Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d3332203d3e203532353438.roa
File: 323830343a356330383a3a2f33322d3332203d3e203532353438.roa (raw, json)
Hash identifier: mVKHipGbnxDuDXvYg8zZnrzNZvTtlV1yparfTCsn+lw=
Subject key identifier: 43:A5:44:B4:DD:62:FA:76:17:35:4C:27:DB:C7:A4:2F:A1:4E:7A:3C
Certificate issuer: /CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Certificate serial: 737BA2BAB0669DA3D8E317656DF1AEADF6213460
Authority key identifier: EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d3332203d3e203532353438.roa
Signing time: Tue 25 Jul 2023 21:14:51 +0000
ROA not before: Tue 25 Jul 2023 21:09:51 +0000
ROA not after: Tue 23 Jul 2024 21:14:51 +0000
asID: 52548
IP address blocks: 2804:5c08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:7b:a2:ba:b0:66:9d:a3:d8:e3:17:65:6d:f1:ae:ad:f6:21:34:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE0DD34006E37436756618ADA322C16C0AFC6970
Validity
Not Before: Jul 25 21:09:51 2023 GMT
Not After : Jul 23 21:14:51 2024 GMT
Subject: CN=43A544B4DD62FA7617354C27DBC7A42FA14E7A3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:97:1d:15:4e:d8:aa:af:13:79:ca:cd:8c:ef:
b9:9f:e2:55:0d:b0:f1:76:70:c5:95:4b:61:10:ff:
84:00:cb:c0:48:da:fb:2d:a8:15:d6:ef:54:fa:89:
be:fe:20:de:6d:ee:72:c1:43:11:05:11:cc:e6:9f:
43:5d:78:f9:80:0d:ea:ed:a5:f3:e0:e8:0c:3b:32:
2d:50:de:71:ac:63:dc:1c:eb:97:e6:be:0b:29:22:
b8:ff:be:b2:f3:38:18:84:ec:47:ce:b5:f0:d2:68:
60:97:80:aa:d7:45:3e:bb:85:51:76:8f:1d:9a:6f:
a1:2c:a2:a0:32:36:cd:c8:35:74:dd:13:d0:59:ff:
ba:52:2e:e6:9e:f8:39:17:20:c0:ef:8a:7f:b4:58:
df:26:44:55:e5:09:dc:d5:08:c7:36:5d:40:43:65:
a7:2b:f9:ac:84:3e:0c:f0:eb:63:1d:78:69:18:b0:
41:dd:26:9b:2c:b3:b4:94:e6:7c:89:f8:3f:c0:4e:
8f:b0:d4:1d:09:a1:48:00:dd:44:c0:3f:d0:bf:4c:
2a:ce:5d:81:59:9a:97:9f:1e:46:c2:1f:42:44:0e:
17:38:a5:50:85:ba:da:5c:a5:a3:9d:2a:70:b9:ba:
3d:79:39:16:71:a0:ef:13:f2:eb:41:10:84:9a:cf:
67:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:44:B4:DD:62:FA:76:17:35:4C:27:DB:C7:A4:2F:A1:4E:7A:3C
X509v3 Authority Key Identifier:
keyid:EE:0D:D3:40:06:E3:74:36:75:66:18:AD:A3:22:C1:6C:0A:FC:69:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/EE0DD34006E37436756618ADA322C16C0AFC6970.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE0DD34006E37436756618ADA322C16C0AFC6970.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2KMPL7ezYLzHXwKLR2HPHw5E6sJeGUoGtwwZQL47EswT/0/323830343a356330383a3a2f33322d3332203d3e203532353438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5c08::/32
Signature Algorithm: sha256WithRSAEncryption
5a:5f:a3:63:17:c7:e0:a6:3d:e8:a8:ea:70:6d:ea:3c:a1:e5:
98:bc:f6:79:9b:d7:59:4c:09:17:b9:40:ec:bb:17:2c:30:91:
a1:0e:5f:67:cf:2c:6a:c2:8f:5e:15:ab:fe:3e:4f:46:88:e0:
d6:e6:94:31:38:37:a7:6a:39:59:a0:fb:eb:de:ce:0d:53:32:
fa:7e:9b:2f:4a:dd:9f:cc:6e:07:f1:b4:9d:20:04:ec:c0:ed:
e2:bc:ce:6d:bc:d5:88:b0:92:88:dc:51:a1:da:e4:bb:c1:01:
2f:11:30:8f:f7:4d:95:41:c3:c2:68:7f:49:07:5a:10:6d:56:
ef:72:1a:1e:9a:67:bb:cb:76:13:62:d0:09:5f:ee:05:24:83:
a6:08:a6:77:c3:68:ec:2a:09:cc:41:dc:92:6f:5d:e2:91:9f:
ab:fb:2a:33:e6:0f:8a:9d:7f:48:b0:08:5b:f3:93:39:d9:c4:
ca:04:e9:98:ac:df:bb:92:1c:18:7a:2c:8d:e3:41:5b:ff:98:
7a:18:1d:b8:9b:a6:39:c3:a6:c4:fe:b6:c3:5c:33:33:0e:ac:
76:9f:b9:7a:56:6d:e9:59:9d:06:86:9b:70:5c:e3:c4:5a:81:
44:fd:0f:55:7c:78:4d:a6:82:ad:9e:d1:07:e7:33:11:1a:de:
53:4c:96:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:06 2025 by rpki-client