Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa
File: 323830343a323066633a3a2f34342d3434203d3e20323634353235.roa (raw, json)
Hash identifier: 2azTZSygxY0IdypOLbRwS4VF7pTryQASMwytE4yA49Y=
Subject key identifier: 71:E6:45:74:C5:CD:6C:84:A8:E6:DA:65:29:A1:81:06:26:EF:43:86
Certificate issuer: /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial: 2F9B085200D995F318E286537F2818EC46639607
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa
Signing time: Tue 30 Apr 2024 22:09:16 +0000
ROA not before: Tue 30 Apr 2024 22:04:16 +0000
ROA not after: Tue 29 Apr 2025 22:09:16 +0000
asID: 264525
IP address blocks: 2804:20fc::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9b:08:52:00:d9:95:f3:18:e2:86:53:7f:28:18:ec:46:63:96:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Validity
Not Before: Apr 30 22:04:16 2024 GMT
Not After : Apr 29 22:09:16 2025 GMT
Subject: CN=71E64574C5CD6C84A8E6DA6529A1810626EF4386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:23:6d:e3:7b:1e:fa:61:bc:93:04:bf:94:68:
1a:b7:1c:a4:95:aa:4d:58:f8:1b:0e:fd:f6:0e:24:
72:23:0c:34:99:9f:a0:96:cf:fc:f5:7c:7b:a1:cf:
00:0a:53:ed:51:f8:3a:e1:fd:f2:c3:71:3a:00:b8:
7e:7a:53:8e:02:7d:2a:41:ab:6a:dd:bf:58:f9:99:
6c:eb:2b:05:e1:b5:b4:2c:ba:1c:40:c9:6b:f3:92:
4e:c9:65:65:6b:07:2a:dc:23:f4:09:51:e0:f0:f3:
37:a7:4b:0e:38:5d:bd:72:12:4b:17:1e:20:32:53:
bf:1e:e4:5f:fc:41:c6:ae:ab:26:b3:51:f7:e9:b2:
14:09:3a:82:d6:f1:2c:64:f9:a2:04:e7:f5:04:26:
67:d3:30:80:ec:b4:a8:40:b8:ab:a8:f5:5b:1f:7b:
92:61:6c:bc:f0:d5:4a:6a:b2:19:21:43:a8:71:44:
13:57:e2:c8:44:8b:94:76:15:bf:79:b4:be:05:04:
a0:58:c2:58:b3:a1:43:01:2b:bb:45:ca:9c:95:b8:
2c:00:13:2c:a2:a6:b8:b2:27:01:8c:9b:d3:60:52:
c1:68:bf:2f:2d:2d:8c:5f:e8:c0:e0:ae:de:72:0c:
fd:05:91:b4:d2:35:fc:e8:05:54:be:e6:76:ea:df:
83:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:45:74:C5:CD:6C:84:A8:E6:DA:65:29:A1:81:06:26:EF:43:86
X509v3 Authority Key Identifier:
keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3a2f34342d3434203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:20fc::/44
Signature Algorithm: sha256WithRSAEncryption
8b:90:95:94:84:d0:d5:59:ef:f3:d2:35:a1:c8:7e:f0:47:05:
59:1b:71:38:87:65:71:46:17:74:9d:71:1d:e1:ae:e2:a8:9a:
20:ec:13:ec:23:99:7e:65:e2:37:6f:fb:a4:79:39:1c:98:ec:
4b:13:aa:3c:e9:4d:ed:e2:af:ba:70:3e:d2:63:db:d5:b5:e2:
c6:34:94:8f:f0:44:bd:15:cd:a1:65:8d:79:1f:9b:c0:05:e7:
e4:13:cf:28:54:56:73:8f:a2:9e:1b:6a:90:c2:df:4b:7c:4d:
64:19:86:8a:5a:42:00:ae:5c:4a:31:70:36:47:92:bc:e7:c8:
1a:13:a2:61:7e:6c:30:d4:e5:3b:0a:a4:59:56:9e:b7:e0:3e:
7d:30:19:13:46:12:5e:45:44:af:ae:0e:9a:34:80:bb:04:bc:
ad:6d:2d:14:8a:30:db:b1:fb:61:af:d7:a7:07:df:58:b2:24:
2d:bb:63:9e:82:de:0b:ee:c1:29:2a:6b:4e:cd:fd:71:4a:fd:
d2:f5:77:21:c5:d4:6c:93:fd:a4:6e:4c:fa:c1:38:71:44:b0:
fb:38:ac:70:2b:73:db:23:b2:c0:f5:fa:68:e2:2d:0c:4a:3e:
59:2f:9c:3a:ec:6e:2f:fa:7d:3c:df:b7:3e:20:f4:0d:c3:8d:
19:c7:dc:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:01:21 2025 by rpki-client