Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa
File: 323830343a316232383a3a2f33322d313238203d3e203631373132.roa (raw, json)
Hash identifier: +bKTxiOkAlvaJRE2lc8B1k4pgo1ELAyBQj5kBrdHu/Y=
Subject key identifier: A1:88:95:F3:C1:25:D6:48:6A:EB:99:18:AD:F1:F3:F4:0C:BC:C2:42
Certificate issuer: /CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Certificate serial: 117CD1713DBE2291C2D6EB59E59EC75BCF20CD31
Authority key identifier: 7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa
Signing time: Sat 09 Mar 2024 12:39:50 +0000
ROA not before: Sat 09 Mar 2024 12:34:50 +0000
ROA not after: Sat 08 Mar 2025 12:39:50 +0000
asID: 61712
IP address blocks: 2804:1b28::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7c:d1:71:3d:be:22:91:c2:d6:eb:59:e5:9e:c7:5b:cf:20:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D
Validity
Not Before: Mar 9 12:34:50 2024 GMT
Not After : Mar 8 12:39:50 2025 GMT
Subject: CN=A18895F3C125D6486AEB9918ADF1F3F40CBCC242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1e:78:88:85:8a:27:8e:6f:47:ca:3a:40:cf:
02:c4:47:c2:99:73:f3:41:f4:cc:4e:fc:02:bf:e2:
ba:8a:b0:f8:2b:c0:87:ef:38:9d:05:c9:c0:6a:11:
e7:6e:e0:cc:be:fe:13:c9:17:a5:bd:46:0b:23:ba:
74:69:1f:8e:dc:f6:80:d7:ef:25:99:f0:3c:f4:1c:
e9:33:f6:c5:fb:65:2e:ae:17:8f:28:3b:48:c2:df:
7d:b2:36:31:7d:2f:66:7a:5e:79:c9:73:1e:1a:c1:
17:64:cd:2c:30:8a:09:45:f0:29:59:b4:36:56:f3:
02:b8:f2:90:50:aa:97:af:ff:07:89:76:45:27:f6:
c5:5c:2c:90:ce:5f:7b:3b:cf:1a:16:f7:16:6e:b9:
48:11:ee:fe:dd:26:c4:a7:77:c7:2a:37:9f:60:b4:
d5:a9:4e:b7:f7:c7:b4:70:41:de:ba:b3:2d:cd:76:
b3:07:1c:2e:19:f1:87:f4:f1:49:4c:80:03:c7:f7:
0a:9c:3b:a0:32:23:57:95:a5:f7:91:69:0d:ae:97:
37:86:ca:b9:69:6d:6f:57:a7:f3:d0:f1:27:1c:f9:
49:8b:ce:b8:a2:02:19:ce:82:8c:59:9c:65:26:30:
77:46:e6:3f:ad:d3:a3:e6:d1:d9:93:95:b1:dd:46:
38:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:95:F3:C1:25:D6:48:6A:EB:99:18:AD:F1:F3:F4:0C:BC:C2:42
X509v3 Authority Key Identifier:
keyid:7B:D5:45:6E:3A:04:8C:FE:2F:62:F6:F7:BF:D2:F0:DC:D1:F8:5B:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7BD5456E3A048CFE2F62F6F7BFD2F0DCD1F85B5D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/25xv5f8vsuhoWYtssqqoeKS785vYoEkf4yfDjnG7fLxb/0/323830343a316232383a3a2f33322d313238203d3e203631373132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b28::/32
Signature Algorithm: sha256WithRSAEncryption
38:67:34:d3:96:63:56:64:41:93:21:c7:3b:81:77:be:b8:0e:
94:51:e1:6c:e7:67:3f:86:94:a0:d7:db:93:cf:ef:7c:82:ef:
51:95:71:3f:56:60:11:d8:27:f7:97:a0:33:82:06:71:7d:92:
b4:50:2d:4f:1d:0b:fe:36:5b:cd:01:a8:f6:50:ac:ab:a5:6c:
f0:36:e1:b9:2d:fa:a4:ae:96:ca:ea:27:00:81:3f:89:09:72:
18:b9:bd:19:a0:06:6e:0f:db:82:a1:57:76:ab:2c:74:38:d0:
a2:13:7f:9c:67:d4:42:05:9e:21:19:28:57:67:4f:fe:d2:e9:
3c:df:fc:f6:a6:1f:31:2c:96:d7:56:e7:f9:ab:d3:bc:be:63:
d3:92:69:7f:14:6a:f5:a0:b9:9e:09:bb:c0:4f:a0:84:b7:98:
aa:1b:d9:5f:6b:e2:31:8f:93:98:6f:92:34:98:60:5c:23:d0:
ce:c6:f3:95:9b:23:71:85:f6:79:3d:1c:9c:d9:52:eb:ac:fd:
78:4b:d4:c3:94:28:91:56:94:71:15:ea:98:da:7a:62:5a:02:
80:a9:32:8e:3a:de:90:89:a9:04:1d:3e:4b:fd:7f:de:1f:61:
55:b1:c6:c4:c4:76:03:16:d4:bc:e7:e6:9f:7f:db:90:8d:6a:
c8:87:46:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org