Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa
File: 323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa (raw, json)
Hash identifier: 74BLNJ9/yn0Zlt3isITJ+ZVqJ+fG+Vp3KaJR51hBS/Q=
Subject key identifier: AC:44:92:DD:D0:2C:E0:D7:B3:E0:81:8C:5F:30:59:01:A7:C0:91:97
Certificate issuer: /CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Certificate serial: 2183D3FA3321D87F87F65D31C419C92A095B504B
Authority key identifier: AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa
Signing time: Mon 08 Jan 2024 16:45:43 +0000
ROA not before: Mon 08 Jan 2024 16:40:43 +0000
ROA not after: Mon 06 Jan 2025 16:45:43 +0000
asID: 268444
IP address blocks: 2804:514c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:83:d3:fa:33:21:d8:7f:87:f6:5d:31:c4:19:c9:2a:09:5b:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25
Validity
Not Before: Jan 8 16:40:43 2024 GMT
Not After : Jan 6 16:45:43 2025 GMT
Subject: CN=AC4492DDD02CE0D7B3E0818C5F305901A7C09197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:63:f7:03:44:8f:1c:a2:06:59:07:a4:83:a3:
88:c6:83:5d:e2:41:91:91:89:56:dc:e4:42:45:ce:
fa:a2:3f:20:f1:c8:01:4a:9f:8e:b8:99:d5:a6:40:
ef:3f:b2:07:f8:91:6a:56:6c:4f:68:b5:65:25:0f:
82:cb:7c:3d:46:35:28:82:1b:89:82:86:7e:18:8c:
d3:09:ac:8f:9e:88:33:fb:e7:c1:c7:6c:9c:58:aa:
1a:d2:86:98:33:69:21:87:7a:3f:9e:86:e3:96:e9:
92:f3:fb:7d:76:62:d5:24:28:e3:fe:21:8d:19:4d:
c3:83:71:16:b6:5e:9d:5c:8e:2a:b2:2f:b9:cd:57:
37:32:60:ac:06:1d:dd:af:a0:e7:e9:0c:bc:86:20:
c1:20:af:14:47:b0:53:25:6e:0f:30:93:81:2f:18:
22:c5:3b:d9:48:76:5c:25:9a:a6:4a:a0:25:35:01:
63:d8:16:35:10:08:30:d9:03:ed:19:7e:16:c6:00:
14:f3:b1:59:8e:fb:3e:77:cf:29:34:cb:e5:dd:32:
3d:e5:01:5b:3a:2b:95:d6:66:db:a7:db:04:36:f4:
f3:bf:a2:cc:25:8e:bf:5e:ba:a9:f6:36:a4:84:b1:
72:4f:69:f6:88:8d:a6:16:23:17:81:12:35:aa:8d:
2d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:92:DD:D0:2C:E0:D7:B3:E0:81:8C:5F:30:59:01:A7:C0:91:97
X509v3 Authority Key Identifier:
keyid:AC:5C:A9:D3:5B:F5:6C:0D:C5:B0:65:F4:48:B0:58:5A:D0:7F:7F:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AC5CA9D35BF56C0DC5B065F448B0585AD07F7F25.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2LNrvT9Z6utiKHbBCARkSXCjB3iVKXVqxFvX4vRNPp5n/0/323830343a353134633a633030303a3a2f33342d3334203d3e20323638343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:514c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
40:2d:b1:95:dd:9f:a1:fb:e5:ff:b1:5e:62:75:69:f2:07:c7:
60:89:f9:30:8f:f6:ad:78:e4:86:11:63:5a:7c:4f:65:44:bb:
7b:e2:06:ff:50:16:27:1b:7d:ab:d5:14:59:b9:c9:98:1d:eb:
27:b5:1c:40:20:ad:21:34:c6:d8:59:e9:32:e4:e7:11:58:48:
04:be:43:c4:1d:23:b7:8d:ac:24:fc:df:84:4f:61:b8:11:bb:
2d:37:fb:af:87:4c:68:7d:7b:0b:b6:78:5a:f4:a8:12:e4:07:
ba:04:5a:b0:b6:cf:97:3e:ef:e9:d0:02:2e:9c:c1:6e:3e:6b:
a7:50:d5:01:d3:a4:12:3e:63:14:c7:6c:d8:19:f5:a9:50:be:
10:4c:3a:dd:e9:5e:66:d0:9d:d4:b3:28:52:e7:69:f3:88:74:
dd:fd:2b:89:2e:cc:36:6c:80:71:97:7f:98:62:c2:c8:5f:74:
aa:12:c6:07:21:cd:a9:e9:db:31:b0:7b:e8:b7:4b:c5:9c:93:
ba:4a:6b:40:06:74:99:de:f9:b0:c4:5e:80:b5:0a:87:16:d4:
43:05:1a:dc:d7:d5:0e:de:00:8d:d7:48:00:8a:a0:db:cc:38:
6f:1b:57:7d:4d:76:e1:48:2f:45:b8:ab:15:38:b1:87:b9:c3:
27:50:93:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:34 2025 by rpki-client