Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa
File: 323830343a6563383a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier: 93h1FPmwhVErpOcpnM6HsQCCJH9jTtSB0rk8HEtaNrQ=
Subject key identifier: 51:CB:29:4B:37:23:4E:0A:BF:65:23:C3:07:97:6B:04:88:A6:4C:2F
Certificate issuer: /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial: 6F3013768AA0B5824C1193BABA6048034EB6ADD5
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa
Signing time: Wed 28 Feb 2024 14:11:15 +0000
ROA not before: Wed 28 Feb 2024 14:06:15 +0000
ROA not after: Wed 26 Feb 2025 14:11:15 +0000
asID: 262532
IP address blocks: 2804:ec8::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:30:13:76:8a:a0:b5:82:4c:11:93:ba:ba:60:48:03:4e:b6:ad:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Validity
Not Before: Feb 28 14:06:15 2024 GMT
Not After : Feb 26 14:11:15 2025 GMT
Subject: CN=51CB294B37234E0ABF6523C307976B0488A64C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:74:a7:97:d9:05:4f:95:34:16:ac:bd:11:
2d:10:ef:f5:e6:9d:02:2d:4c:53:e7:55:32:7f:8e:
29:e4:7f:e5:7f:20:1e:47:b7:2f:57:23:c0:db:83:
3d:0c:0c:d5:6c:b2:90:9f:af:c4:c7:5d:8b:aa:7e:
45:3a:46:14:99:bc:79:0c:f4:36:a4:eb:94:a5:cc:
1c:f0:d4:33:06:a9:22:0a:12:d9:54:9b:7a:1a:4c:
d3:e5:67:4e:36:2f:fc:94:db:30:eb:e5:03:df:6f:
02:c6:6a:e7:96:30:bf:fb:22:60:47:f8:55:da:99:
4d:d1:27:f2:ba:4c:e9:f0:e6:9a:21:c2:dc:03:d3:
a1:bc:f5:30:b4:00:87:d7:83:05:fc:a0:76:65:34:
be:b7:a9:68:ff:61:0e:70:7b:d2:a3:40:79:66:ed:
d0:99:39:93:11:53:69:e7:53:43:49:8e:9b:16:67:
53:96:25:8b:5d:74:5d:4a:e2:0b:4b:85:76:c6:ba:
c3:dd:b3:98:95:46:6c:0d:ef:9d:ee:43:e9:d5:2a:
1e:17:fd:a5:9c:cc:d2:8d:ae:3e:ce:47:56:9d:ee:
93:50:94:33:1f:6f:00:62:41:03:f3:f2:e3:b3:bb:
8d:37:7f:c9:86:69:c2:fb:8e:3d:d5:8c:cf:10:ca:
34:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:CB:29:4B:37:23:4E:0A:BF:65:23:C3:07:97:6B:04:88:A6:4C:2F
X509v3 Authority Key Identifier:
keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a3a2f33352d3335203d3e20323632353332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ec8::/35
Signature Algorithm: sha256WithRSAEncryption
bf:5a:ea:6b:1b:db:f0:ad:77:dc:81:7d:f2:69:72:cd:91:45:
75:cc:7d:42:1e:65:2d:07:13:a1:f7:40:77:3b:ad:a2:6c:eb:
b1:dc:28:63:55:e5:2c:4b:3b:36:d8:24:3f:13:3d:c8:c4:54:
00:2a:d8:c1:a4:f4:1f:c6:1c:05:b4:3e:f7:3e:94:c4:45:98:
c0:20:65:6e:54:93:73:46:08:0e:00:39:6b:df:8f:8e:ac:65:
48:fb:4a:20:7b:c7:54:13:ec:ad:f0:f2:10:5a:a3:d4:e4:7e:
aa:e8:49:d9:a9:50:72:f6:02:2a:57:2e:e5:d9:9c:64:3d:f1:
da:02:2c:e8:fe:0c:73:fd:94:7a:9f:40:ae:e2:f8:9e:19:57:
e1:3f:45:b4:c2:e9:a3:b1:4e:1b:1a:57:7c:2b:89:1c:6e:72:
8a:39:74:f5:69:52:a1:b0:9d:dd:78:91:c3:11:c6:d4:42:e6:
55:7f:2f:e4:4e:23:33:62:ba:22:b6:32:30:fd:b1:10:2b:e0:
29:da:5c:3b:3c:de:68:12:1c:5b:a1:4b:3b:a0:18:e6:5a:08:
98:42:9b:66:d2:69:8f:28:54:43:a5:7b:4c:6a:9c:45:40:54:
94:bf:89:8f:46:83:2c:85:f4:d0:52:fa:ec:5f:b4:03:e5:8a:
8e:0d:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 04:06:34 2025 by rpki-client