Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
File: 323830343a3832303a3a2f33322d3332203d3e20323632333532.roa (raw, json)
Hash identifier: /9+hUtcHfErKaBhUSlvjLV4L4o0SKjgAyVqXN9M6i8M=
Subject key identifier: 3C:B6:ED:EE:44:A1:05:95:C1:67:25:D2:21:82:79:1E:EC:3D:5A:72
Certificate issuer: /CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Certificate serial: 40732B7D0FBE24E5EA55F735A04CBE686F92519C
Authority key identifier: AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject info access: rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
Signing time: Mon 25 Sep 2023 17:01:30 +0000
ROA not before: Mon 25 Sep 2023 16:56:30 +0000
ROA not after: Mon 23 Sep 2024 17:01:30 +0000
asID: 262352
IP address blocks: 2804:820::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:73:2b:7d:0f:be:24:e5:ea:55:f7:35:a0:4c:be:68:6f:92:51:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE82F78FA2F8486ACA11D8BB3CBB9AA951916202
Validity
Not Before: Sep 25 16:56:30 2023 GMT
Not After : Sep 23 17:01:30 2024 GMT
Subject: CN=3CB6EDEE44A10595C16725D22182791EEC3D5A72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:a4:c1:12:c5:5d:69:6d:ec:f0:24:a9:32:
5b:72:fa:e6:f4:41:7f:15:43:89:ec:39:11:a7:49:
3c:4f:b8:39:31:16:44:68:ad:15:e0:ae:ac:3c:e8:
4b:09:f7:44:6c:9e:1a:5b:b6:a4:8e:98:f8:06:5d:
76:9d:6c:aa:17:f9:dd:1a:c1:21:73:95:e2:7d:5b:
04:8e:c2:a7:11:d6:9e:4c:76:4e:8d:92:d9:3e:e4:
bf:50:26:89:c0:16:23:4a:91:89:1f:ae:9c:3b:9a:
8a:64:a4:a2:43:82:b0:fa:16:3f:23:1e:07:c3:28:
f5:c1:00:74:e2:0b:e8:45:0d:95:bd:07:8b:ea:71:
00:9f:5a:4d:60:f6:b9:72:ba:75:4f:6e:05:b2:39:
c7:06:70:9a:36:ae:d0:fe:7c:60:50:e2:5d:a6:ff:
03:e3:86:68:d3:40:36:97:72:30:53:7c:d7:b2:b6:
66:5f:97:7d:31:6b:17:65:1b:7d:80:53:20:2c:f0:
81:cf:7b:6b:83:e3:66:1b:d8:a6:c1:58:20:10:4e:
94:ea:46:aa:ca:2b:93:d7:e8:1a:4d:ef:24:9f:c0:
26:08:f4:94:4a:a2:40:fa:5b:4e:ea:18:d0:fe:02:
44:a2:32:fd:cd:3a:3c:9c:52:6a:27:42:d8:d4:ee:
8c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B6:ED:EE:44:A1:05:95:C1:67:25:D2:21:82:79:1E:EC:3D:5A:72
X509v3 Authority Key Identifier:
keyid:AE:82:F7:8F:A2:F8:48:6A:CA:11:D8:BB:3C:BB:9A:A9:51:91:62:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE82F78FA2F8486ACA11D8BB3CBB9AA951916202.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/1n7629KYyEh3xG4BBtWuEC21gW4SfrumaD8iVDBNu75/4/323830343a3832303a3a2f33322d3332203d3e20323632333532.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:820::/32
Signature Algorithm: sha256WithRSAEncryption
20:1d:25:55:89:bb:22:d1:02:4b:56:8e:d7:2f:3e:c4:76:28:
43:3d:70:cb:43:4a:81:ae:ae:cb:17:9b:bb:a8:cf:4f:ce:72:
1b:cb:ac:e9:b0:86:3b:16:aa:33:7a:cd:30:bf:e6:43:e7:46:
f9:8d:08:e0:89:83:6d:f6:30:2a:75:b5:e3:fa:47:34:6a:75:
f5:1d:e5:75:ec:bd:8b:12:f5:bd:85:d1:8e:f4:bf:a9:72:06:
da:13:c7:ff:20:a9:b7:33:9a:b3:8d:a1:2c:9f:89:3a:02:34:
c2:e1:23:79:db:30:4d:08:67:c6:17:cd:8a:c8:de:3c:d1:54:
72:33:c6:d3:41:6c:cc:02:12:79:c9:84:98:9d:c7:5a:ff:e3:
c2:65:4f:96:c2:fe:4e:c0:20:e5:0a:4a:32:d8:00:f7:02:75:
80:0c:2a:b5:ed:6c:4d:97:03:9d:d0:3c:3d:cf:4d:ba:48:70:
a2:fc:c6:3d:fb:75:83:3f:a2:b5:bd:5f:34:a5:f7:d2:db:ed:
71:35:bd:dc:02:02:06:d3:b9:61:07:12:4d:bf:86:ac:3d:7a:
09:20:2a:c5:50:b0:7b:dc:8a:70:18:56:e3:77:26:7f:50:c6:
eb:48:ac:f3:3e:64:f7:8e:5f:c1:a9:6e:9b:fc:ce:55:76:f9:
57:e9:5d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:22 2025 by rpki-client