Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
File: 323830343a3838303a3a2f33322d3332203d3e203238323730.roa (raw, json)
Hash identifier: EmhWNkMLe/31TwnJsol3oPwkvZHSwj/Voax7fMNzzDM=
Subject key identifier: FF:74:8F:71:2D:FE:4D:6E:27:0E:F5:D0:6F:C6:E0:B9:22:41:4A:94
Certificate issuer: /CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Certificate serial: 2C7CDB2A7AFEE4F115F84E18FFD988C76A91E372
Authority key identifier: DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
Signing time: Mon 08 Apr 2024 20:07:01 +0000
ROA not before: Mon 08 Apr 2024 20:02:01 +0000
ROA not after: Mon 07 Apr 2025 20:07:01 +0000
asID: 28270
IP address blocks: 2804:880::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7c:db:2a:7a:fe:e4:f1:15:f8:4e:18:ff:d9:88:c7:6a:91:e3:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCCCF12A0F646C81AE64D53DB58DF016707D650A
Validity
Not Before: Apr 8 20:02:01 2024 GMT
Not After : Apr 7 20:07:01 2025 GMT
Subject: CN=FF748F712DFE4D6E270EF5D06FC6E0B922414A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:69:dd:55:6a:18:3a:1a:ae:53:ad:74:03:
93:33:cf:83:0e:77:57:20:b6:7a:4e:17:ce:c6:a7:
36:19:5e:61:02:a3:ba:3c:1f:2e:37:7a:5a:6c:ac:
7c:db:0a:ea:00:04:1f:fe:ef:47:7a:18:b8:05:af:
85:b5:bd:92:fb:be:e0:b5:a3:0b:8a:f9:46:e2:dc:
24:0d:99:98:fd:d2:48:fb:0d:b0:a7:06:52:b6:a6:
7c:a6:2c:80:cc:2e:18:c3:26:3a:18:79:75:0b:7e:
dc:1e:a7:73:6c:4e:03:56:c6:30:89:75:e9:f3:4d:
cd:92:f2:b1:59:3c:52:37:80:80:47:12:6a:bd:1b:
c7:7d:05:22:1f:57:ab:3d:1c:20:f9:c6:3c:ee:ae:
cd:ba:bd:6d:b2:08:b9:88:c1:20:b7:e9:80:d3:94:
79:9c:7d:c8:27:88:52:e6:5a:ed:03:f1:dc:7a:5d:
b5:af:2c:d9:cc:0d:13:0e:78:0d:7b:04:a9:59:ea:
a2:d8:9f:86:b8:c5:15:e6:e3:4f:4f:12:59:94:5c:
fa:f2:97:0c:93:6f:de:b1:17:f3:82:c5:0e:5f:07:
1c:8a:30:4a:4f:1e:59:f9:26:5e:c6:97:9d:10:eb:
f2:d0:94:63:55:e9:3d:dd:b9:08:35:df:53:77:3a:
ef:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:74:8F:71:2D:FE:4D:6E:27:0E:F5:D0:6F:C6:E0:B9:22:41:4A:94
X509v3 Authority Key Identifier:
keyid:DC:CC:F1:2A:0F:64:6C:81:AE:64:D5:3D:B5:8D:F0:16:70:7D:65:0A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/DCCCF12A0F646C81AE64D53DB58DF016707D650A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCCCF12A0F646C81AE64D53DB58DF016707D650A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3Z9nEQVcGsVG7sRCTkY2ZvvmDHhoE5ZgbjDKFqMFt7DF/1/323830343a3838303a3a2f33322d3332203d3e203238323730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:880::/32
Signature Algorithm: sha256WithRSAEncryption
95:b0:cb:f3:45:97:0a:c5:ab:fe:c0:21:ab:c9:df:93:3b:d2:
9e:fa:53:bf:2b:f5:c3:1d:9b:72:79:f0:e5:8e:b3:5d:64:0f:
6d:c1:39:11:2b:2e:29:58:93:25:26:f0:55:03:5d:7c:f2:e6:
97:85:bc:63:b2:c5:db:fb:74:bf:ad:a1:0e:d8:4f:87:ea:51:
cb:60:7b:ae:ad:7d:a7:de:b3:dc:ff:24:f0:56:87:28:42:41:
f8:30:37:da:35:f6:34:ee:f0:07:a3:d0:d0:7d:98:dc:51:c8:
d4:c7:ba:14:b1:7b:09:03:f7:46:7a:1e:cd:48:2c:f4:c0:48:
3b:d1:88:3a:a5:e9:0e:a0:28:92:59:91:50:72:82:c8:68:da:
3b:fc:75:9f:d7:1f:0f:df:f4:b3:b1:d6:e1:b7:aa:16:01:e1:
f3:79:fe:88:f7:cc:70:1b:74:78:e3:6c:f0:5d:d6:82:f9:d3:
3c:94:48:5a:09:db:00:69:8e:5e:03:0d:78:e2:9f:04:a0:82:
8c:1a:d6:6c:a6:ac:34:5e:7f:7e:fc:f8:ea:80:c1:1e:fd:36:
99:33:02:1d:61:fd:5e:85:77:5b:11:6d:87:34:a5:0b:00:07:
54:7c:42:a5:84:5d:dd:c5:0a:99:57:e1:ea:67:f3:1e:b7:11:
00:de:d3:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:21 2025 by rpki-client