Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa
File: 323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier: ECcPBkqBVp9pK6IoGzoOSAT4meqsN2VJdP+fPNnTBJY=
Subject key identifier: 47:46:97:14:34:01:90:D8:A4:F2:76:75:CF:28:A7:04:F6:1E:AA:95
Certificate issuer: /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial: 4E3E163650D0566C08B59022E557DEB1C6BAD299
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa
Signing time: Mon 16 Oct 2023 20:46:51 +0000
ROA not before: Mon 16 Oct 2023 20:41:51 +0000
ROA not after: Mon 14 Oct 2024 20:46:51 +0000
asID: 28131
IP address blocks: 2804:170:4300::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:3e:16:36:50:d0:56:6c:08:b5:90:22:e5:57:de:b1:c6:ba:d2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Validity
Not Before: Oct 16 20:41:51 2023 GMT
Not After : Oct 14 20:46:51 2024 GMT
Subject: CN=47469714340190D8A4F27675CF28A704F61EAA95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b3:27:6d:4d:7d:67:9f:79:53:85:f2:d8:f4:
cd:84:d6:74:52:1c:8c:30:14:d0:5b:25:7c:36:d1:
86:ad:23:89:ca:08:7f:21:76:50:0a:c7:db:6b:ec:
b1:4e:49:52:8a:74:25:c9:59:79:22:b3:ae:24:ca:
1f:3e:fb:0b:db:16:8c:ce:d3:5c:4b:fa:68:9e:48:
8f:9d:05:0f:de:33:9f:2a:07:46:b5:dc:f4:17:26:
17:04:96:97:b4:58:4b:ee:3a:80:98:42:a6:55:19:
e2:84:11:bb:16:28:84:ab:0a:74:b8:ba:18:9c:99:
79:2f:97:57:cf:b7:0c:96:cc:e3:5f:81:35:5e:04:
5e:2c:cc:c2:98:b0:3d:1f:37:fd:20:5b:27:a6:07:
bf:d0:17:9c:fe:ad:f3:f3:5f:e1:25:15:b0:61:d7:
b5:2e:72:26:3e:b1:ae:7f:83:56:85:ac:59:28:bc:
9b:48:7b:21:68:07:22:7f:e3:c3:19:2b:46:57:5d:
a5:fc:53:92:f4:8c:71:c6:c5:17:74:5f:de:3c:c7:
7c:a2:21:5e:19:5f:96:ef:1b:50:83:b7:de:79:c0:
b0:7b:7a:97:31:a7:45:a4:c1:71:68:62:85:b5:62:
f8:fb:97:81:68:31:be:fa:c5:0c:7b:d9:9f:24:2c:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:97:14:34:01:90:D8:A4:F2:76:75:CF:28:A7:04:F6:1E:AA:95
X509v3 Authority Key Identifier:
keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343330303a3a2f34302d3430203d3e203238313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:170:4300::/40
Signature Algorithm: sha256WithRSAEncryption
47:97:0c:4b:2d:20:cb:cf:5d:a4:85:f8:96:31:d4:27:6e:5a:
49:61:51:2e:d4:a8:3e:78:2b:c4:ab:5e:2f:c8:3c:0d:ed:ad:
ec:2b:07:9c:75:d2:e3:f2:e5:a1:67:6a:b1:81:94:1f:20:15:
1f:c0:77:2d:fd:2a:a0:20:52:71:4e:eb:e1:ee:a9:87:e8:04:
03:d6:ed:92:c5:2b:17:54:d6:02:24:3f:28:f1:7a:7b:3b:cf:
70:20:de:6d:8b:c3:4d:4d:d5:15:68:08:de:89:93:f4:f8:fa:
27:8d:b2:85:43:ef:44:cd:f3:8a:35:10:fc:72:ca:82:9f:35:
91:48:e0:5e:08:70:71:9d:96:db:5c:7d:34:a5:7e:9f:b1:eb:
93:4b:0a:2b:1e:c1:06:04:89:60:cb:05:18:10:24:d6:7d:ce:
41:91:4a:ed:7a:e8:da:2a:eb:19:f5:52:7e:78:f0:70:24:24:
65:69:c4:be:d7:ba:72:c8:66:91:12:1c:c2:31:2b:d8:45:41:
12:75:d1:3a:6b:08:90:a1:31:93:dc:63:59:38:63:db:6c:e2:
ca:40:83:70:db:3d:4e:69:21:72:f2:43:8e:db:29:12:d5:df:
e6:c9:0c:7e:86:32:c1:c2:d0:a6:fd:40:06:73:3e:fa:ad:95:
a6:6a:1d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:11 2025 by rpki-client