Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
File: 323830343a6139633a3a2f33322d3332203d3e203532383938.roa (raw, json)
Hash identifier: 1/LEXgbWrn4Q8iXtWKV3beFLgomQwh15PQGs3fUCA9w=
Subject key identifier: 07:26:C6:27:F0:E0:23:60:86:49:83:FA:E2:33:A8:76:B6:55:BA:AB
Certificate issuer: /CN=198E6997B7790B601CE9B8657001F896E66D3D74
Certificate serial: 7CEA9D107F5F49A15A1116607DAA017F13443A52
Authority key identifier: 19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
Signing time: Tue 10 Dec 2024 11:50:18 +0000
ROA not before: Tue 10 Dec 2024 11:45:18 +0000
ROA not after: Tue 09 Dec 2025 11:50:18 +0000
asID: 52898
IP address blocks: 2804:a9c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:ea:9d:10:7f:5f:49:a1:5a:11:16:60:7d:aa:01:7f:13:44:3a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=198E6997B7790B601CE9B8657001F896E66D3D74
Validity
Not Before: Dec 10 11:45:18 2024 GMT
Not After : Dec 9 11:50:18 2025 GMT
Subject: CN=0726C627F0E02360864983FAE233A876B655BAAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:71:fc:bc:55:44:dd:71:09:35:36:ea:ba:58:
70:5b:8c:ba:73:9a:e8:27:cb:7c:a1:ad:85:d9:6f:
1c:ff:bc:7d:d9:df:05:e2:2b:92:c4:a8:14:54:d6:
23:ee:90:b9:c8:b6:45:64:eb:4e:64:bc:38:21:43:
8a:fd:02:c8:88:5c:6b:69:e7:36:d3:8e:bd:6c:56:
a9:78:11:ca:62:a6:8d:71:a7:63:71:a7:a3:49:be:
2b:b9:af:6e:fa:7f:12:24:18:05:9c:fd:44:cf:dc:
4c:77:11:5c:ea:8d:9f:bb:31:1f:b0:7d:b3:d6:5b:
35:1d:88:3a:9d:6a:48:62:65:59:a0:36:aa:6c:c6:
39:4d:4c:0c:86:3f:11:e8:85:77:bf:c9:8c:a2:3e:
3c:3d:b6:6c:74:90:93:40:f7:c4:5c:fa:94:7d:51:
38:9a:b2:e8:94:6a:30:26:f2:ca:81:49:5c:f4:fd:
da:dc:18:92:5a:98:7a:59:5b:ce:b5:e4:a9:e7:8d:
49:8a:cc:72:92:66:9f:6c:78:3a:7b:e0:07:1d:9c:
a6:f4:ae:b9:2b:47:e1:04:50:e1:36:29:f2:0d:4a:
c8:7c:02:9e:00:3c:32:d5:4c:76:04:a6:6e:18:98:
28:45:33:fc:a9:fe:6a:66:63:d4:30:30:ca:fe:00:
8d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:C6:27:F0:E0:23:60:86:49:83:FA:E2:33:A8:76:B6:55:BA:AB
X509v3 Authority Key Identifier:
keyid:19:8E:69:97:B7:79:0B:60:1C:E9:B8:65:70:01:F8:96:E6:6D:3D:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/198E6997B7790B601CE9B8657001F896E66D3D74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/198E6997B7790B601CE9B8657001F896E66D3D74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3anhGXcGbe7mzHSdXS1Z1f4phcSCEzPRHRosWQqeexq4/1/323830343a6139633a3a2f33322d3332203d3e203532383938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a9c::/32
Signature Algorithm: sha256WithRSAEncryption
d0:57:a2:c0:db:4d:db:14:47:a6:79:96:3b:09:64:a3:14:68:
4a:40:32:c7:08:ea:66:a7:48:0a:6d:bb:d4:ae:e3:3f:0b:fb:
95:cb:8b:cb:a6:4c:27:ab:ef:f1:75:c0:ac:0d:ef:a7:26:45:
04:fa:3d:34:f7:7c:7e:dd:d2:2e:c0:e3:9d:a6:25:15:e4:b9:
af:fd:c9:fe:3f:59:af:88:db:d1:16:c9:50:97:1a:00:59:85:
2f:fe:06:8e:28:a8:90:b3:17:42:d2:37:b8:e5:ba:c3:be:ff:
f8:c1:d9:49:26:1f:d7:f3:c2:70:13:03:44:13:19:13:c5:58:
29:e6:01:a4:48:e1:a0:81:8f:b6:3a:04:a6:21:b7:64:56:70:
9b:45:c7:0e:8b:98:ef:7d:56:c4:d1:cc:62:61:4f:ab:93:1b:
f0:41:cf:40:8e:60:ca:dd:4f:da:ce:7b:fe:dc:b9:d1:04:ef:
ca:8a:08:d6:02:d9:eb:da:a1:f0:01:cd:64:73:03:d3:74:6e:
ea:0d:c6:3d:b0:e7:2d:42:8b:ca:78:85:d1:47:71:3f:01:da:
ea:8f:52:57:36:dd:0d:0b:34:dd:ff:48:08:5c:69:c3:22:0d:
f7:72:61:88:1c:61:4b:ca:08:1f:b8:19:4a:c5:33:3e:a3:4a:
3b:89:23:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:26:04 2025 by rpki-client