Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a343030303a3a2f33342d3334203d3e20323633353730.roa
File: 323830343a6633343a343030303a3a2f33342d3334203d3e20323633353730.roa (raw, json)
Hash identifier: 4ZALDYAUtK4ukNqz4CXYYZxmWQXw7rROzEorr2Xhhsg=
Subject key identifier: 9D:34:55:7A:0C:1D:D2:10:AC:60:C1:13:8D:15:A4:F6:F4:F1:13:CB
Certificate issuer: /CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Certificate serial: 2B5CEF3138FDE66CBB7123491F361AD9007B20A4
Authority key identifier: 9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a343030303a3a2f33342d3334203d3e20323633353730.roa
Signing time: Thu 06 Feb 2025 13:57:38 +0000
ROA not before: Thu 06 Feb 2025 13:52:38 +0000
ROA not after: Thu 05 Feb 2026 13:57:38 +0000
asID: 263570
IP address blocks: 2804:f34:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:5c:ef:31:38:fd:e6:6c:bb:71:23:49:1f:36:1a:d9:00:7b:20:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E
Validity
Not Before: Feb 6 13:52:38 2025 GMT
Not After : Feb 5 13:57:38 2026 GMT
Subject: CN=9D34557A0C1DD210AC60C1138D15A4F6F4F113CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:96:fe:bf:9c:39:b7:c0:6c:f3:b4:2c:6a:09:
3f:d1:e7:6d:f3:eb:0e:4f:5d:cd:d0:99:72:d7:57:
9e:67:56:39:ef:3f:78:88:f2:c2:be:2d:3b:29:3a:
46:53:d1:28:95:45:1a:25:27:f3:14:f4:0f:9e:a5:
2b:f8:0a:72:eb:26:4a:3b:de:d2:ae:ad:53:b0:7c:
25:18:09:7f:97:a1:b0:03:8e:43:b8:b9:29:10:82:
fb:c2:c4:fd:29:20:3f:12:71:b7:49:0f:89:46:9f:
e3:e0:d8:ee:6e:96:4c:c8:28:e5:54:9b:05:d8:d0:
c8:c4:03:f6:f9:b5:e9:94:50:d3:c7:92:3a:71:54:
d1:5b:29:37:a0:af:1b:31:e9:47:bd:0c:da:3c:4d:
b0:33:6f:cf:ba:d7:5e:6d:41:5a:e9:6a:d4:30:e9:
c6:bc:2e:64:92:4b:09:ce:29:cd:f3:13:eb:81:5b:
5e:2c:48:5b:cf:7d:e3:1b:fa:da:25:55:69:84:ca:
04:82:29:06:38:78:52:c7:15:68:a4:cd:0f:52:77:
4e:bf:58:a5:bb:17:3a:b4:dd:b1:57:11:34:ac:07:
50:9b:19:c6:35:34:a8:9a:20:47:06:eb:a1:f5:57:
82:bb:94:d5:10:74:4c:67:43:9d:77:a9:63:75:21:
b3:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:34:55:7A:0C:1D:D2:10:AC:60:C1:13:8D:15:A4:F6:F4:F1:13:CB
X509v3 Authority Key Identifier:
keyid:9C:CB:EA:FC:8F:E8:C1:6A:27:70:51:5F:21:C0:66:4C:A9:1E:CC:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9CCBEAFC8FE8C16A2770515F21C0664CA91ECC8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/p6PvWskwYx2XivX7BGjwurXzybsrGDBCWJaG9hw26gJ/0/323830343a6633343a343030303a3a2f33342d3334203d3e20323633353730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f34:4000::/34
Signature Algorithm: sha256WithRSAEncryption
a7:1d:73:b3:9f:df:9f:bd:9e:94:85:29:a0:ee:88:66:3b:f5:
8e:0a:12:f2:43:2d:74:d4:f0:76:f1:4d:81:1f:7a:89:45:d2:
95:fc:90:ec:6a:16:52:e8:be:6b:64:85:39:87:a8:da:dc:c9:
b9:f0:5e:14:b1:a6:21:2e:fc:94:e9:98:13:56:6e:8e:c8:b5:
2b:c4:7a:f1:86:77:13:10:64:04:be:ea:7d:84:fb:f6:e5:f0:
da:a4:51:f7:c3:ad:18:9c:ca:df:bb:d2:e0:5a:ca:cb:92:6f:
79:b5:a4:fd:a8:49:04:89:25:e5:b2:07:0f:b9:75:c0:98:af:
88:5d:7f:5c:85:7b:57:66:f1:c9:37:d5:b8:fb:c0:67:6e:39:
b1:b9:73:7b:3b:9a:2a:f7:67:63:e3:1c:5f:11:46:d3:e9:45:
c9:ba:93:d0:de:52:96:e1:28:c2:7d:cd:d1:5f:b8:b1:48:d4:
22:7c:56:da:66:8e:70:15:b9:1f:07:2f:c6:3c:fc:42:f7:1b:
51:80:16:00:73:68:f2:a8:d3:3d:90:44:34:f8:f8:ee:ee:5b:
f9:b9:39:73:2f:c4:25:4c:24:44:45:17:97:d4:b0:ab:c3:2d:
05:4d:d9:9b:0a:fe:4a:b6:7b:3b:aa:c1:d6:48:0c:b0:54:21:
d3:64:73:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 13:52:21 2025 by rpki-client