Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
File: 323830343a6132383a3a2f33322d3438203d3e20323633303236.roa (raw, json)
Hash identifier: FnfBu6heAlERIdVBR38vM+pyuVhwcJmOiLFjn4e+5g8=
Subject key identifier: 11:36:00:D2:26:DA:A0:A2:DA:C7:03:7E:75:77:50:0C:86:72:D6:F2
Certificate issuer: /CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Certificate serial: 575C78B5BC5FAEA3EFAE5BB6E0A0935E3F91DE38
Authority key identifier: 3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
Signing time: Fri 03 Jan 2025 14:21:25 +0000
ROA not before: Fri 03 Jan 2025 14:16:25 +0000
ROA not after: Fri 02 Jan 2026 14:21:25 +0000
asID: 263026
IP address blocks: 2804:a28::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5c:78:b5:bc:5f:ae:a3:ef:ae:5b:b6:e0:a0:93:5e:3f:91:de:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F50B1080599A7B91D805ADC9C3E7B90AE734736
Validity
Not Before: Jan 3 14:16:25 2025 GMT
Not After : Jan 2 14:21:25 2026 GMT
Subject: CN=113600D226DAA0A2DAC7037E7577500C8672D6F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:c8:7d:d5:62:e7:59:1d:55:e7:1d:0c:63:
0f:94:dd:72:d0:70:08:5c:3b:47:cd:09:1b:fd:a3:
bc:38:7a:7e:5b:bc:6e:11:9a:c0:f3:e2:c6:af:b1:
e6:22:9e:90:28:d6:d9:3f:c1:50:ab:cf:e6:f3:1f:
69:1e:66:1d:e9:62:fc:ea:82:9f:aa:af:f9:bd:33:
76:8c:0e:81:20:be:9a:37:22:74:3e:d4:75:c8:c2:
b9:1a:b7:10:fe:14:86:09:d1:e9:78:a0:0e:bd:29:
88:95:11:61:59:5d:a4:8c:1e:88:e1:9f:da:30:3c:
18:0f:14:76:b5:ad:04:ca:92:38:d6:77:4d:9a:d8:
53:a8:5b:e1:25:d9:f2:2e:71:19:ba:eb:1a:94:f8:
71:15:91:b9:9e:ce:f4:aa:b7:e2:8c:14:c2:49:00:
b8:32:8c:ed:95:65:67:1b:62:da:3c:5e:c0:5f:21:
ce:5e:05:26:21:5d:00:4f:5a:e8:17:80:af:07:79:
a0:a8:61:07:0e:0f:43:c8:70:6b:5a:f8:a6:2e:3d:
f1:f3:36:fd:3b:c4:d5:58:af:99:80:af:4a:af:9a:
55:af:f2:c2:9d:dd:42:34:dd:ad:04:7b:3a:5a:ba:
96:27:f9:70:8e:f7:32:2d:58:fe:14:a0:4a:ef:fa:
7b:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:36:00:D2:26:DA:A0:A2:DA:C7:03:7E:75:77:50:0C:86:72:D6:F2
X509v3 Authority Key Identifier:
keyid:3F:50:B1:08:05:99:A7:B9:1D:80:5A:DC:9C:3E:7B:90:AE:73:47:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/3F50B1080599A7B91D805ADC9C3E7B90AE734736.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F50B1080599A7B91D805ADC9C3E7B90AE734736.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3438203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a28::/32
Signature Algorithm: sha256WithRSAEncryption
6d:49:89:4c:c6:9a:44:37:98:4f:40:98:c3:f9:96:3d:a5:f3:
c0:3c:71:c2:65:29:d3:b7:07:d2:ab:57:1e:51:00:04:12:c3:
7f:5e:c5:cf:6e:c6:70:09:df:5d:fc:ec:9f:a1:f0:97:6b:0d:
64:7f:93:72:d2:ca:93:d9:fe:8b:62:7b:fd:ad:4b:5b:c1:f1:
9f:ed:88:a8:b3:94:ab:3f:1d:41:95:d4:da:3c:56:a1:c8:73:
05:01:01:f8:a2:83:57:68:7d:eb:0f:58:76:b7:30:40:32:b2:
5c:5c:b1:1c:be:a8:95:a3:60:0e:13:64:d7:ba:33:b3:dd:16:
52:63:39:84:5f:df:6a:39:3d:af:3d:ae:3b:c8:b6:1e:83:6f:
d0:7c:84:a2:93:de:4c:37:19:b2:66:cd:f2:be:9b:03:ca:13:
26:34:45:b2:51:7a:9d:e6:c7:31:83:ff:04:33:a6:20:e1:2c:
2e:5c:c2:15:ea:be:0d:f5:35:c5:36:04:9d:40:9f:23:5f:da:
31:b1:cb:55:bd:53:18:1b:bd:91:51:72:60:c5:ef:98:03:6b:
f9:3f:d3:53:84:82:f1:e7:d4:8b:53:5d:05:3e:e2:c0:69:f9:
78:95:b7:ab:e1:9f:38:ae:b1:ac:37:23:d2:f5:67:d6:2e:e1:
7e:c5:9b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:28:46 2025 by rpki-client