Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
File: 323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa (raw, json)
Hash identifier: yEbzDMpbfddamUUKBaUsHpggrcV4ftdZ3IitVrWIBe4=
Subject key identifier: DA:93:B9:D6:01:F1:DE:8E:EB:37:3A:7E:26:F3:5B:98:1A:F0:D2:12
Certificate issuer: /CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Certificate serial: 54C90700B6DFC655253D8A4BC977F77C5D137737
Authority key identifier: 49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
Signing time: Mon 02 Dec 2024 14:06:29 +0000
ROA not before: Mon 02 Dec 2024 14:01:29 +0000
ROA not after: Mon 01 Dec 2025 14:06:29 +0000
asID: 273728
IP address blocks: 2804:8b5c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:c9:07:00:b6:df:c6:55:25:3d:8a:4b:c9:77:f7:7c:5d:13:77:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49FFAF88F9E3352C5D66D4196264FC0F7B911B27
Validity
Not Before: Dec 2 14:01:29 2024 GMT
Not After : Dec 1 14:06:29 2025 GMT
Subject: CN=DA93B9D601F1DE8EEB373A7E26F35B981AF0D212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ff:83:d7:bd:cd:3d:a3:47:c8:a6:78:3c:d9:
96:8c:e0:5a:b5:1d:78:60:ce:a9:ab:37:1d:14:60:
6d:07:72:f4:58:a2:ac:20:db:4a:a2:2f:b1:9e:0c:
80:79:18:35:2e:b9:9e:30:b1:e4:a9:be:38:1a:5e:
1c:ac:1c:fa:c1:3c:75:d9:77:af:22:16:2b:75:2a:
4f:a3:ad:0b:79:39:3b:0a:1b:c1:fb:34:8a:65:e6:
db:5d:95:55:5e:9e:c6:72:38:b9:b8:18:f6:1b:ee:
9f:8e:3e:70:76:36:0f:b1:8f:12:01:58:0e:17:93:
e4:ff:c2:21:89:be:77:6a:3c:59:01:7c:80:e6:42:
9e:34:10:3b:b9:b1:13:de:cb:99:45:a8:58:49:9d:
b5:74:a8:e9:16:66:36:4d:f2:f7:d1:06:b3:fa:ef:
aa:f9:49:2f:4e:f0:95:e5:48:6d:5a:6c:ac:f6:d0:
5c:52:65:47:9a:f2:f9:6b:6e:f3:3d:0a:2b:8f:e9:
1f:79:31:0a:38:48:40:cd:c4:2d:fa:0c:d7:ce:9b:
c8:14:e6:d2:ff:33:af:95:aa:25:6d:40:1d:cc:69:
e8:e4:df:e8:d9:7d:6f:14:59:5a:fd:03:ca:d5:4f:
3e:83:a8:8a:66:4f:c5:73:0d:ac:14:cd:1c:4b:13:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:B9:D6:01:F1:DE:8E:EB:37:3A:7E:26:F3:5B:98:1A:F0:D2:12
X509v3 Authority Key Identifier:
keyid:49:FF:AF:88:F9:E3:35:2C:5D:66:D4:19:62:64:FC:0F:7B:91:1B:27
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49FFAF88F9E3352C5D66D4196264FC0F7B911B27.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JCgoiV1Jo7sCojjmsnHd41irbXFwQhrhh8wv3PUHjQZo/3/323830343a386235633a383030303a3a2f33342d3334203d3e20323733373238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8b5c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
6f:e6:b8:65:4f:de:c9:f6:a3:90:63:78:9e:2a:76:1d:6c:53:
5d:90:82:3b:e9:63:5c:8c:66:ae:5d:0d:1c:9d:b3:fe:c6:29:
1c:06:06:63:11:13:58:85:bf:45:a3:2a:1e:ed:45:bb:43:0c:
f9:5d:19:96:fa:c6:3f:a4:49:fa:c2:3c:f5:a1:99:35:22:c8:
c4:0a:83:17:8c:3a:dd:a4:b2:a8:1a:62:ba:81:3d:77:6b:42:
e8:cb:99:36:59:d6:90:5d:96:39:46:4b:93:d5:e0:83:93:15:
2e:9b:c8:03:72:e9:4c:6f:49:b7:fa:d8:73:b1:c6:c6:ea:a6:
6e:6c:cc:34:36:50:16:c2:a6:7f:8a:44:3c:7a:7a:25:3a:1c:
1d:68:f9:5c:f5:63:8d:1f:e8:d2:de:74:3b:d1:6e:4b:70:7c:
94:8a:ca:25:bd:cf:32:54:62:17:1d:44:9b:ff:5f:0d:ad:71:
d4:35:7a:0f:b4:74:7b:3a:80:73:d7:91:e1:b1:b1:e9:37:23:
d7:90:9f:d3:e6:51:b2:bc:57:fe:cc:94:9e:f9:da:0e:4d:73:
35:1b:e2:d8:7a:a3:e4:92:44:70:7b:3b:45:1b:aa:81:47:5e:
2f:b0:cb:6d:fd:2b:0a:ff:83:19:7b:92:18:cd:f6:ce:8a:92:
f0:b5:c7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:44 2025 by rpki-client