Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa
File: 323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa (raw, json)
Hash identifier: 0ggYo2I9qL8jBBGAOQdr+HQxGyCRIsNp62eHeyBRQJs=
Subject key identifier: 40:68:78:D1:AC:51:8B:CA:A6:36:F0:41:71:60:47:B6:8F:9E:1B:A9
Certificate issuer: /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial: 208D95A2002EA3AF0BD51FBEAA4B5B00A917301F
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa
Signing time: Mon 08 Jan 2024 16:45:41 +0000
ROA not before: Mon 08 Jan 2024 16:40:41 +0000
ROA not after: Mon 06 Jan 2025 16:45:41 +0000
asID: 268444
IP address blocks: 2804:514c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:8d:95:a2:00:2e:a3:af:0b:d5:1f:be:aa:4b:5b:00:a9:17:30:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Validity
Not Before: Jan 8 16:40:41 2024 GMT
Not After : Jan 6 16:45:41 2025 GMT
Subject: CN=406878D1AC518BCAA636F041716047B68F9E1BA9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:8e:83:3c:e6:f1:ea:b8:3b:3e:a8:e5:0b:
2d:4b:dd:47:80:f1:60:ff:71:c2:77:b2:69:69:c1:
0c:d8:aa:74:c6:4b:b1:1c:1f:a7:85:b7:29:f6:42:
4f:db:75:d9:02:07:4f:bd:5f:f8:09:24:7b:01:fd:
04:f4:cd:7e:f7:c4:4f:18:5c:41:2c:96:c8:09:75:
d1:ee:45:83:fc:e6:03:a8:9d:7f:d5:00:19:f5:f9:
32:62:5b:85:7c:38:24:b9:d1:53:11:e6:ee:2b:13:
5d:16:d2:0a:7d:6c:37:7f:39:10:57:1e:a7:7f:62:
d9:d4:19:2e:45:0b:e5:e5:b8:a2:39:05:af:27:72:
8b:46:ea:b0:1d:eb:9b:dd:ee:a7:b9:b9:7a:f6:14:
7a:be:81:06:a3:f9:eb:45:1e:f8:e3:e1:fb:4c:19:
9e:fa:16:97:cc:17:dd:6b:cc:2d:5d:26:de:1e:69:
bf:86:15:b7:2b:1d:b7:70:13:52:ec:4a:d1:ed:55:
02:25:05:3b:17:e8:b1:3a:6c:00:90:b3:97:a1:17:
7d:f1:b1:e4:38:f2:89:a7:10:58:c6:94:10:25:db:
43:38:9a:e6:ad:c8:d3:10:87:62:d0:26:10:dd:d9:
b8:b4:c4:04:3c:7a:cd:5e:4f:ec:f0:70:8f:c2:a0:
22:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:68:78:D1:AC:51:8B:CA:A6:36:F0:41:71:60:47:B6:8F:9E:1B:A9
X509v3 Authority Key Identifier:
keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a383030303a3a2f33332d3333203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:514c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
99:54:91:89:83:db:79:02:07:4a:e5:b4:e5:1c:84:b1:a3:63:
e4:0c:60:2b:d2:45:20:63:f1:5c:a0:50:65:ef:11:05:27:c3:
d7:dc:a3:27:57:18:a6:4c:73:16:3c:47:46:91:d0:de:98:49:
89:16:8b:e0:f1:fc:6d:7c:4b:d8:b8:74:71:08:ed:7f:06:06:
cc:61:0a:e5:83:ff:4c:1a:87:02:d0:11:77:af:0a:16:b5:96:
a9:4f:35:6f:99:7e:23:59:06:78:07:9e:c3:06:57:4c:ff:0d:
ab:a7:3b:01:be:f7:28:74:1c:23:2c:31:20:4c:80:52:7d:92:
c5:47:44:62:f4:30:ef:2f:87:2a:49:cf:b4:ab:07:ac:df:e6:
fb:ff:1c:f7:76:7e:91:d9:d2:27:2b:76:d7:c7:16:ac:2a:d9:
84:cf:6c:44:37:ca:9d:96:60:eb:38:3d:48:db:f3:6c:56:3f:
d8:e1:8c:5d:de:fc:d5:b4:19:ee:a8:2b:bc:0f:2b:b5:02:03:
a9:bc:5e:0c:52:26:81:ec:c2:75:b4:d7:0f:d1:46:f1:84:12:
91:8f:7f:49:f2:8c:0e:c3:7d:98:7b:e2:c7:b2:71:df:d9:ec:
8d:c7:17:d9:07:ed:00:81:98:51:0e:f2:ef:a7:83:f1:bf:f4:
40:90:5d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:20 2025 by rpki-client