Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa
File: 323830343a323832633a3a2f33322d313238203d3e20323633393435.roa (raw, json)
Hash identifier: 0KUTXNgpxOk42MbtBHoHJUSo9wacb+pUT/drXEmeJuA=
Subject key identifier: 5C:8C:DC:9A:F4:27:AC:55:9C:03:A1:C7:E2:A4:7B:00:48:5D:4B:9E
Certificate issuer: /CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Certificate serial: 15C54F2496958FA1F13CE71DB416FC5ED5FCF5F4
Authority key identifier: AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa
Signing time: Tue 27 Feb 2024 17:30:16 +0000
ROA not before: Tue 27 Feb 2024 17:25:16 +0000
ROA not after: Tue 25 Feb 2025 17:30:16 +0000
asID: 263945
IP address blocks: 2804:282c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:c5:4f:24:96:95:8f:a1:f1:3c:e7:1d:b4:16:fc:5e:d5:fc:f5:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80
Validity
Not Before: Feb 27 17:25:16 2024 GMT
Not After : Feb 25 17:30:16 2025 GMT
Subject: CN=5C8CDC9AF427AC559C03A1C7E2A47B00485D4B9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:be:48:43:a9:2d:1e:05:e7:82:c9:71:30:d7:
37:c5:8f:45:59:6a:cc:13:10:61:4a:24:11:3f:38:
a1:7a:c9:3d:b3:c0:21:f1:d4:7f:c1:84:cd:3d:28:
16:10:be:5d:52:87:7b:fb:36:b7:4b:b2:9d:33:35:
af:d2:34:25:19:2d:b6:12:83:09:43:cd:fd:c7:71:
d4:26:ef:5b:3a:34:e1:0a:8c:1d:d7:ea:0d:cb:44:
c5:44:bf:27:0e:6f:44:65:30:c5:67:49:78:86:36:
c7:35:ee:88:f9:73:27:6e:50:7c:f5:49:f2:ea:32:
32:19:31:b1:68:2a:84:1f:a0:67:a9:12:4d:04:aa:
8f:b4:68:ac:9a:6d:a6:d8:03:54:a9:44:c6:b7:79:
87:13:23:a4:b6:32:6c:04:00:65:8d:14:6f:8f:38:
3f:df:57:d2:d8:3e:d3:cc:80:ac:58:bd:39:32:d2:
c3:9b:8d:9e:ca:dc:56:88:26:62:9b:c7:3f:f7:e4:
cc:b9:7d:28:08:bf:e0:07:12:2f:2c:25:c6:8f:42:
c2:dd:b1:56:ea:82:d0:61:fc:b4:1f:eb:b1:a1:0a:
24:d1:a5:ad:6b:a9:87:d9:cb:0f:70:ed:3f:fd:a1:
03:25:66:98:5d:e9:ad:cb:da:d0:da:1d:b2:d2:f8:
c6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8C:DC:9A:F4:27:AC:55:9C:03:A1:C7:E2:A4:7B:00:48:5D:4B:9E
X509v3 Authority Key Identifier:
keyid:AE:34:39:A1:4E:FE:98:DB:77:5A:CE:C2:A1:E4:F5:A7:F7:C3:1C:80
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE3439A14EFE98DB775ACEC2A1E4F5A7F7C31C80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEkrqopkiTkmVZtd7faj2wamGyBakptq5eWKzSTCgenw/0/323830343a323832633a3a2f33322d313238203d3e20323633393435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:282c::/32
Signature Algorithm: sha256WithRSAEncryption
86:eb:df:be:af:e7:24:7a:d9:8d:1d:5b:97:b3:05:9c:91:55:
00:0a:79:7f:f5:37:4d:d4:7f:fe:ea:87:18:89:be:c2:c8:98:
6f:94:82:c5:65:da:55:7f:61:06:d5:0f:21:cd:46:0a:70:58:
cc:5b:dd:45:1c:c4:30:d7:0d:75:61:6a:75:f0:d4:b4:b2:90:
6f:0c:59:9d:e7:99:fa:24:2a:ff:89:61:11:f4:a4:73:33:5a:
1f:69:3f:c9:6b:f0:25:66:29:a4:33:89:8c:0a:38:35:8e:53:
87:02:8a:90:be:3a:4f:f8:e6:e2:20:32:0f:0d:7e:9e:6c:44:
c0:83:79:fe:b6:cc:ae:5d:06:8f:6b:1a:20:87:0c:63:e0:c0:
a9:79:a9:62:27:2b:c4:96:b5:e6:f5:13:f9:7f:10:31:d8:10:
95:42:fd:6f:0e:8b:c7:1f:51:fe:61:c1:57:06:52:c8:49:77:
c3:4f:de:a2:54:b9:32:9c:cd:66:64:22:bd:b4:e5:24:19:ad:
13:49:21:20:1d:c0:94:3f:a8:41:4c:49:84:8d:a2:6c:43:68:
22:71:a5:8a:e9:36:24:fd:23:28:5e:b1:ed:96:ce:08:36:8f:
e8:fb:be:2a:6e:e0:47:c5:f9:a0:89:d8:13:30:e3:a3:e3:74:
84:75:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 09:12:08 2025 by rpki-client