Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3334203d3e20323639363637.roa
File: 323830343a363830633a3a2f33322d3334203d3e20323639363637.roa (raw, json)
Hash identifier: fzN/PsGodhSEhVFleTAqFjci11VMrhnKdtMnsYQhlc0=
Subject key identifier: 3C:C0:E3:C8:28:B5:5A:E2:BD:E5:8F:87:D4:51:82:40:C2:70:21:F4
Certificate issuer: /CN=022A5382F6AB07ABD3C44930CF179443F389439D
Certificate serial: 132919F43E44ABF5750911FA1B51E158F6C8CD29
Authority key identifier: 02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3334203d3e20323639363637.roa
Signing time: Wed 04 Dec 2024 21:06:13 +0000
ROA not before: Wed 04 Dec 2024 21:01:13 +0000
ROA not after: Wed 03 Dec 2025 21:06:13 +0000
asID: 269667
IP address blocks: 2804:680c::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:29:19:f4:3e:44:ab:f5:75:09:11:fa:1b:51:e1:58:f6:c8:cd:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=022A5382F6AB07ABD3C44930CF179443F389439D
Validity
Not Before: Dec 4 21:01:13 2024 GMT
Not After : Dec 3 21:06:13 2025 GMT
Subject: CN=3CC0E3C828B55AE2BDE58F87D4518240C27021F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4a:ba:15:5b:92:ba:13:a3:76:71:e2:bc:ab:
08:2d:f1:a1:a4:bc:e0:20:90:74:39:4d:4d:1a:19:
69:98:23:6b:60:5f:6c:2f:3f:75:7b:d7:7e:1f:45:
f0:2e:e0:01:44:a3:3f:65:0d:92:0a:e7:2d:cd:aa:
84:70:15:96:b8:ee:4a:3c:e8:1d:56:92:82:7d:93:
78:f8:52:b9:d8:c5:a8:15:a5:9c:6f:3e:7a:b9:28:
64:47:4e:42:7b:7a:2c:35:07:42:41:06:6e:74:e2:
fd:94:60:8e:75:8d:f9:83:96:0a:67:c5:14:7b:a5:
8d:fa:aa:38:4e:42:3a:6a:ef:7c:54:88:26:59:d5:
f4:5c:83:94:8e:43:d2:93:02:74:3c:3a:10:a2:96:
57:f8:d7:f2:54:78:cb:d7:be:ac:c9:4e:c7:9f:c3:
a1:40:3a:86:c2:77:5e:10:b9:3b:f8:42:3b:82:ee:
f8:d2:7b:16:22:49:7d:7a:d7:8b:df:e1:9d:97:7f:
3e:d3:44:ee:dc:f2:3d:ad:c7:0c:9b:dc:69:58:07:
12:6e:28:09:c0:22:48:78:c4:de:0d:c5:05:89:08:
93:be:77:5a:6e:44:4d:3b:8c:2b:44:f3:80:0e:c5:
bb:72:21:f2:01:43:90:ea:b9:ca:32:55:a2:b0:66:
22:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C0:E3:C8:28:B5:5A:E2:BD:E5:8F:87:D4:51:82:40:C2:70:21:F4
X509v3 Authority Key Identifier:
keyid:02:2A:53:82:F6:AB:07:AB:D3:C4:49:30:CF:17:94:43:F3:89:43:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/022A5382F6AB07ABD3C44930CF179443F389439D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/022A5382F6AB07ABD3C44930CF179443F389439D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3eXyo1wWd5ExsHWkVU5244a9vMh3d2ZxYcjRrxg56oNx/0/323830343a363830633a3a2f33322d3334203d3e20323639363637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:680c::/32
Signature Algorithm: sha256WithRSAEncryption
7d:6a:23:a5:fa:be:02:55:48:8b:99:f3:78:12:f4:f4:2d:14:
f0:42:b9:91:c8:30:5a:97:39:a5:3d:e9:04:36:e4:5d:56:39:
92:16:76:e1:ba:82:d4:8a:d3:ee:2b:a2:96:ca:6f:8f:83:1c:
59:8a:bd:2e:df:7f:cc:95:a7:09:d0:39:36:fc:41:8e:24:7a:
fe:9f:ca:22:c4:3f:dc:da:ee:bc:3e:30:07:38:51:4d:8e:f6:
75:55:30:d7:12:c0:2e:71:0f:72:0b:a9:96:62:76:20:bd:44:
b0:18:2c:9a:fa:b4:40:95:d9:11:84:7b:2d:2a:eb:1a:71:61:
ec:94:a0:35:f8:43:6e:f0:34:80:3d:53:ce:a9:69:61:2d:ef:
32:ed:70:56:be:4b:13:d2:0b:2a:dd:d1:eb:69:4d:ee:c9:f6:
ac:2f:27:87:f3:af:5b:28:69:58:ac:62:6f:60:76:55:2c:a1:
4a:dd:39:f6:6d:5d:d8:d3:4c:34:6f:0b:d7:89:30:31:93:94:
46:11:8a:cd:5c:0d:8c:5d:ed:60:02:f8:fc:b0:d7:06:20:2d:
49:66:c0:d4:76:e5:f3:a0:c2:31:79:df:fe:7c:c1:74:ff:1e:
30:d2:37:4e:09:15:24:88:06:d8:89:be:0c:80:6a:d1:b6:23:
27:69:24:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:20:03 2025 by rpki-client