Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa
File: 323830343a333538633a3a2f33322d3332203d3e20323636323933.roa (raw, json)
Hash identifier: zObtUZbcetEwnzArwrHZ2W0mlIy6i4gI5E+fVDTrAT0=
Subject key identifier: 71:CF:E0:D3:FF:7E:66:00:B1:C5:11:0B:2F:25:8E:E9:46:2B:67:47
Certificate issuer: /CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
Certificate serial: 4D4D9304A5EE8BDBD70540647146BA44B27882AF
Authority key identifier: 2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa
Signing time: Fri 08 Mar 2024 14:06:51 +0000
ROA not before: Fri 08 Mar 2024 14:01:51 +0000
ROA not after: Fri 07 Mar 2025 14:06:51 +0000
asID: 266293
IP address blocks: 2804:358c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:4d:93:04:a5:ee:8b:db:d7:05:40:64:71:46:ba:44:b2:78:82:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DDB5A9ECD2CC0565753C38F6A772170A3461002
Validity
Not Before: Mar 8 14:01:51 2024 GMT
Not After : Mar 7 14:06:51 2025 GMT
Subject: CN=71CFE0D3FF7E6600B1C5110B2F258EE9462B6747
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:d5:42:bd:cf:df:52:1a:de:bb:b7:fc:93:
c1:0f:49:1e:f1:69:5f:71:f5:ff:72:58:51:a1:34:
b4:6c:56:ed:40:7c:29:d1:cb:bf:f0:85:e0:e1:a0:
86:39:1c:45:73:7e:ec:17:d0:10:d2:75:fc:36:cb:
4d:8b:99:8a:6c:7e:cb:f0:fc:a5:71:4b:02:55:7e:
50:34:c0:e1:e9:6e:6e:6e:ce:c8:89:1b:69:ae:db:
50:49:11:42:99:39:38:36:c1:11:93:0e:58:36:5f:
09:71:10:2b:80:b4:fb:ef:d7:63:29:e2:3b:da:77:
54:30:9e:66:13:62:c5:d2:33:8f:a5:15:42:13:ed:
81:22:5f:e1:30:61:79:94:8d:b5:df:6f:be:3d:3c:
38:78:c2:21:66:9d:7f:35:89:64:e7:d9:88:f3:38:
96:04:57:17:2b:5b:4a:50:3c:b1:16:2c:4b:84:9e:
cc:02:f0:1a:70:25:59:55:5e:c9:15:f4:44:ea:49:
4b:86:ca:57:4f:e7:8f:7a:4c:47:03:a3:d1:f6:b6:
c5:f9:0f:39:f5:dc:43:30:d6:e8:39:8c:77:51:6e:
17:b7:a5:e2:56:46:c2:86:94:ee:1b:fc:c5:60:d4:
5e:c0:5f:5f:64:c2:b0:2d:75:ab:5a:fb:6c:c0:dd:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CF:E0:D3:FF:7E:66:00:B1:C5:11:0B:2F:25:8E:E9:46:2B:67:47
X509v3 Authority Key Identifier:
keyid:2D:DB:5A:9E:CD:2C:C0:56:57:53:C3:8F:6A:77:21:70:A3:46:10:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDB5A9ECD2CC0565753C38F6A772170A3461002.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hd8MdRyLpipRHkEDDdtUYSFC33XTyt4sApAfV5tg3KL/0/323830343a333538633a3a2f33322d3332203d3e20323636323933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:358c::/32
Signature Algorithm: sha256WithRSAEncryption
53:e3:38:c6:66:20:3f:9a:05:38:05:85:c9:c3:38:56:0d:2f:
d1:18:e9:94:8f:70:39:3d:32:3a:f5:c6:c8:28:1d:9e:3f:ff:
a8:d0:a3:c2:57:8c:0e:99:ca:99:a2:f6:41:3a:12:1c:3b:15:
39:6f:50:2c:e7:59:19:91:55:1f:65:bc:cf:ed:44:78:e3:69:
74:b5:b2:bc:29:03:d4:29:be:00:3f:fc:79:17:04:f5:c6:c2:
5b:3f:e7:7d:0d:0d:a7:c6:e0:43:0a:55:e9:33:6a:b6:89:29:
0d:87:0d:cc:80:11:38:3b:fd:71:a8:e3:d3:4c:0c:98:12:62:
a9:32:57:3c:8b:bf:cf:09:28:b2:8a:6c:10:0d:49:53:43:28:
40:f3:f9:2a:51:c9:e5:c3:fc:23:c5:b5:37:73:6d:17:69:91:
12:b1:ea:10:4d:9d:7d:a2:ef:60:5d:0e:d8:59:3f:b6:f0:13:
7f:41:b5:bf:0e:ef:af:b5:db:49:56:46:08:79:6c:0e:b9:6b:
62:1b:a2:9a:d1:88:95:22:07:6e:42:c4:c7:8f:50:7b:89:39:
99:a9:c5:f9:1f:a2:01:e5:f1:c9:c4:44:32:9d:72:2c:14:7a:
5a:93:27:66:c5:e8:5a:4b:21:78:84:96:e1:79:42:ca:c8:36:
dd:04:0d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:57 2025 by rpki-client