Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa
File: 323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier: w6B79/wGAququc+gH5CvdQsfPZJC2Czt2213joa6pSU=
Subject key identifier: 32:92:93:28:37:87:23:D2:D6:88:14:35:E9:5A:CA:C1:2C:07:C2:6C
Certificate issuer: /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial: 56AC0B877A9E3B4B8CEF50F093DF9E736E6028E3
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa
Signing time: Wed 06 Dec 2023 20:11:24 +0000
ROA not before: Wed 06 Dec 2023 20:06:24 +0000
ROA not after: Wed 04 Dec 2024 20:11:24 +0000
asID: 265241
IP address blocks: 2804:2cc0:8f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ac:0b:87:7a:9e:3b:4b:8c:ef:50:f0:93:df:9e:73:6e:60:28:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Validity
Not Before: Dec 6 20:06:24 2023 GMT
Not After : Dec 4 20:11:24 2024 GMT
Subject: CN=32929328378723D2D6881435E95ACAC12C07C26C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:cd:b3:1d:37:be:94:c1:16:b2:d3:85:a4:d6:
59:20:84:3a:e1:15:45:d0:76:92:19:be:d0:82:54:
8c:ac:bd:ce:ee:a2:6d:41:70:1a:20:69:59:43:7c:
6b:c3:9b:67:f3:b6:37:80:30:2c:02:f2:7c:3d:ed:
6d:a8:b4:aa:ff:cb:3f:e3:d6:f8:a1:48:e2:fa:f5:
92:ec:5c:ee:b4:ec:89:aa:94:d1:88:fb:b2:de:46:
5f:f1:8f:d7:10:69:80:77:fc:3c:ef:46:2d:f9:ea:
b7:10:0a:3f:9b:88:19:51:71:c7:69:19:3b:43:77:
bb:99:b4:75:23:2e:a7:0c:31:89:9c:b7:87:29:f4:
3b:75:4d:55:ce:22:7c:32:0b:39:eb:f4:3a:6a:6b:
55:c2:7f:ee:28:1a:73:ce:d3:98:46:d3:cb:52:34:
f8:56:fe:40:14:76:a2:bf:f9:e8:78:5f:ed:51:02:
ed:79:4a:e5:ed:c5:92:a0:44:93:a7:7d:50:79:7f:
4b:fa:3c:87:c0:f7:20:27:62:46:3c:07:6c:7c:3a:
dd:52:26:c4:af:f9:62:39:db:f5:bd:4a:25:93:c3:
c4:0d:b2:a8:4f:f2:bb:6f:3e:73:b4:62:3e:fb:fa:
c9:c5:c8:8c:56:9e:bc:9d:ae:ee:5a:f5:d5:97:37:
d7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:92:93:28:37:87:23:D2:D6:88:14:35:E9:5A:CA:C1:2C:07:C2:6C
X509v3 Authority Key Identifier:
keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2cc0:8f00::/40
Signature Algorithm: sha256WithRSAEncryption
2d:b7:ab:77:33:ec:a3:fc:11:7c:4f:5d:6e:95:2f:d7:e2:87:
73:c5:b6:97:34:0c:23:e2:5f:15:7d:57:a5:28:f1:a1:37:4c:
e0:44:82:5b:64:58:68:2d:dd:fc:ac:64:a0:1c:2c:73:48:49:
07:f1:91:16:81:2c:13:ac:a6:c3:12:6f:c3:29:6a:ec:5d:13:
bd:c0:ca:00:66:63:43:3f:63:2c:ae:ef:89:73:0a:9e:a1:ec:
f3:54:b1:92:a5:26:24:78:67:f6:4b:47:4c:8a:dc:6c:44:e5:
0e:d7:2e:c4:6c:de:5e:1e:bb:1d:66:9a:e3:42:db:dd:b4:02:
52:30:dc:6e:a9:49:bc:7c:48:b3:00:32:a1:45:56:97:aa:98:
3a:6b:60:72:a8:05:88:02:33:27:5f:39:48:12:60:ac:d6:d2:
d3:63:38:bb:7f:9b:4f:29:10:9b:36:54:63:e8:71:a0:a2:9a:
2e:c5:66:10:39:d7:37:26:4b:6a:e5:87:13:38:70:cb:c2:9b:
aa:29:f9:4d:79:18:4f:f2:44:d8:36:0b:15:65:4b:5e:47:14:
35:8d:f7:ca:a5:91:f6:1a:ab:cf:83:ec:aa:05:b1:97:ca:40:
74:38:f9:23:fc:d2:7a:17:42:4f:4c:ee:14:51:9f:58:9e:da:
3c:5b:fb:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:48 2025 by rpki-client