88:08:31:1a:7f:a0:43:17:62:8f:90:7c:
d2:cb:01:1b:b2:cb:78:f3:80:8a:49:15:62:84:e0:83:0c:9f:
08:ae:0c:df:e9:f6:b6:9c:06:e4:90:fa:de:52:2c:6b:07:48:
4f:96:9a:2c:60:b0:3d:91:db:33:96:ef:7c:bd:2d:c0:2a:46:
ac:3a:ef:28:a6:ab:a4:34:34:17:f8:40:f4:ea:3f:37:75:c3:
2e:87:70:5a:86:4b:0b:a7:d3:08:5e:96:79:96:d0:a4:f4:7c:
0f:56:a3:5d:b5:dc:63:fc:bf:28:b4:81:67:73:7b:50:27:7e:
e5:8e:52:84:70:3d:ec:d5:32:49:10:18:95:82:c8:d5:fc:68:
f1:54:bd:f7:6c:00:d2:98:3c:74:9a:13:1e:2e:f3:52:5d:50:
26:82:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:29:39 2025 by rpki-client