Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
File: 323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa (raw, json)
Hash identifier: R/KaSVwGXXh5T1E7YX4kgDJpY90a5FOQThOU0H63w18=
Subject key identifier: 0C:CD:F8:37:1C:4F:B7:B9:3E:AE:48:D0:6E:A0:A4:97:26:17:3B:58
Certificate issuer: /CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
Certificate serial: 6D59D947336D805F4AA366015EB1DE5BF241B35B
Authority key identifier: 41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
Signing time: Wed 03 Apr 2024 21:03:47 +0000
ROA not before: Wed 03 Apr 2024 20:58:47 +0000
ROA not after: Wed 02 Apr 2025 21:03:47 +0000
asID: 269555
IP address blocks: 2804:6664:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:59:d9:47:33:6d:80:5f:4a:a3:66:01:5e:b1:de:5b:f2:41:b3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41FAEE4FB242061F96FA0AC747E9DAAF65360241
Validity
Not Before: Apr 3 20:58:47 2024 GMT
Not After : Apr 2 21:03:47 2025 GMT
Subject: CN=0CCDF8371C4FB7B93EAE48D06EA0A49726173B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:aa:eb:ce:c6:9d:ca:8e:a0:22:60:34:0b:
66:0a:c3:5a:4a:a9:74:23:ff:bb:98:7f:b6:96:9b:
bf:15:8d:b3:45:60:6d:a9:b4:4a:8d:77:98:93:d7:
8d:a3:a4:bc:33:bd:0c:68:93:0b:c1:d1:c7:cd:c3:
c1:18:e1:c2:18:7d:b1:b5:82:0a:87:87:02:c6:74:
59:a4:60:3f:fa:43:9d:93:a3:0c:1f:10:ad:3a:d2:
18:72:19:9b:d9:6b:99:71:fd:5d:af:6b:f2:a1:d5:
c1:67:e7:b6:9f:e8:29:ad:11:f2:f8:ba:0d:c5:76:
de:64:62:c6:d6:d7:9f:de:02:df:fb:f1:f2:29:f3:
8f:89:42:2d:ba:7c:26:00:40:8a:83:70:82:5d:be:
17:02:f2:28:2f:ba:63:dd:e3:3c:d7:c5:f7:13:2f:
91:b5:6d:3d:fa:48:22:3d:6b:46:66:85:e7:e4:b4:
6e:19:08:4d:7b:a9:77:0f:35:79:42:75:be:7f:0d:
eb:8a:07:b0:dc:3a:2f:a2:10:0b:6a:ef:78:e0:e6:
e4:c7:d2:34:6b:f6:07:6e:dc:8b:52:0d:3f:95:8f:
af:2a:c6:81:9a:aa:74:5e:ad:c2:f4:cf:0e:13:80:
f8:97:e4:fa:f2:74:3f:cc:24:ea:3e:65:ac:65:69:
d3:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:CD:F8:37:1C:4F:B7:B9:3E:AE:48:D0:6E:A0:A4:97:26:17:3B:58
X509v3 Authority Key Identifier:
keyid:41:FA:EE:4F:B2:42:06:1F:96:FA:0A:C7:47:E9:DA:AF:65:36:02:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/41FAEE4FB242061F96FA0AC747E9DAAF65360241.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dbQ8tMNmgPq6NXP5Uqw3rprcibbBwA1VAT7vDzjgiZG/1/323830343a363636343a383030303a3a2f33332d3333203d3e20323639353535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6664:8000::/33
Signature Algorithm: sha256WithRSAEncryption
b2:33:23:ab:02:74:f3:29:1b:fb:6d:a9:27:77:71:3a:a0:38:
9b:a4:2d:15:3a:fc:bd:82:90:36:b4:aa:31:fb:8c:4b:ac:0d:
92:dc:30:b0:db:6e:64:ac:a4:f5:1a:40:f1:4e:56:da:d4:6d:
e5:da:d7:c9:eb:ed:b4:c8:92:79:9f:52:ec:ff:65:dd:01:0b:
45:bb:e7:dd:21:a4:2b:ef:c2:65:33:d9:7f:cf:98:be:a0:61:
50:c0:41:48:02:2a:6c:6b:3f:f5:aa:a8:23:6d:7b:bc:63:0c:
24:b3:d7:c4:7e:03:23:9a:ee:11:dd:b7:68:d8:17:5d:cd:b0:
d8:f3:76:05:f2:23:72:4d:2f:6f:4b:f7:4f:81:72:4f:87:91:
70:e2:ae:c0:9c:69:74:bd:cf:2a:71:63:0e:35:a3:4e:f9:37:
b9:75:ab:65:0e:1e:cb:e6:39:18:46:b3:7d:5e:fd:e2:d0:df:
4b:f5:b2:4f:2a:eb:58:41:fa:b5:75:96:28:0d:c0:77:67:bc:
38:80:5b:45:15:f4:8b:c3:db:19:bf:0c:e2:28:a4:70:ba:e1:
55:34:8f:ed:38:f0:b2:ae:b3:1e:e7:d1:98:ce:78:22:0a:19:
31:ae:10:85:17:3e:39:f9:40:9e:ec:f1:4e:fc:1f:1f:61:42:
11:e5:23:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:11 2025 by rpki-client