Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3332203d3e203631373332.roa
File: 323830343a316238343a3a2f33322d3332203d3e203631373332.roa (raw, json)
Hash identifier: 7Ohwi+bWskMtwFzAnS325khVqGckdDah6uSIgJUbJoY=
Subject key identifier: A4:70:9B:67:AD:C6:03:56:0D:B4:B1:6A:F3:2F:86:EE:C9:61:1C:42
Certificate issuer: /CN=8529A7F829766A6E814929022549D58021B37145
Certificate serial: 6B3A31F17A111D8E89A516034EB6C1DF4020747E
Authority key identifier: 85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3332203d3e203631373332.roa
Signing time: Wed 15 Feb 2023 21:14:34 +0000
ROA not before: Wed 15 Feb 2023 21:09:34 +0000
ROA not after: Wed 14 Feb 2024 21:14:34 +0000
asID: 61732
IP address blocks: 2804:1b84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:3a:31:f1:7a:11:1d:8e:89:a5:16:03:4e:b6:c1:df:40:20:74:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8529A7F829766A6E814929022549D58021B37145
Validity
Not Before: Feb 15 21:09:34 2023 GMT
Not After : Feb 14 21:14:34 2024 GMT
Subject: CN=A4709B67ADC603560DB4B16AF32F86EEC9611C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f7:f1:ae:49:c4:ef:5f:2d:52:3f:71:f6:61:
39:fa:cc:9f:f1:7b:c4:ef:83:87:c2:9f:b2:45:40:
8b:d9:87:b5:12:94:bb:3d:2d:43:0b:db:23:c2:4d:
91:33:73:7b:97:f4:58:96:85:8b:3b:74:19:2d:c2:
24:cb:a2:17:83:93:f2:73:ab:f9:52:17:ee:a8:37:
48:57:cd:6b:6a:9f:1f:78:4d:55:8c:73:0a:2a:65:
9d:5c:6c:11:8e:8a:e9:2d:43:78:53:cb:6c:94:16:
b3:48:06:4e:9c:d4:9a:48:a6:ee:5c:f0:e6:dc:69:
59:81:68:50:ab:83:bd:4e:08:1d:ae:1c:c1:4a:a0:
03:25:04:e5:3b:7c:49:ed:0b:e4:36:48:01:f1:f3:
22:2f:3c:57:57:18:cd:92:68:7d:f0:9e:62:57:36:
58:a2:28:c0:12:a8:a4:8b:27:93:59:ca:e9:3c:b6:
f2:5d:ce:6c:75:8a:61:ef:83:8f:69:a9:6b:ee:f9:
1c:23:96:0c:9e:50:00:aa:dd:fe:78:69:42:ea:a6:
a9:dc:5d:9a:98:39:d7:da:5c:f8:4c:8e:95:fc:c3:
ac:52:89:0e:73:26:5a:c2:16:69:ad:2a:63:8c:66:
56:07:fd:7d:ec:cd:40:a9:a1:db:fd:dc:0e:1b:cd:
93:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:70:9B:67:AD:C6:03:56:0D:B4:B1:6A:F3:2F:86:EE:C9:61:1C:42
X509v3 Authority Key Identifier:
keyid:85:29:A7:F8:29:76:6A:6E:81:49:29:02:25:49:D5:80:21:B3:71:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/8529A7F829766A6E814929022549D58021B37145.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8529A7F829766A6E814929022549D58021B37145.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WRJMCXpzmvFc9uDboy14s6cPwKqQVDHggronMknRm1V/0/323830343a316238343a3a2f33322d3332203d3e203631373332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1b84::/32
Signature Algorithm: sha256WithRSAEncryption
25:1a:12:c8:f2:b9:d7:9e:1e:b7:af:b6:61:1b:42:b8:54:34:
27:dd:da:b0:e7:80:1c:da:c0:18:2c:69:5b:5b:73:88:9d:be:
cf:dd:d2:56:e6:9d:fc:96:45:dc:ae:e8:1b:74:aa:ab:ba:48:
be:2e:12:8c:4b:16:3d:52:9d:4c:31:5c:ee:dd:dc:ce:9b:d5:
9a:ca:06:73:ee:79:ad:e4:44:25:cd:47:52:fd:78:86:64:2f:
49:09:ab:0d:06:c3:97:d0:d9:c9:a5:0c:ac:9e:df:92:09:7f:
fd:9b:bf:55:78:3a:dc:e2:96:76:73:53:63:70:c8:df:e9:e2:
40:2b:d0:17:9b:c0:32:c6:4a:6e:37:fe:cc:d3:54:cb:a4:5e:
72:9f:87:83:f0:27:50:ef:c5:94:22:51:1b:77:53:c2:82:23:
79:70:58:54:15:c3:34:3f:bf:50:ab:e1:2b:bc:68:a9:36:a5:
17:35:a5:51:3d:34:72:b8:44:14:8f:04:07:66:99:ab:0d:0a:
6e:a7:80:12:8e:3b:aa:d8:3a:05:c1:6a:eb:6d:a6:63:3d:2e:
a0:54:69:e7:89:fc:73:d6:ce:fb:90:45:b8:6c:91:d2:75:15:
0d:4d:71:28:fc:71:aa:93:de:1b:4c:db:14:e1:bb:4b:16:07:
f8:44:6c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:19 2025 by rpki-client