Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: X0M1SzTynMVAkVVstHt/zf1lhglsZIiLa4HMOGTN/bM=
Subject key identifier: 65:55:90:F8:BF:E2:D3:95:5E:CC:0C:6A:66:5E:3E:78:65:DC:56:79
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 69B76EFA2E278F62062EE915F4650E3E0D2555CE
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:32 +0000
ROA not before: Thu 03 Nov 2022 18:38:32 +0000
ROA not after: Thu 02 Nov 2023 18:43:32 +0000
asID: 269463
IP address blocks: 2804:6504:9c00::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:b7:6e:fa:2e:27:8f:62:06:2e:e9:15:f4:65:0e:3e:0d:25:55:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:32 2022 GMT
Not After : Nov 2 18:43:32 2023 GMT
Subject: CN=655590F8BFE2D3955ECC0C6A665E3E7865DC5679
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:65:03:22:8d:26:bb:e4:62:a6:85:8e:e3:92:
e1:e4:3e:7f:d1:da:83:cb:59:5f:b5:b6:f8:82:db:
3f:57:1f:94:20:65:a2:b5:f7:56:0a:01:53:2a:5a:
48:0f:00:7f:4d:14:8f:00:ad:c3:32:1e:a4:a9:21:
2e:d1:af:55:3f:84:32:56:51:15:a9:98:c2:a8:36:
44:c9:22:58:a0:1f:de:70:d3:31:02:f2:3f:ed:a7:
cc:a7:c5:a2:99:29:8f:cf:d5:5b:7c:c1:8b:24:8a:
bc:dd:fb:89:68:ad:8e:54:04:d8:35:ef:28:6c:cb:
f7:dd:9f:57:d2:58:61:de:64:73:5d:0b:e9:c9:37:
b8:55:41:90:66:d3:02:f4:a5:31:d4:f1:2d:90:7d:
60:4b:a9:09:2b:d7:f0:5a:7c:a2:60:9f:45:26:fb:
0e:5c:39:2e:83:aa:4a:cf:d3:7f:2d:4e:1b:23:56:
11:0e:df:62:4b:76:10:45:15:6a:22:eb:e8:81:ef:
93:da:8d:fe:41:24:d9:fc:ed:cd:a6:e6:ef:d9:cf:
76:b0:b6:0e:5b:7c:9c:a7:62:dd:5a:53:40:05:c6:
c1:a2:60:cd:e4:b7:dd:70:2e:cc:43:8c:23:8f:56:
7d:80:29:6e:f6:ae:05:f2:f1:09:c0:79:28:81:7b:
1a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:55:90:F8:BF:E2:D3:95:5E:CC:0C:6A:66:5E:3E:78:65:DC:56:79
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a396330303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:9c00::/38
Signature Algorithm: sha256WithRSAEncryption
2d:5c:6a:3c:e3:b9:fd:e9:3a:d7:59:97:4a:ad:de:2d:f4:95:
f2:43:66:4b:b8:c6:0b:ca:35:84:69:ff:5f:70:44:a7:19:0c:
fb:c0:a2:97:1c:99:f6:a8:69:c4:e2:ac:5a:03:c6:71:29:38:
4d:8f:2a:ef:75:68:b9:83:75:6b:d7:4b:3b:9b:57:77:34:a5:
73:6c:2d:55:f6:db:6f:e1:97:cb:92:19:e6:9b:24:5e:67:8b:
72:41:41:fa:26:a7:59:a4:58:ee:27:42:a9:cd:8c:6c:3a:b5:
7a:10:a2:14:3f:af:bf:fb:bb:ab:fe:dc:81:e5:af:d4:30:1b:
a0:3c:6c:e6:67:77:a4:14:07:72:df:5c:a9:4d:2f:ed:55:19:
0f:0d:aa:fc:f4:3c:3c:49:17:13:8a:c9:66:52:f1:f4:1c:5b:
44:50:ee:4c:27:2e:75:ff:49:1b:d2:83:61:11:82:66:71:4d:
99:bc:2e:78:25:9f:c8:31:c3:b1:d0:e0:b9:41:bc:25:f9:7d:
da:bb:3a:7a:7a:91:04:37:75:98:dc:ac:7c:18:48:70:ea:c6:
93:8f:63:d1:bb:ad:79:5f:98:85:e5:ff:39:a6:b1:f4:00:70:
e4:ea:c8:ee:0b:61:06:9d:1f:1c:10:ea:b1:d2:db:cf:84:63:
03:6d:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:37:33 2025 by rpki-client