Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3335203d3e20323638363238.roa
File: 323830343a353431383a3a2f33322d3335203d3e20323638363238.roa (raw, json)
Hash identifier: Fbsasvog3ge1iM7irZttL/kPtjOPgQSPtYNtPlehl5I=
Subject key identifier: A7:2A:8C:FA:4E:C7:67:C4:38:09:34:90:14:11:26:DB:71:DD:0F:EA
Certificate issuer: /CN=320B17743411E964D3D2736A49519C36D4C37931
Certificate serial: 19D6CE0DC3CAD228D700F075C31222F6BFA5FF9F
Authority key identifier: 32:0B:17:74:34:11:E9:64:D3:D2:73:6A:49:51:9C:36:D4:C3:79:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320B17743411E964D3D2736A49519C36D4C37931.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3335203d3e20323638363238.roa
Signing time: Wed 24 Jan 2024 15:00:56 +0000
ROA not before: Wed 24 Jan 2024 14:55:56 +0000
ROA not after: Wed 22 Jan 2025 15:00:56 +0000
asID: 268628
IP address blocks: 2804:5418::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d6:ce:0d:c3:ca:d2:28:d7:00:f0:75:c3:12:22:f6:bf:a5:ff:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=320B17743411E964D3D2736A49519C36D4C37931
Validity
Not Before: Jan 24 14:55:56 2024 GMT
Not After : Jan 22 15:00:56 2025 GMT
Subject: CN=A72A8CFA4EC767C438093490141126DB71DD0FEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:4a:d2:44:fb:ec:05:b9:f9:6f:bc:f3:b8:
98:a9:b2:4d:e5:bf:f1:e3:4f:c4:04:d0:a9:af:8c:
5e:af:4d:6e:47:2f:da:19:63:79:80:c8:dc:c8:64:
bb:59:75:7e:92:66:a1:77:70:23:4e:a9:9a:67:a8:
f3:03:b6:83:df:95:4a:fe:f0:e6:23:e0:c2:55:f7:
46:08:e8:39:f0:40:f4:64:2c:58:c0:3c:8d:a0:1c:
f7:7e:b4:ae:09:44:4f:8b:42:81:37:fb:23:89:38:
9e:b5:7d:b2:2b:35:8c:8d:03:1b:3c:b4:26:95:5a:
ff:f4:96:01:34:98:3c:07:28:f1:7a:f9:4f:37:5d:
75:9e:b7:5a:18:c7:93:de:98:d1:4d:3c:55:43:b4:
59:d3:5e:d9:ec:f2:df:21:61:65:1b:ce:72:29:c9:
0e:33:77:02:4e:af:07:aa:96:aa:aa:f0:5d:c6:e2:
a5:8f:ae:2a:e6:40:e0:03:20:b8:8b:08:c7:f5:d6:
3b:ae:1f:74:1e:7f:d6:81:00:85:53:fa:76:83:bb:
8e:d4:48:a7:d2:5b:f4:7c:f7:91:5c:6f:78:3e:3d:
b2:5d:5f:4c:06:b2:7d:5b:b2:e9:0b:f3:8f:18:af:
de:ea:f6:a0:4a:16:ea:7b:f3:6d:fd:d3:9b:41:44:
bd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:2A:8C:FA:4E:C7:67:C4:38:09:34:90:14:11:26:DB:71:DD:0F:EA
X509v3 Authority Key Identifier:
keyid:32:0B:17:74:34:11:E9:64:D3:D2:73:6A:49:51:9C:36:D4:C3:79:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/320B17743411E964D3D2736A49519C36D4C37931.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/320B17743411E964D3D2736A49519C36D4C37931.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3335203d3e20323638363238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5418::/32
Signature Algorithm: sha256WithRSAEncryption
bb:3f:14:f3:2b:c8:44:7a:be:f2:95:44:31:24:ad:a3:af:51:
13:d3:1b:48:34:37:d7:87:8a:9b:b4:69:25:54:3c:76:2a:d6:
a1:4a:c2:36:de:0f:d4:45:d5:c1:79:c5:6c:83:33:d7:db:ee:
aa:c6:7c:43:3a:3b:8a:aa:e3:01:c4:24:da:2e:34:dc:14:2b:
cb:05:55:01:17:e7:b5:d7:29:cd:7b:5e:6f:3e:f7:98:da:96:
df:cf:cb:c2:84:61:53:2d:89:c6:e9:7d:b7:6b:55:e2:93:e0:
9d:7b:60:e7:04:71:f9:70:55:65:66:d4:12:14:ec:b5:62:32:
2d:f0:ff:56:f6:c5:68:ac:30:23:3c:b2:0f:29:af:04:e7:55:
77:ce:ed:22:1a:81:5b:2f:3d:40:81:d4:57:cb:61:77:82:2d:
8e:0e:f7:e5:aa:f7:87:14:a8:ab:e4:6f:61:78:5e:3f:b5:b0:
76:c3:5f:73:81:04:92:46:18:fe:9f:3a:7a:44:91:0d:53:ba:
ef:b6:d4:48:67:5e:10:5d:16:32:21:6d:50:34:e4:97:e9:00:
a0:b6:b4:c7:3b:9b:06:de:f7:3b:3e:95:60:b0:70:5f:d3:57:
47:00:a2:68:f2:22:98:af:20:0f:4b:dd:14:41:9f:64:44:be:
81:83:3a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:53:01 2025 by rpki-client