Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a383030303a3a2f33332d3333203d3e20323639323137.roa
File: 323830343a363132383a383030303a3a2f33332d3333203d3e20323639323137.roa (raw, json)
Hash identifier: 68fRL5dckFMvYQnapSK+hOKpSyUMLgDcJMnnKLKpgI8=
Subject key identifier: 60:D8:CC:29:70:59:87:ED:41:C3:48:D1:15:97:78:22:F0:24:D5:47
Certificate issuer: /CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Certificate serial: 69884207BE8ECF7DE9DE054A51FA3FD1FD401574
Authority key identifier: C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a383030303a3a2f33332d3333203d3e20323639323137.roa
Signing time: Wed 15 Jan 2025 14:53:52 +0000
ROA not before: Wed 15 Jan 2025 14:48:52 +0000
ROA not after: Wed 14 Jan 2026 14:53:52 +0000
asID: 269217
IP address blocks: 2804:6128:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:88:42:07:be:8e:cf:7d:e9:de:05:4a:51:fa:3f:d1:fd:40:15:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349
Validity
Not Before: Jan 15 14:48:52 2025 GMT
Not After : Jan 14 14:53:52 2026 GMT
Subject: CN=60D8CC29705987ED41C348D115977822F024D547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6b:fb:41:32:99:cd:91:95:97:3d:22:53:5f:
aa:f1:6b:b3:82:c8:84:d5:01:ee:bc:da:3b:e2:95:
de:0e:88:16:bd:99:a8:ad:c3:ab:b1:c7:f5:5c:e2:
89:37:5b:e4:5c:df:69:c3:e2:7a:54:c4:23:04:77:
0f:5d:4f:e3:be:30:bb:91:4f:1e:0b:f6:33:d0:1e:
a7:2b:4d:b6:21:b7:a4:f5:cc:96:37:86:4e:ed:4d:
56:90:d0:d9:01:d5:0e:51:7f:6a:1b:28:6d:3b:a8:
79:64:fd:06:13:59:20:15:5e:10:3d:71:6f:6b:40:
73:50:7e:5a:6a:1a:55:b4:8c:10:15:af:a4:47:d4:
a3:5f:36:57:65:04:4d:cc:91:73:72:38:1d:25:5a:
9e:a5:ab:4d:e7:30:40:2d:ff:25:4c:cb:48:30:05:
c7:36:57:79:1d:cc:c3:0d:00:cc:58:79:e0:0b:88:
6f:4e:f2:3d:2b:ba:52:f4:e9:78:eb:d3:3a:a9:f5:
9a:e8:0f:f4:b4:37:e7:ea:b8:34:e3:16:88:2e:9c:
29:49:db:78:b5:39:cd:a7:98:17:c5:d5:06:d5:3a:
22:5d:cb:58:b6:ef:47:7c:d7:07:74:35:5c:10:f2:
65:83:36:48:7c:76:51:57:a7:14:f9:6f:18:31:dd:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D8:CC:29:70:59:87:ED:41:C3:48:D1:15:97:78:22:F0:24:D5:47
X509v3 Authority Key Identifier:
keyid:C2:E5:54:7B:57:F1:9F:E9:2C:11:60:1E:AF:8D:E7:B9:BC:4A:93:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2E5547B57F19FE92C11601EAF8DE7B9BC4A9349.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HZrTqdZtLbWzW1VXHbrAe28K9Kh6k4g7DJejWnPG6T2G/0/323830343a363132383a383030303a3a2f33332d3333203d3e20323639323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6128:8000::/33
Signature Algorithm: sha256WithRSAEncryption
7c:37:27:85:c0:89:81:0d:11:ac:46:51:74:9a:77:f3:9a:d3:
07:d4:23:7f:70:2a:06:1b:21:f4:6b:8f:a6:a2:28:93:fa:a8:
0d:ee:8c:88:5c:8c:4c:6c:7f:88:77:12:2d:1e:4e:db:5d:e6:
c9:00:d4:a8:65:f5:d7:56:41:79:84:ce:67:17:3f:c8:3e:80:
2f:b5:2c:b1:7c:af:b9:d0:8c:bc:c2:8f:6b:5f:c7:eb:c0:73:
17:a3:3c:b6:e0:c0:a0:29:bc:7e:37:e6:19:4b:82:d7:c1:12:
43:a4:67:50:18:6b:a9:f8:f5:eb:ce:7d:da:af:9e:91:3c:47:
c9:c1:e4:0c:de:76:0c:a3:55:e4:6d:a0:d2:b0:93:b5:e3:43:
f5:0d:fb:cd:51:92:b9:34:3b:7a:3e:5c:33:6c:a2:49:d0:06:
57:10:c6:70:14:6c:b4:ce:8e:d0:39:4b:2f:0c:a0:01:db:89:
2a:00:93:7c:95:ad:b9:8f:ff:e0:6c:93:24:5f:25:79:6f:c6:
3d:10:c1:a2:f5:44:12:02:8f:95:93:16:11:d4:af:d9:22:1f:
36:0b:a0:6e:1b:c2:81:50:b8:53:5d:cb:ec:02:77:c8:34:db:
1e:20:76:f8:f5:39:c7:84:55:72:bd:33:ac:79:1e:5f:41:c8:
94:73:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:32:44 2025 by rpki-client