Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a313364303a3a2f33322d3438203d3e20323633323937.roa
File: 323830343a313364303a3a2f33322d3438203d3e20323633323937.roa (raw, json)
Hash identifier: qlTOSDbxADfjVftWKubCi9g/RGtjGNU/KpN9c3Bfp1c=
Subject key identifier: D7:C1:E2:EB:79:84:E5:6D:E7:D5:B0:49:61:83:67:2A:E7:8A:07:DA
Certificate issuer: /CN=416296490F899DB0183C491C69520DEECF540394
Certificate serial: 4E927C8B14D4DDA1608F83222DD3749BAC1D2D04
Authority key identifier: 41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a313364303a3a2f33322d3438203d3e20323633323937.roa
Signing time: Fri 03 May 2024 21:52:30 +0000
ROA not before: Fri 03 May 2024 21:47:30 +0000
ROA not after: Fri 02 May 2025 21:52:30 +0000
asID: 263297
IP address blocks: 2804:13d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:92:7c:8b:14:d4:dd:a1:60:8f:83:22:2d:d3:74:9b:ac:1d:2d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=416296490F899DB0183C491C69520DEECF540394
Validity
Not Before: May 3 21:47:30 2024 GMT
Not After : May 2 21:52:30 2025 GMT
Subject: CN=D7C1E2EB7984E56DE7D5B0496183672AE78A07DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ed:c8:90:1f:07:e6:7a:76:18:cf:d4:76:f2:
46:d0:40:bf:7e:6e:87:54:33:c3:2e:fc:2d:17:1c:
36:e1:e5:e3:f7:89:ee:39:10:1a:35:ed:16:26:5e:
db:08:d2:71:9e:1f:85:2d:35:5b:fa:4b:41:c7:de:
95:2c:1e:9e:1e:33:a0:01:38:2b:2e:a9:f1:db:bf:
cd:a0:39:96:69:9e:b7:ec:ab:25:85:69:79:69:b8:
b9:70:47:74:ea:9a:0e:1e:60:30:f0:a7:24:1f:d4:
46:ae:57:5c:f7:36:69:7f:a3:2b:27:ae:ab:ae:9a:
8d:73:1a:f0:07:6f:5a:ab:8a:68:cb:37:cc:46:a0:
b0:e1:49:17:b6:60:da:48:ce:8f:42:27:e1:7a:80:
58:29:b0:4f:92:51:8d:7a:88:e5:b3:88:69:f2:08:
29:e3:c2:96:bb:85:d9:8c:c5:77:42:b1:4a:59:94:
23:ff:44:c1:f9:ce:87:0b:09:c1:ea:8c:75:a8:f4:
b1:02:f3:37:a1:b3:03:ce:da:a1:4a:76:48:8e:ed:
56:73:5a:ca:16:8f:29:aa:d6:89:1c:ee:b4:c6:ce:
b7:c9:58:0b:fe:00:de:50:cb:6c:a3:af:ac:b6:b6:
cf:92:13:7b:9a:95:b9:0a:91:f7:e9:0c:a5:f8:5d:
1a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C1:E2:EB:79:84:E5:6D:E7:D5:B0:49:61:83:67:2A:E7:8A:07:DA
X509v3 Authority Key Identifier:
keyid:41:62:96:49:0F:89:9D:B0:18:3C:49:1C:69:52:0D:EE:CF:54:03:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/416296490F899DB0183C491C69520DEECF540394.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/416296490F899DB0183C491C69520DEECF540394.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KpJ5uP6qLk2iHW9gWepTDxax6jVvtuQYhFudw9r8Tcy/0/323830343a313364303a3a2f33322d3438203d3e20323633323937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:13d0::/32
Signature Algorithm: sha256WithRSAEncryption
60:18:03:51:55:13:b5:f4:df:24:66:13:40:cc:6a:fe:cf:73:
0d:c5:6a:46:62:6e:81:b6:2f:1d:75:21:f3:63:3c:e8:35:14:
ca:a8:e5:d3:62:b6:52:4c:2a:aa:58:90:e3:07:14:c3:cd:ad:
69:6d:29:93:2b:8f:7f:dd:67:62:a9:23:a7:ed:da:03:a6:ed:
8c:e3:c1:6f:5c:d1:40:9d:ee:64:3d:29:f8:d1:67:20:49:2d:
e0:65:5a:e3:6b:3d:02:3c:11:f3:25:69:8e:2c:9b:f4:f1:d2:
6a:3c:7b:e2:8b:25:99:8e:b0:20:d2:84:ed:6c:24:eb:39:91:
bb:b9:29:27:a9:fa:6a:9b:7e:5d:41:32:dd:94:c4:5e:16:41:
ef:31:bf:8b:c6:41:43:c0:a4:84:5c:23:b9:ba:1f:2a:31:18:
bb:d9:95:f5:35:27:08:f3:81:3f:0c:4a:94:0e:48:3c:ea:d6:
21:8d:ea:4b:1f:8f:ec:4b:74:57:fd:bf:6b:12:49:7e:2e:01:
16:27:37:f3:57:a2:34:3b:4f:0f:2b:02:83:cf:7d:7f:8d:95:
d5:e4:6d:f0:50:ef:12:26:50:b2:7b:f3:b4:ff:7b:e5:b1:5b:
88:29:b6:21:7b:12:e3:62:42:2b:3e:bb:ef:0c:1e:4f:92:d8:
cc:04:ba:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 03:52:09 2025 by rpki-client