Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa
File: 323830343a386463633a3a2f33322d3438203d3e20323733333831.roa (raw, json)
Hash identifier: Bh4a6bI03qRw7TCGFlhlswPa0O6QZUPxtGDEXFFDJRg=
Subject key identifier: E0:15:10:F0:A5:21:2A:AE:8C:F2:55:35:E9:47:EF:FC:03:B7:67:76
Certificate issuer: /CN=683DE3BC7AE9EEEF8F160B60C8FD37229C08B941
Certificate serial: 091F149042564EE406C7CEE950DD19B98B0161C2
Authority key identifier: 68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa
Signing time: Wed 05 Jun 2024 19:20:36 +0000
ROA not before: Wed 05 Jun 2024 19:15:36 +0000
ROA not after: Wed 04 Jun 2025 19:20:36 +0000
asID: 273381
IP address blocks: 2804:8dcc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:1f:14:90:42:56:4e:e4:06:c7:ce:e9:50:dd:19:b9:8b:01:61:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=683DE3BC7AE9EEEF8F160B60C8FD37229C08B941
Validity
Not Before: Jun 5 19:15:36 2024 GMT
Not After : Jun 4 19:20:36 2025 GMT
Subject: CN=E01510F0A5212AAE8CF25535E947EFFC03B76776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f6:0e:98:bf:39:d4:d0:95:21:36:2c:0d:68:
9f:f2:08:fe:d1:26:62:d5:61:3d:35:b4:d0:8c:45:
27:1c:3c:54:96:22:90:3f:fd:30:b3:16:f9:59:a5:
3b:4b:17:17:04:4b:d1:4b:e2:b4:49:9b:a0:04:82:
d2:76:de:7d:40:d2:b0:e3:64:9b:6e:af:2c:2d:68:
fb:f5:a9:5d:47:ce:68:22:62:bd:2f:24:42:82:70:
08:f7:3c:c1:2d:ed:59:08:99:2b:5a:7e:40:43:ba:
a6:40:7f:17:8d:13:c2:90:84:39:cc:e3:1f:46:89:
92:de:cc:0e:6f:c8:c2:75:b8:b6:60:df:20:68:01:
99:7d:4f:11:e4:ec:b1:02:f3:e7:71:5c:15:23:a2:
35:d9:57:be:bf:61:7a:f6:41:71:de:df:21:f8:1d:
75:9f:8d:45:be:06:a2:78:63:df:2e:7a:f9:16:95:
51:9e:dc:b6:e7:7a:7e:21:d8:5f:05:8a:3c:f0:4c:
5c:89:c4:6b:4b:60:62:47:ed:bd:9f:2f:1f:4c:ef:
7c:5a:ce:37:70:3e:27:e8:12:76:ee:ac:e6:13:02:
6e:27:91:58:cb:7a:fc:a1:ec:b2:75:17:43:6e:7b:
3d:99:0d:6a:f1:32:18:13:26:64:10:87:f5:a2:27:
5d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:15:10:F0:A5:21:2A:AE:8C:F2:55:35:E9:47:EF:FC:03:B7:67:76
X509v3 Authority Key Identifier:
keyid:68:3D:E3:BC:7A:E9:EE:EF:8F:16:0B:60:C8:FD:37:22:9C:08:B9:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/683DE3BC7AE9EEEF8F160B60C8FD37229C08B941.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/0/323830343a386463633a3a2f33322d3438203d3e20323733333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8dcc::/32
Signature Algorithm: sha256WithRSAEncryption
8f:2d:21:4b:b7:88:d9:f0:72:23:59:ae:49:6b:f6:6b:05:c3:
4a:2f:31:17:78:3f:0f:53:ff:08:78:fb:d7:2d:60:12:dc:e5:
24:65:60:e8:2b:cb:3b:95:2b:6f:a9:fc:2d:40:12:ab:15:a9:
85:89:42:5f:b0:7f:cf:ab:f1:d7:6a:3b:fb:95:01:48:e7:a9:
15:58:4f:c4:ae:1f:15:02:c6:84:4e:2b:05:fe:9d:8d:6b:9b:
9f:03:84:cf:e5:92:83:dd:52:77:93:80:c5:a5:24:8c:3a:7f:
ef:24:50:45:04:50:1a:f5:4f:4f:e5:d3:f6:5c:62:0c:e5:e3:
c3:8c:21:d5:14:3b:e4:da:db:c7:d4:39:c8:ae:35:7d:d8:ca:
b5:1f:3b:cc:76:ff:00:00:82:5e:f3:0f:dd:4d:ef:bf:0b:19:
8b:5f:1c:a3:8e:06:24:ca:c6:6c:5c:de:09:ad:6c:68:da:2d:
d5:cb:34:26:45:17:97:ec:1c:e4:1d:e2:e2:ef:51:c0:88:5c:
98:57:19:17:e7:79:22:96:fb:8a:d2:b6:5f:68:95:53:74:ef:
1a:cf:88:d3:95:5d:93:b6:d1:40:5a:fd:d7:51:78:46:3a:de:
c6:d4:06:63:f7:fd:34:9b:9b:5b:fd:6c:65:a1:e2:b5:8e:91:
be:b0:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:16 2025 by rpki-client