Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
File: 323830343a6132383a3a2f33332d3333203d3e20323633303236.roa (raw, json)
Hash identifier: IQ72wSMJ0erqX6Vbl5hXb9tas6y98yeoBY4lD9dMjWo=
Subject key identifier: 3E:3D:6B:EA:26:ED:11:76:01:1B:A8:DB:B5:75:57:D2:38:8C:5E:3B
Certificate issuer: /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial: 32BBCB3568E6728663C6BC82D44AED4C3D378FC5
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access: rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
Signing time: Thu 30 Nov 2023 20:23:09 +0000
ROA not before: Thu 30 Nov 2023 20:18:09 +0000
ROA not after: Thu 28 Nov 2024 20:23:09 +0000
asID: 263026
IP address blocks: 2804:a28::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:bb:cb:35:68:e6:72:86:63:c6:bc:82:d4:4a:ed:4c:3d:37:8f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Validity
Not Before: Nov 30 20:18:09 2023 GMT
Not After : Nov 28 20:23:09 2024 GMT
Subject: CN=3E3D6BEA26ED1176011BA8DBB57557D2388C5E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:86:42:5c:a0:05:c1:cb:f6:87:7c:cd:9a:32:
c3:4a:c1:da:84:44:e2:8c:74:eb:33:27:b1:e8:95:
35:6d:0f:89:a1:7d:6f:db:7d:bb:5d:46:d1:90:3c:
9d:3c:92:31:20:ce:09:92:90:34:d1:7b:e8:de:96:
32:61:67:54:2f:c5:64:79:96:ba:22:62:ed:85:ec:
6d:e9:f3:3b:fc:fe:8d:e2:36:30:ae:d8:fb:1c:3e:
a6:48:8e:70:73:a8:4b:0b:b3:70:1c:1e:a7:56:04:
69:b1:d3:e2:ab:40:5b:73:66:91:74:b4:85:2d:a2:
a3:ce:df:e8:c1:4c:22:2c:c9:10:43:f0:65:30:fc:
dc:1e:d7:ee:69:a0:4a:1a:e9:3f:bd:e3:17:f7:ed:
ac:87:2f:92:5e:a4:10:27:22:2b:6e:c8:d3:2c:11:
3b:c5:34:87:e9:63:d4:e4:6d:8c:29:40:91:16:18:
1f:e2:c2:35:00:94:dd:26:53:28:93:6e:ab:f4:c3:
84:18:73:b2:59:4d:4d:4d:3c:06:5a:cb:d1:60:4d:
f0:20:0d:63:e5:be:94:6e:d3:d3:b4:2d:f7:7e:fe:
9e:9d:37:2f:0b:5d:8a:51:f1:b8:3b:74:60:bf:ef:
13:37:14:d1:21:fa:0b:19:eb:f4:2c:84:4f:96:44:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:6B:EA:26:ED:11:76:01:1B:A8:DB:B5:75:57:D2:38:8C:5E:3B
X509v3 Authority Key Identifier:
keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a28::/33
Signature Algorithm: sha256WithRSAEncryption
4b:c0:6c:94:60:67:64:9f:30:a2:33:61:49:d4:6d:20:3e:1f:
da:4d:35:0d:a2:6e:7c:62:94:b7:50:f3:44:68:d8:df:2b:de:
71:1b:b4:b3:d2:b5:96:fd:f9:65:d1:40:32:b5:b6:35:1b:ce:
5b:b6:82:a3:3c:14:89:37:7d:03:d6:25:5d:76:49:15:63:18:
af:a6:41:ba:b0:07:55:3f:81:a1:a1:a1:e0:4c:45:f2:27:21:
9a:b7:1d:4f:91:f8:17:f0:9f:72:65:0d:55:06:9b:b3:a3:43:
78:96:ab:04:56:f7:84:68:20:55:07:fc:8b:ad:46:79:80:bf:
68:03:d4:4c:5e:62:0a:98:4a:5c:7d:34:8c:89:5f:e4:29:7f:
ab:e2:e9:ae:f2:a2:4a:02:f9:aa:ec:d4:c2:c4:48:f6:a8:46:
c0:23:b7:f0:a1:86:00:3c:5c:c2:db:d0:4f:8b:2e:8b:85:39:
73:81:30:c5:a7:12:5a:49:64:7e:8d:cf:8f:6c:13:f8:41:1b:
c0:3f:c3:70:2f:10:4f:a8:64:12:1f:ee:6b:12:44:dc:fa:c4:
22:9a:e3:66:49:36:09:47:91:14:48:95:05:d6:1d:a3:6a:f7:
02:dd:b1:96:d5:48:e6:08:2c:9f:39:8b:48:0a:f1:b7:50:e5:
84:67:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:31:00 2025 by rpki-client