Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
File: 323830343a386263633a3a2f33322d3438203d3e20323733373630.roa (raw, json)
Hash identifier: 0h4wY6fpELYv5WQIzURuMOUshjBbD/aE7/fdTCHdiO4=
Subject key identifier: 7B:B7:50:A4:85:58:8A:2D:00:9A:6F:A7:B4:B4:59:8E:BC:EF:53:7A
Certificate issuer: /CN=2874D113C3B32DFA38F1DDE718E222159115D624
Certificate serial: 5B7E4B5EBF118F5FC28E2D6565420E30B4BE30B2
Authority key identifier: 28:74:D1:13:C3:B3:2D:FA:38:F1:DD:E7:18:E2:22:15:91:15:D6:24
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2874D113C3B32DFA38F1DDE718E222159115D624.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
Signing time: Thu 04 Apr 2024 18:19:28 +0000
ROA not before: Thu 04 Apr 2024 18:14:28 +0000
ROA not after: Thu 03 Apr 2025 18:19:28 +0000
asID: 273760
IP address blocks: 2804:8bcc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7e:4b:5e:bf:11:8f:5f:c2:8e:2d:65:65:42:0e:30:b4:be:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2874D113C3B32DFA38F1DDE718E222159115D624
Validity
Not Before: Apr 4 18:14:28 2024 GMT
Not After : Apr 3 18:19:28 2025 GMT
Subject: CN=7BB750A485588A2D009A6FA7B4B4598EBCEF537A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:f9:f1:a2:d8:88:ee:62:0e:95:db:ec:56:83:
73:02:0c:0f:ae:e1:67:96:8b:ed:c1:f7:f8:66:4b:
16:8c:b8:f6:9c:59:36:e5:67:25:f6:3f:f4:9e:6f:
3e:31:e4:32:a9:0e:b2:1e:64:fc:ec:63:4e:0a:bb:
f6:ee:e0:67:52:a3:1c:b0:d8:fa:e7:dc:29:b5:52:
ff:a1:f7:bf:d0:30:0a:22:de:04:9a:10:f0:5f:9c:
5a:59:4a:14:d2:02:13:89:81:84:0a:a4:56:bc:88:
bb:24:43:4b:ec:c9:6d:fe:85:c9:74:35:5c:6c:68:
7a:53:9b:ca:66:cb:a0:31:4d:47:03:63:65:fa:46:
dc:49:40:14:0e:e4:a8:4f:17:37:cc:32:69:c5:19:
83:90:ae:72:ae:6c:81:eb:e3:69:16:2a:c3:8d:5c:
40:26:57:57:94:a5:e8:a9:e9:7b:47:1f:46:68:9a:
c8:42:37:cd:6f:85:dc:01:c0:6b:9c:68:96:e5:87:
e9:2a:37:c4:57:0a:d9:e0:1e:d7:4b:37:be:8b:46:
52:df:e8:13:1f:e9:21:ac:b5:e2:dc:4b:80:f5:68:
a6:ec:c4:c7:f9:e8:5e:a7:b9:92:c3:ff:e5:da:cf:
0e:72:56:96:2e:5f:a6:33:54:0d:ed:e0:7d:b2:2b:
a6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B7:50:A4:85:58:8A:2D:00:9A:6F:A7:B4:B4:59:8E:BC:EF:53:7A
X509v3 Authority Key Identifier:
keyid:28:74:D1:13:C3:B3:2D:FA:38:F1:DD:E7:18:E2:22:15:91:15:D6:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/2874D113C3B32DFA38F1DDE718E222159115D624.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2874D113C3B32DFA38F1DDE718E222159115D624.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JfdktgC9QGmSLufk1Fup1znCevpi3ArsqZwLDqNRH4e/1/323830343a386263633a3a2f33322d3438203d3e20323733373630.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8bcc::/32
Signature Algorithm: sha256WithRSAEncryption
2d:c2:61:37:f4:e6:45:7c:5b:f0:29:e9:14:42:e0:d6:36:30:
4c:ab:f4:56:73:76:3e:c8:b5:e1:7a:6c:9b:41:10:88:8a:48:
60:6d:4e:38:b9:d5:de:2f:49:72:2f:64:78:d3:5f:06:eb:23:
d5:b4:d5:d4:3a:f5:84:ff:ec:08:c2:49:a0:48:ae:0a:20:0a:
b0:41:a8:e5:ff:05:f8:4b:8a:1d:fa:6c:5b:07:6d:5b:64:79:
b6:87:f4:5f:4f:19:a6:d6:e5:1d:39:4d:e0:18:2e:98:a8:31:
64:a8:f2:c7:ce:64:3d:86:93:36:5d:1e:46:ae:72:d0:34:50:
05:23:f5:0d:96:d5:fb:80:62:4b:f2:dc:41:3a:cb:72:92:a4:
da:70:d6:cb:89:dc:02:64:7a:06:20:7b:7d:73:f9:7d:09:7a:
7c:b6:28:3f:ac:ba:17:d7:3d:7a:62:29:7f:7d:de:81:b7:af:
02:73:02:ce:08:a8:c0:67:86:dc:6a:8a:18:ee:42:6d:ca:54:
73:b8:e1:ed:7b:57:d3:28:e0:f5:b4:e4:09:8a:96:6e:3f:48:
e1:0e:0d:eb:62:5a:65:f1:1f:8d:0f:d0:76:0f:84:4c:f7:cb:
11:5d:e9:b6:28:a8:d6:67:f2:f2:a6:6b:9e:d3:49:9c:82:36:
f7:75:ee:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:35:19 2025 by rpki-client