Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a3a2f33352d3335203d3e20323634323834.roa
File: 323830343a323538303a3a2f33352d3335203d3e20323634323834.roa (raw, json)
Hash identifier: EmQVeI9Udrpi4Q5YLwfSle0u+3iamU7SRu5f+C5iSDw=
Subject key identifier: AD:91:49:53:CA:AF:9F:93:17:80:95:73:6B:28:63:45:78:CA:30:90
Certificate issuer: /CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Certificate serial: 1BB09845DE824688DDC5540131F15E13F9841F08
Authority key identifier: 80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a3a2f33352d3335203d3e20323634323834.roa
Signing time: Fri 17 May 2024 14:33:48 +0000
ROA not before: Fri 17 May 2024 14:28:48 +0000
ROA not after: Fri 16 May 2025 14:33:48 +0000
asID: 264284
IP address blocks: 2804:2580::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:b0:98:45:de:82:46:88:dd:c5:54:01:31:f1:5e:13:f9:84:1f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80D4CC656FFC13A4AF2625F65D6BB3560200CCFB
Validity
Not Before: May 17 14:28:48 2024 GMT
Not After : May 16 14:33:48 2025 GMT
Subject: CN=AD914953CAAF9F93178095736B28634578CA3090
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c7:3e:e1:eb:6c:12:6a:60:97:0b:41:26:29:
d8:0e:18:82:39:ee:bb:ef:e1:31:25:3a:24:4e:99:
49:cf:1e:c6:1d:b2:e0:7c:50:fc:b4:86:d9:e8:33:
07:93:2c:95:58:0e:fa:8f:01:15:42:d8:89:6d:d1:
2b:84:8b:aa:2a:8f:45:8b:97:08:06:7d:d4:c0:62:
67:79:df:da:38:bf:1f:81:a2:8e:ee:df:12:83:20:
42:70:41:0b:cb:2b:dd:51:c7:a3:ea:42:ec:71:d8:
4a:e1:2d:c1:e3:de:9c:99:34:b8:6c:17:ed:55:dd:
af:0e:08:50:ce:9e:6f:99:da:b3:c4:39:56:c6:01:
ef:42:76:00:3f:17:76:2c:42:14:03:3d:15:2f:f8:
6f:64:77:cc:42:07:91:8c:d5:9e:68:b8:45:2e:7c:
c6:02:f3:c6:21:a0:30:67:cf:ca:a0:bf:1f:8b:c4:
4a:7a:1e:be:9c:5f:c8:d0:89:77:20:f2:7f:d0:43:
9f:07:d7:39:f7:ee:93:dc:22:92:00:df:6e:87:93:
1b:c1:48:ad:9f:05:b4:6f:18:e5:d4:ec:f5:59:40:
67:0a:b1:84:2e:ba:64:3b:c7:b3:02:19:39:89:37:
6f:68:d9:c1:cb:39:c1:a6:0b:02:b7:fd:fa:84:66:
19:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:91:49:53:CA:AF:9F:93:17:80:95:73:6B:28:63:45:78:CA:30:90
X509v3 Authority Key Identifier:
keyid:80:D4:CC:65:6F:FC:13:A4:AF:26:25:F6:5D:6B:B3:56:02:00:CC:FB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/80D4CC656FFC13A4AF2625F65D6BB3560200CCFB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HzfQzKjgp417yqoEdUdCf7qEw9jZiovXM3XKPiaszaLR/0/323830343a323538303a3a2f33352d3335203d3e20323634323834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2580::/35
Signature Algorithm: sha256WithRSAEncryption
3f:ae:35:17:93:9c:a0:ba:01:27:85:3c:eb:6e:66:0c:51:20:
69:9a:62:a3:53:cb:48:e7:30:0a:ae:41:34:dd:d3:74:e6:a2:
2f:e4:39:2f:e1:b9:c6:4e:6c:97:b2:c9:7e:ec:98:0e:be:4d:
f9:f5:18:02:27:49:e4:c4:b9:67:9c:42:b9:97:91:55:d5:16:
c6:99:6d:b2:a0:9b:11:48:c4:fa:e8:48:56:bb:6c:b8:c6:6a:
ee:a7:ff:ec:64:80:82:7c:cc:93:9d:c0:f6:27:15:da:9e:16:
0f:53:a7:16:ab:f9:7c:59:e7:0c:59:0a:55:01:06:5e:7e:91:
8c:d7:0c:a9:27:e0:0f:24:4f:64:1a:fe:07:99:96:cc:cb:42:
68:64:28:9e:86:b3:25:07:46:cb:67:3a:08:e9:71:9e:1a:c3:
99:e9:33:d8:ea:e5:33:ef:6d:1a:96:33:98:f5:6e:05:68:dc:
01:b1:8e:24:c2:3b:70:85:af:c5:c9:6a:20:23:fe:91:a9:30:
e6:c6:12:f8:ff:bf:50:15:bb:85:a3:b9:8e:b5:06:64:cd:f1:
51:89:71:f1:0b:1a:ab:74:7b:90:d4:8d:4e:b5:6f:c2:f9:16:
6c:28:ce:85:5b:9d:c7:b7:29:b6:4a:3e:bf:3f:2a:0a:81:0b:
bf:fe:1e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:54:55 2025 by rpki-client