Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
File: 323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa (raw, json)
Hash identifier: q4kqh76j6ZhlA+4gfFI3OysEzzIXkVcFQWPtvE0thVg=
Subject key identifier: A2:BF:7C:DC:FC:EC:02:E0:EA:A2:27:E9:A5:FC:BA:CD:CE:96:CB:F7
Certificate issuer: /CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Certificate serial: 721FFE1E20DF09636DEF5577B467DB27DA58E1BF
Authority key identifier: 64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
Signing time: Tue 21 Mar 2023 13:30:00 +0000
ROA not before: Tue 21 Mar 2023 13:25:00 +0000
ROA not after: Tue 19 Mar 2024 13:30:00 +0000
asID: 61589
IP address blocks: 2804:48f0:ffff:4089::/64 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:1f:fe:1e:20:df:09:63:6d:ef:55:77:b4:67:db:27:da:58:e1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644FDBBE4743E5D56B8A177FBF2E3251F42D92E9
Validity
Not Before: Mar 21 13:25:00 2023 GMT
Not After : Mar 19 13:30:00 2024 GMT
Subject: CN=A2BF7CDCFCEC02E0EAA227E9A5FCBACDCE96CBF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:31:50:be:be:cd:41:db:6d:ac:10:94:66:0b:
9b:5c:39:3d:e2:89:b4:df:77:9d:09:f0:87:9e:a7:
6e:b2:00:78:25:6e:af:e7:2e:86:e1:5f:7b:67:6a:
9b:eb:0d:d7:ee:87:84:a3:b3:00:1e:26:6f:67:b9:
42:e9:1a:e4:42:11:4f:db:0b:98:d1:ab:9c:f4:6a:
66:25:60:de:5e:01:c6:63:5d:6b:2f:54:fa:19:1f:
10:1c:16:fe:2c:9c:6e:d7:e5:eb:59:af:75:d5:88:
8c:7d:ab:8f:f9:b9:6d:a1:e0:35:56:c7:7e:5d:43:
a3:44:df:ff:47:99:e8:2e:e4:ea:08:a2:88:d6:d7:
04:5b:1a:5c:7b:8f:65:e6:17:05:38:b1:14:65:0a:
c6:d5:71:d9:e6:d6:33:53:70:61:ca:68:35:cb:f1:
fe:83:0b:81:6a:53:80:af:d2:20:35:2c:25:a8:50:
52:76:50:c7:9b:5d:19:b4:13:fa:cd:e0:dc:a2:77:
a0:af:6a:01:b5:e9:15:4a:ac:89:da:19:d4:86:6e:
10:a6:31:64:45:30:a2:3a:ba:a2:a2:ca:9a:e6:b7:
ff:5e:82:1d:8c:62:5d:50:c5:fa:f5:de:22:31:aa:
51:7c:f0:5f:60:4e:c7:0b:e0:53:9f:9f:b7:4e:a7:
41:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:BF:7C:DC:FC:EC:02:E0:EA:A2:27:E9:A5:FC:BA:CD:CE:96:CB:F7
X509v3 Authority Key Identifier:
keyid:64:4F:DB:BE:47:43:E5:D5:6B:8A:17:7F:BF:2E:32:51:F4:2D:92:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/644FDBBE4743E5D56B8A177FBF2E3251F42D92E9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqibKHfDfMftQJtyixcqNQf5fiouDuf4bfhZ4usQHcG4/0/323830343a343866303a666666663a343038393a3a2f36342d3634203d3e203631353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:48f0:ffff:4089::/64
Signature Algorithm: sha256WithRSAEncryption
80:da:ef:ce:bd:a1:f5:c1:5e:07:07:d1:fe:c3:95:38:36:40:
9c:33:bb:14:c1:f4:16:11:aa:79:b4:01:f3:e5:cc:a0:c5:a6:
ea:f5:02:82:04:52:3d:c3:23:11:c5:30:80:55:0b:d2:3b:20:
a5:b2:64:e5:f9:f6:78:14:d8:81:d2:27:d5:c9:1b:1a:a0:5c:
e5:7e:7c:59:68:62:1a:25:94:05:95:c4:70:13:e1:7f:d2:e4:
67:ef:0c:67:77:10:fd:fb:39:44:d4:01:a6:80:eb:a9:3c:c8:
92:39:e2:2d:a3:4a:77:3e:f8:cf:30:3c:e9:22:6f:0c:52:57:
23:dd:19:08:2c:2d:52:0a:92:15:e2:41:c7:cc:e9:a4:72:7b:
74:83:be:02:e7:b3:86:7b:6d:8e:88:13:e9:c5:52:5c:1c:ce:
50:6b:b7:3c:86:5f:a7:1e:7f:d5:db:b4:6c:36:1c:3b:b3:fa:
67:a3:b6:ca:c4:ed:94:c7:5b:85:94:fc:78:3f:a2:dd:36:82:
15:de:34:42:00:a5:7f:9f:af:40:80:e5:21:64:5d:c5:42:ec:
da:de:6c:2c:a3:39:e6:d1:61:94:fb:56:0d:89:a5:c4:8d:6f:
4e:d7:d8:d6:16:95:e5:cd:7f:ac:02:b0:22:70:19:36:84:20:
20:7c:e7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:13:51 2025 by rpki-client