Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323031303a3a2f34382d3438203d3e20323632353639.roa
File: 323830343a3632633a323031303a3a2f34382d3438203d3e20323632353639.roa (raw, json)
Hash identifier: u87Q8IiVzxLITsN3LNoWSjDbzG8iPBAJbb7et4i/lKU=
Subject key identifier: 38:C2:F9:03:94:78:92:EE:2F:88:01:8F:F2:5D:A1:F7:E2:80:21:F3
Certificate issuer: /CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Certificate serial: 2178C7CA5B62FC5C1BFF9B5B01A15DBFDA011A82
Authority key identifier: 65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323031303a3a2f34382d3438203d3e20323632353639.roa
Signing time: Tue 29 Oct 2024 19:49:00 +0000
ROA not before: Tue 29 Oct 2024 19:44:00 +0000
ROA not after: Tue 28 Oct 2025 19:49:00 +0000
asID: 262569
IP address blocks: 2804:62c:2010::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:78:c7:ca:5b:62:fc:5c:1b:ff:9b:5b:01:a1:5d:bf:da:01:1a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=659C0711C58D82CB928680EC1097A12AE8F8C66F
Validity
Not Before: Oct 29 19:44:00 2024 GMT
Not After : Oct 28 19:49:00 2025 GMT
Subject: CN=38C2F903947892EE2F88018FF25DA1F7E28021F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1f:16:b6:7d:f5:f7:7f:46:ca:40:bc:2f:bb:
21:14:47:e1:7a:b7:fb:aa:8a:89:0f:9a:a0:df:5b:
f9:1c:a2:4a:1f:b0:ea:d4:84:1d:75:95:d7:48:c5:
df:e5:00:cb:38:8e:91:35:21:34:55:89:94:ec:90:
0c:d9:f7:28:7c:6c:e8:7d:d6:99:ad:b8:e7:0c:e8:
e0:25:df:f1:15:eb:ed:44:21:85:12:4d:bb:99:30:
63:49:ab:57:d5:20:1d:2d:45:fb:4f:64:cb:12:25:
e6:24:b5:27:03:21:09:a6:84:35:14:4a:f0:64:10:
69:3e:dc:5e:62:8c:0a:32:d1:ea:31:dc:82:4c:19:
e5:40:9b:ec:d4:66:66:09:91:1d:6c:c3:3a:14:40:
ae:bc:12:69:fc:57:fc:67:c2:b0:30:ed:fb:ad:27:
9a:97:67:62:7a:73:39:c5:73:44:c9:51:9b:3e:55:
36:02:97:ef:9f:2e:aa:e3:4f:43:ce:28:7c:47:8b:
64:ac:0b:93:ea:50:cd:90:ca:85:3c:c0:a4:70:ca:
20:a2:fe:af:6b:36:db:4c:e3:6e:ed:ba:8e:7b:70:
58:91:52:fd:64:5e:1e:47:1d:b1:a9:35:bb:89:0f:
66:50:d4:95:11:02:03:11:20:3e:81:6f:5d:e5:56:
93:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:C2:F9:03:94:78:92:EE:2F:88:01:8F:F2:5D:A1:F7:E2:80:21:F3
X509v3 Authority Key Identifier:
keyid:65:9C:07:11:C5:8D:82:CB:92:86:80:EC:10:97:A1:2A:E8:F8:C6:6F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/659C0711C58D82CB928680EC1097A12AE8F8C66F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/659C0711C58D82CB928680EC1097A12AE8F8C66F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/RKmrZAKEVeoH7YVe7YGgUjVpJoYTqSGKnHTeXbEqF3b/0/323830343a3632633a323031303a3a2f34382d3438203d3e20323632353639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:62c:2010::/48
Signature Algorithm: sha256WithRSAEncryption
8e:ec:87:48:09:b4:ce:e6:97:8a:d1:5e:a8:73:4b:f3:32:96:
84:bb:f2:0e:b2:91:6b:08:e0:dd:5d:eb:f4:79:aa:e8:e3:11:
3d:23:8b:04:58:8e:2a:22:44:c1:89:80:16:91:32:7e:34:a4:
34:4a:25:40:20:e9:11:f8:81:1a:79:c8:c2:df:2d:57:dd:aa:
f0:32:ca:83:b2:75:6f:41:fd:36:61:dc:1b:a9:2e:47:c6:3a:
1e:2c:a9:d7:a1:ce:e3:39:25:63:f7:86:8c:8a:57:c4:ab:21:
7a:d6:f3:58:02:75:4e:c8:e7:68:eb:79:b4:66:f4:6a:2b:eb:
43:4e:9d:9f:3a:8f:de:01:6b:73:24:4e:14:16:2c:e9:fe:6e:
52:54:1c:01:b7:31:1b:f0:62:19:33:5d:0f:32:c4:12:60:ff:
18:8d:3e:ca:a6:d4:3e:84:f5:5e:af:42:aa:de:f8:12:aa:d3:
ed:98:c7:77:ff:42:d9:05:ad:e8:02:1e:b4:7e:ee:be:c6:f3:
5a:81:36:b9:f2:54:14:14:9b:c4:17:6e:d3:8a:de:2c:f3:de:
fe:39:19:54:21:61:ee:5a:14:69:e1:5a:7d:5b:71:7f:bb:73:
3b:d3:99:5f:ff:81:c9:f8:65:76:c7:4c:c8:31:27:f5:05:c3:
91:8b:87:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:17 2025 by rpki-client