Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030353a3a2f34382d3438203d3e20323632353639.roa
File: 323830343a3632633a323030353a3a2f34382d3438203d3e20323632353639.roa (raw, json)
Hash identifier: 4pX0DQEtst0gg6kaiE+rgqXdnWQGZeW7+KB5tM4ejxk=
Subject key identifier: 5A:C5:DE:F3:C8:09:A7:1C:F2:D8:E9:67:70:EE:45:74:ED:6D:2D:2A
Certificate issuer: /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial: 05F3142F0FEF63E956DD098F8243948180B8BFDB
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030353a3a2f34382d3438203d3e20323632353639.roa
Signing time: Tue 29 Oct 2024 19:48:59 +0000
ROA not before: Tue 29 Oct 2024 19:43:59 +0000
ROA not after: Tue 28 Oct 2025 19:48:59 +0000
asID: 262569
IP address blocks: 2804:62c:2005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:f3:14:2f:0f:ef:63:e9:56:dd:09:8f:82:43:94:81:80:b8:bf:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Validity
Not Before: Oct 29 19:43:59 2024 GMT
Not After : Oct 28 19:48:59 2025 GMT
Subject: CN=5AC5DEF3C809A71CF2D8E96770EE4574ED6D2D2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:31:b8:11:02:21:a0:bf:c5:da:9e:45:b7:9b:
37:4b:6e:7c:2f:c5:09:1a:4c:8f:e9:ee:19:81:d1:
c8:fe:d6:dc:cd:aa:07:3e:82:ab:19:a5:aa:f9:e1:
27:19:35:2f:6e:4c:d5:1e:40:0e:8a:ab:b1:88:d2:
b5:e6:ed:93:17:ea:04:2d:06:03:37:45:c2:94:af:
c1:1e:a6:52:3d:a0:62:d0:7f:6d:67:3f:d6:12:9b:
9b:1b:45:fe:35:f8:ce:a0:8e:4d:5c:22:99:3d:a7:
a9:41:62:40:90:81:42:60:fe:69:ad:ae:23:c0:c1:
76:90:f9:da:33:05:14:33:2b:da:eb:99:1f:33:11:
a8:bf:bb:94:4e:6d:43:15:ca:00:c4:a5:af:29:54:
51:ac:b5:6a:84:b1:10:c4:27:75:0a:b1:8e:6c:13:
8e:77:9c:71:e9:06:bc:41:f3:d6:79:26:8b:e8:20:
d2:3c:2c:7c:fd:2a:de:6c:c0:d0:0f:61:67:32:eb:
53:65:06:77:3e:64:ca:bf:64:b8:80:1b:23:77:af:
75:1b:07:cc:96:fe:b5:20:9e:4a:12:11:d0:61:3a:
52:4b:5f:a3:38:22:91:3c:ab:87:b9:54:ca:be:4c:
db:30:b8:26:95:48:5c:74:1a:76:69:81:e2:97:0a:
a6:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C5:DE:F3:C8:09:A7:1C:F2:D8:E9:67:70:EE:45:74:ED:6D:2D:2A
X509v3 Authority Key Identifier:
keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323030353a3a2f34382d3438203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:62c:2005::/48
Signature Algorithm: sha256WithRSAEncryption
2d:4b:dc:e4:1f:50:a6:20:e6:05:59:de:0c:2f:ab:af:59:36:
27:5b:cb:8f:d5:2b:50:a6:b2:42:60:b4:0e:ce:a8:7a:b3:21:
6a:71:58:28:ff:58:f3:7f:45:e0:a4:dd:66:8f:ed:eb:0d:4f:
8f:91:14:7e:db:20:f2:7b:ea:b8:d3:fb:53:4b:95:06:81:63:
90:5c:4a:58:8b:ba:fe:7d:ba:31:27:72:c2:23:64:5a:a3:8e:
91:ae:cf:31:0a:f1:bf:71:a5:21:af:71:0f:fa:1e:be:46:eb:
9d:d4:36:77:62:96:da:fc:6f:32:04:72:2b:a5:11:7a:e0:25:
72:43:ed:75:42:e7:1c:43:0f:3f:89:6a:82:25:bd:90:76:15:
b5:69:d3:01:8d:da:d1:d2:30:bf:19:46:c8:ec:0a:b2:6e:01:
d8:ea:db:6b:36:d1:25:c1:59:36:99:e7:7d:59:c5:5e:0c:cc:
b8:d6:c5:32:cb:05:13:9a:3a:97:03:0c:0a:7b:24:8c:42:4e:
bb:75:ed:87:ae:ad:a2:e4:49:35:54:55:73:d9:22:2c:c2:3f:
60:1e:98:a0:52:34:c1:cb:f6:eb:7d:ad:a6:6c:5d:a7:b9:e9:
4a:bf:81:ae:a2:cf:c5:0b:79:50:a8:b4:94:50:9f:42:22:b4:
a8:e7:58:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:24 2025 by rpki-client