Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33332d3333203d3e20323633343435.roa
File: 323830343a313165303a3a2f33332d3333203d3e20323633343435.roa (raw, json)
Hash identifier: kryRGFZu3sHtqoTh9M1C3tPSx0kCbrdHomMSq20H5Ho=
Subject key identifier: D5:8F:F9:38:0D:44:99:DC:34:44:1B:14:84:AD:31:8D:D0:58:7C:B0
Certificate issuer: /CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Certificate serial: 3569E1279A88B12FA5CAFA4B01072033B73A9438
Authority key identifier: F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33332d3333203d3e20323633343435.roa
Signing time: Thu 04 Jan 2024 14:41:45 +0000
ROA not before: Thu 04 Jan 2024 14:36:45 +0000
ROA not after: Thu 02 Jan 2025 14:41:45 +0000
asID: 263445
IP address blocks: 2804:11e0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:69:e1:27:9a:88:b1:2f:a5:ca:fa:4b:01:07:20:33:b7:3a:94:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1076108B5AD0183155EEC96C47E216B36ED588E
Validity
Not Before: Jan 4 14:36:45 2024 GMT
Not After : Jan 2 14:41:45 2025 GMT
Subject: CN=D58FF9380D4499DC34441B1484AD318DD0587CB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:33:b4:1a:34:69:93:4c:a7:32:19:81:a1:6e:
f4:49:b8:f9:74:ca:e1:07:7c:4e:56:35:e4:de:d1:
da:34:78:a0:71:76:66:f9:d0:08:4f:51:19:02:b6:
1b:61:23:e0:d8:85:e4:18:3d:11:86:5f:0d:59:4a:
2e:b0:74:bc:b6:2d:4d:18:d8:8c:4c:9f:a4:b2:a7:
a2:35:34:21:b1:f0:f0:10:53:b1:9a:fe:75:04:d8:
d5:de:c6:59:7a:0c:0d:3a:9c:8c:96:bb:90:0a:f8:
61:0d:41:ff:af:89:f1:37:64:27:2f:c1:fd:22:80:
f1:0d:60:5f:cc:90:89:bd:ee:16:af:55:49:f4:b9:
38:c1:41:02:8c:20:82:ae:52:3e:5e:86:ba:e0:5a:
d3:05:b9:71:e0:22:50:24:74:2c:b8:a7:ab:d6:3b:
ab:6c:31:6b:b9:56:bc:20:44:35:c7:1f:8a:e8:32:
34:cd:8e:87:32:81:93:c4:46:9b:82:43:be:a6:83:
7f:53:dc:e6:7a:a2:7b:a6:c6:dc:e2:a2:81:e7:1c:
ca:55:20:9c:12:03:c6:54:a4:96:2f:06:e5:7d:1e:
5d:e4:4e:7c:76:85:60:cf:09:7b:e7:d7:09:38:b8:
87:51:11:f7:e9:69:1b:fc:91:1d:24:c4:6f:a0:e9:
3c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:8F:F9:38:0D:44:99:DC:34:44:1B:14:84:AD:31:8D:D0:58:7C:B0
X509v3 Authority Key Identifier:
keyid:F1:07:61:08:B5:AD:01:83:15:5E:EC:96:C4:7E:21:6B:36:ED:58:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/F1076108B5AD0183155EEC96C47E216B36ED588E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1076108B5AD0183155EEC96C47E216B36ED588E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J9ospWbVqtYNYkPbfkxVbicKdMDXWJgDBqRNUyHS6Dmx/0/323830343a313165303a3a2f33332d3333203d3e20323633343435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:11e0::/33
Signature Algorithm: sha256WithRSAEncryption
60:9a:f1:3a:ed:30:79:2f:e0:8e:ca:dc:1e:ac:00:cb:4d:c7:
9a:10:e1:21:67:59:fd:d5:19:c1:d8:ff:c8:c9:13:f1:26:3c:
56:b5:e7:d2:32:cb:fb:7d:b9:83:fd:a9:ee:18:e7:0f:35:18:
ed:f4:a8:d9:59:4e:46:1b:86:a2:25:35:35:dd:a3:bc:a0:d5:
07:9b:91:d1:f8:63:71:a0:b4:b4:47:73:36:56:61:ca:7e:b4:
9c:64:39:bf:6c:82:d3:3f:26:0c:be:f3:cf:c9:b3:b7:96:d6:
07:3c:97:69:f5:1e:a7:da:69:b5:e5:59:dd:49:79:e5:17:76:
a8:0d:ce:40:8d:5a:ee:81:ce:c4:cf:12:4e:aa:6e:37:11:77:
cf:6e:60:f8:b1:64:0d:e5:66:5d:f3:b3:87:a4:ee:b0:93:dd:
3d:ea:ed:0d:ad:d2:ee:c1:61:c6:38:72:6f:c2:35:ac:1d:39:
76:83:3a:ac:b7:bd:8e:72:92:7e:b5:d5:ef:7c:2d:b3:6d:aa:
eb:02:44:ae:6b:61:0a:28:02:1e:8e:81:30:36:b5:01:10:e6:
68:92:46:c3:1c:80:90:46:38:5a:b1:3f:64:3d:c0:5b:fd:a3:
58:ce:d6:08:6e:fa:e9:30:e3:b1:f0:ee:e8:23:00:c6:ce:74:
52:2f:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:36:28 2025 by rpki-client