Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/323830343a3963383a3a2f33322d3332203d3e203238323230.roa
File: 323830343a3963383a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier: 5Lhrd7kvY1szE4qQ+m5+IIF4FynqeCzQ6QI6hArASSU=
Subject key identifier: 32:B8:96:C2:7B:AB:82:A4:2F:1E:40:FF:DA:FB:B1:36:53:DE:1D:29
Certificate issuer: /CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Certificate serial: 5E3E8242DE78CFC578F61EDE4463D50F8CB05C67
Authority key identifier: 85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/323830343a3963383a3a2f33322d3332203d3e203238323230.roa
Signing time: Thu 06 Oct 2022 17:39:58 +0000
ROA not before: Thu 06 Oct 2022 17:34:58 +0000
ROA not after: Thu 05 Oct 2023 17:39:58 +0000
asID: 28220
IP address blocks: 2804:9c8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:3e:82:42:de:78:cf:c5:78:f6:1e:de:44:63:d5:0f:8c:b0:5c:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85189A4BDED8E2AE31C0DCF5336891EA164ECA37
Validity
Not Before: Oct 6 17:34:58 2022 GMT
Not After : Oct 5 17:39:58 2023 GMT
Subject: CN=32B896C27BAB82A42F1E40FFDAFBB13653DE1D29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:e6:55:67:5f:ed:e9:ff:e7:44:85:9b:25:4e:
1a:e1:e1:14:45:8c:bb:a1:9b:ee:12:06:55:78:e5:
b6:53:34:97:12:52:93:fe:9f:09:0a:a7:df:31:78:
3f:8d:b0:4d:77:85:fb:43:07:58:a0:fc:4c:af:49:
33:5f:a5:fb:c2:17:4b:78:1d:6e:b0:70:a1:cb:14:
1c:06:49:32:8d:8b:22:9e:a7:af:7a:66:52:54:cb:
b0:a7:1d:5b:c7:f0:03:54:d9:a4:00:e7:6e:d2:ad:
30:78:93:e9:a4:1d:86:72:88:4e:d0:b9:f0:a7:82:
14:10:e2:e0:8b:5f:ce:ff:5b:c3:2a:fe:11:e7:3c:
fe:0f:da:40:ea:aa:dc:44:05:71:f7:8d:f2:74:fd:
28:a1:0c:68:b9:4e:d3:90:68:3e:6a:31:50:91:af:
69:36:79:2b:ae:56:c2:1f:36:97:38:1a:32:2f:f1:
67:5a:26:6b:1a:e0:40:17:2d:81:1c:f3:6c:40:c2:
10:61:4f:82:3b:aa:10:66:71:20:0c:eb:d4:af:eb:
a5:7d:fe:64:55:cf:5d:28:63:03:47:f5:94:66:b2:
d0:01:10:0d:e0:c6:6b:d3:6b:fe:43:55:94:08:c5:
c6:69:71:33:10:37:74:c4:af:af:4e:ea:12:7b:76:
a8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:96:C2:7B:AB:82:A4:2F:1E:40:FF:DA:FB:B1:36:53:DE:1D:29
X509v3 Authority Key Identifier:
keyid:85:18:9A:4B:DE:D8:E2:AE:31:C0:DC:F5:33:68:91:EA:16:4E:CA:37
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85189A4BDED8E2AE31C0DCF5336891EA164ECA37.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2bHWSvQFEAjNHr1PpcwRkedgL6BZ9eokG4YvnsFgoPju/0/323830343a3963383a3a2f33322d3332203d3e203238323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9c8::/32
Signature Algorithm: sha256WithRSAEncryption
57:ef:56:de:88:07:0d:ff:47:a4:59:fd:65:3d:72:60:08:cb:
a8:61:59:e0:37:77:64:fe:ea:b6:1b:66:74:78:f0:7b:d1:13:
31:29:a9:b1:d3:82:03:ef:2f:d1:c8:42:dd:04:44:8b:e0:60:
be:f5:5b:a3:b7:06:8e:43:a0:b3:32:02:db:0c:4d:f9:e8:cf:
f9:d7:bc:84:0a:05:a7:cc:a1:9c:ec:c5:8b:36:be:4e:32:7b:
ee:53:86:a2:9f:6d:cf:e9:c1:36:be:00:35:08:6f:9e:7d:fc:
5b:e9:fc:98:63:79:7b:36:68:84:df:7d:78:97:58:dc:dc:f3:
02:a5:e4:e6:c4:cf:34:08:17:0c:9c:67:85:39:26:b1:f3:69:
9e:2a:d2:86:89:b1:0b:ef:24:29:14:0e:d2:6e:1a:59:1d:45:
e5:ba:d8:38:e2:e4:f2:29:ae:0b:36:b8:d9:cf:51:88:dc:a6:
a5:44:25:1c:8d:5c:1a:76:51:a8:5e:e6:71:1f:df:a7:64:75:
98:ae:ab:64:f7:d7:8e:d6:19:28:f0:4e:ea:06:0c:87:63:fa:
64:4e:d3:98:ed:fb:b1:59:96:ee:f9:30:83:bb:a2:f0:c7:7a:
22:d9:89:d4:85:78:68:cb:93:35:d0:8c:af:b8:1e:c0:18:4e:
db:6e:e7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:06 2025 by rpki-client