Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d3438203d3e20323633313430.roa
File: 323830343a313735633a3a2f33322d3438203d3e20323633313430.roa (raw, json)
Hash identifier: A9CuMdbp/J+O6HSfO7wwZNQxGjTRhm6BWTS8nv8/hdE=
Subject key identifier: AC:62:A1:FB:96:00:64:50:4F:43:DC:71:F2:8D:C9:C7:BE:E7:A6:7E
Certificate issuer: /CN=D5519572FAE12199878FB19B5EA696BD2B1470A7
Certificate serial: 4D3E5F7CDE113E38C99A533BEC27A27865BEA1FA
Authority key identifier: D5:51:95:72:FA:E1:21:99:87:8F:B1:9B:5E:A6:96:BD:2B:14:70:A7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5519572FAE12199878FB19B5EA696BD2B1470A7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d3438203d3e20323633313430.roa
Signing time: Tue 09 Jan 2024 19:39:12 +0000
ROA not before: Tue 09 Jan 2024 19:34:12 +0000
ROA not after: Tue 07 Jan 2025 19:39:12 +0000
asID: 263140
IP address blocks: 2804:175c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:3e:5f:7c:de:11:3e:38:c9:9a:53:3b:ec:27:a2:78:65:be:a1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5519572FAE12199878FB19B5EA696BD2B1470A7
Validity
Not Before: Jan 9 19:34:12 2024 GMT
Not After : Jan 7 19:39:12 2025 GMT
Subject: CN=AC62A1FB960064504F43DC71F28DC9C7BEE7A67E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:72:3a:8b:cd:4d:7a:2a:b5:8f:71:24:4a:fe:
f3:98:74:34:5a:ce:f5:65:83:a9:44:99:83:e4:33:
c0:5b:cb:57:ab:b1:a4:72:d9:c3:18:e3:14:42:05:
54:97:c8:b3:75:7f:9f:03:81:73:00:2f:4b:46:4d:
e3:6c:3f:5f:83:32:2f:6b:c7:89:cb:bd:39:24:f6:
7e:88:d1:8c:08:d8:3d:fe:05:5b:0a:50:f2:b7:a5:
06:a8:16:17:b8:dd:68:89:69:d1:bd:4f:bd:60:33:
26:e1:b7:c3:43:bc:58:f9:a9:c8:b3:81:c8:8a:42:
38:a7:c8:e2:67:5a:aa:8f:76:30:e5:09:3d:f7:92:
9c:33:10:c8:20:61:35:86:23:6a:08:f1:f3:fd:09:
c5:e0:07:97:34:c4:16:27:99:df:42:43:8d:f5:28:
23:89:1a:54:0b:81:e7:28:a8:b4:14:bc:2a:d3:32:
34:86:47:36:c2:64:56:0c:d8:93:95:dd:53:be:05:
e5:1c:8a:bc:37:26:31:84:e3:31:e6:ac:b5:dc:95:
93:e9:b1:57:03:c7:6e:61:6c:b6:da:24:56:23:07:
8f:e8:25:3e:c3:38:7f:01:05:fd:52:91:c1:ec:94:
e8:e7:4c:fe:6c:fd:a1:26:26:95:44:3b:43:11:66:
d3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:62:A1:FB:96:00:64:50:4F:43:DC:71:F2:8D:C9:C7:BE:E7:A6:7E
X509v3 Authority Key Identifier:
keyid:D5:51:95:72:FA:E1:21:99:87:8F:B1:9B:5E:A6:96:BD:2B:14:70:A7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/D5519572FAE12199878FB19B5EA696BD2B1470A7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5519572FAE12199878FB19B5EA696BD2B1470A7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2zVR29nhkFArjm3boG6xrJCVPQ36b5DaeVsyn44SZtAB/0/323830343a313735633a3a2f33322d3438203d3e20323633313430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:175c::/32
Signature Algorithm: sha256WithRSAEncryption
93:45:34:bf:88:f4:4f:fb:00:f4:af:cf:ae:e0:85:c4:09:fa:
e0:40:a3:a4:96:71:5a:aa:3d:14:23:3b:e9:5b:35:a6:c4:0a:
aa:15:e3:59:4a:76:93:37:b3:0c:ab:26:b1:29:c2:6c:2b:43:
84:92:8a:4c:71:04:99:b5:83:47:2a:ed:bd:4b:6a:76:c0:ae:
37:1a:ea:6c:66:ae:0c:c4:3a:9e:79:cd:6b:ba:bc:1b:92:73:
4d:35:80:d6:67:c1:89:0f:1b:8a:01:a8:f4:cc:1c:7d:01:bc:
36:f3:f2:55:81:99:af:65:dc:b7:e3:7d:b5:2c:2f:f3:cc:3d:
e2:0c:9e:76:2e:87:73:59:24:97:9e:00:2d:31:22:fb:c5:ca:
a7:c0:66:f4:8e:c9:7a:ac:82:55:36:46:15:11:88:9d:97:a3:
cd:48:d2:86:f4:8a:e5:ea:db:39:f0:dd:b4:80:a1:35:79:dc:
c8:b0:60:17:b4:08:c7:cf:22:1b:29:a0:00:fe:ad:8c:98:47:
34:ef:78:80:12:ae:99:23:28:83:16:85:52:48:97:3b:68:4f:
b6:fe:66:52:2e:5b:57:5f:7e:48:8e:ed:da:e2:b3:dd:e6:2a:
60:ac:f8:59:d1:09:ac:ea:7e:fe:b8:d1:9a:ec:8d:16:eb:05:
fb:e0:d2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:45:16 2025 by rpki-client