Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa
File: 323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier: 4tYSyZDDv+fswN83IZ17U77v+cptmJyyMDv5McjRjxc=
Subject key identifier: D4:07:1B:02:32:A5:82:65:CF:4C:E2:99:53:FC:8C:B0:CE:1C:EA:04
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 064F912C3C59F6B062BD7FCCC0B46B0AD66F872C
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:11:47 +0000
ROA not before: Wed 28 Feb 2024 14:06:47 +0000
ROA not after: Wed 26 Feb 2025 14:11:47 +0000
asID: 262532
IP address blocks: 2804:ec8:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:4f:91:2c:3c:59:f6:b0:62:bd:7f:cc:c0:b4:6b:0a:d6:6f:87:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:06:47 2024 GMT
Not After : Feb 26 14:11:47 2025 GMT
Subject: CN=D4071B0232A58265CF4CE29953FC8CB0CE1CEA04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:40:22:16:62:af:38:a7:8e:22:0d:41:8b:
d5:46:f6:93:e2:af:9c:38:04:05:86:5d:15:6b:31:
63:5e:d2:9f:e5:93:b4:3d:12:a3:84:a0:87:fa:66:
0f:e3:ca:de:b6:95:b1:17:44:c4:9d:1f:32:59:d8:
0d:a7:45:85:bf:3e:85:43:a1:2d:8f:46:e6:69:41:
ec:53:b7:f4:68:7a:32:b4:64:0e:b2:f1:b8:ec:83:
49:ec:02:72:49:f1:7a:91:a7:58:3b:e9:3d:37:b5:
15:b7:3b:ce:72:71:6a:73:61:2a:5d:e6:37:5e:9f:
48:4e:a7:b7:8a:9f:25:6b:19:79:cf:1e:ad:31:fd:
67:52:8b:82:72:da:48:a7:26:4a:e4:d3:78:c0:cf:
ee:33:c5:82:4e:5c:ac:19:bb:dd:e4:64:20:10:4f:
70:22:f0:4d:eb:3f:2e:de:eb:33:6f:0c:46:fa:1f:
d9:d2:19:4b:7a:f8:e2:7b:e6:32:aa:6d:2c:ec:bb:
fd:75:84:f3:b9:4a:5f:b7:ba:4b:76:39:44:ae:6c:
3d:c2:20:f3:51:e8:52:b9:91:5b:f1:16:91:1a:7c:
87:ec:96:ef:52:f7:80:08:f1:b3:b5:35:66:7e:64:
d3:06:07:46:17:50:d3:04:86:94:0a:2e:86:e4:d9:
d8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:07:1B:02:32:A5:82:65:CF:4C:E2:99:53:FC:8C:B0:CE:1C:EA:04
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a393030303a3a2f33362d3336203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ec8:9000::/36
Signature Algorithm: sha256WithRSAEncryption
6f:d7:9d:6d:bc:fe:55:d9:fb:15:52:2b:0f:71:25:c5:40:dd:
39:c9:54:cc:9b:1d:c9:b4:78:be:d3:2d:72:fe:f6:33:97:d7:
a7:d5:36:f8:33:e9:d2:95:99:88:70:f2:d8:c5:9f:dd:d4:d8:
88:6a:cf:81:fc:46:12:f3:18:86:ec:29:51:76:c9:47:e3:1d:
53:e2:74:74:19:b1:54:38:1d:07:65:c5:48:48:c0:a4:bf:a0:
01:1f:c0:0d:1f:e4:cb:be:10:84:9f:5c:79:a5:f1:4d:da:aa:
0a:5b:15:82:3b:ea:d8:a6:9a:a8:5c:7d:11:ad:78:3e:a3:1a:
4f:d8:74:81:3b:c1:e0:aa:3a:92:cb:39:d1:87:ae:d1:c4:a1:
47:d5:77:e3:24:15:36:e9:c8:e1:6c:cb:53:4a:dd:ed:c3:1d:
d8:8b:fd:2a:4b:18:61:d8:32:17:b3:10:a8:61:4e:be:75:14:
32:ec:48:ab:85:39:6e:e0:55:f8:e6:5f:57:eb:7c:21:d0:16:
4d:79:6c:d3:e9:71:20:9c:8e:23:2e:59:69:f4:a3:df:02:ec:
cf:7e:33:c9:d1:34:3b:7d:a7:98:51:86:3e:7d:fb:e0:b7:ca:
bc:3e:53:dd:c9:a5:3f:22:2b:6d:bd:cb:f9:23:1d:28:de:d5:
53:ea:ac:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:35 2025 by rpki-client