Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa
File: 323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier: Z5woBV32B825/WfJGpsOMGr4H6wDODKIWyFCEEMkvlM=
Subject key identifier: 9D:B0:C2:8B:65:EB:31:EF:97:7A:E1:91:DF:5D:F5:7A:FD:9A:63:6A
Certificate issuer: /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial: 2FD04950D6D86B87583EA81129EB0573B943C36A
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa
Signing time: Thu 20 Jul 2023 14:20:08 +0000
ROA not before: Thu 20 Jul 2023 14:15:08 +0000
ROA not after: Thu 18 Jul 2024 14:20:08 +0000
asID: 52706
IP address blocks: 2804:c70:5000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:d0:49:50:d6:d8:6b:87:58:3e:a8:11:29:eb:05:73:b9:43:c3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
Validity
Not Before: Jul 20 14:15:08 2023 GMT
Not After : Jul 18 14:20:08 2024 GMT
Subject: CN=9DB0C28B65EB31EF977AE191DF5DF57AFD9A636A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:76:a5:7d:40:a6:c4:82:58:0f:a4:ec:90:16:
70:02:e1:ff:02:0f:76:f3:b9:8e:1d:7c:05:02:36:
60:d1:13:b1:db:ea:35:8d:dc:0c:f8:34:d9:db:0d:
a8:eb:8b:31:da:ba:89:39:cc:85:8c:c0:f1:0d:db:
5d:e4:e6:e3:38:a6:68:fa:b3:64:a4:2a:7c:ff:ba:
55:c9:e5:2c:c2:35:c7:0c:87:78:f5:6e:ca:a8:f2:
73:aa:77:87:53:8f:1f:e5:65:6b:60:b2:7a:fd:9d:
f1:ba:08:2b:fb:81:cd:9d:56:22:62:5e:a7:11:98:
18:59:86:7e:d1:88:85:05:53:71:2a:1e:ea:9f:a8:
14:9f:0b:df:12:e2:26:50:3b:f3:f9:72:34:cb:80:
72:13:46:24:7c:73:73:af:e3:b4:1f:3e:77:fa:62:
b1:fb:a2:b8:90:2f:e6:02:5c:60:74:a3:22:84:61:
f3:02:9a:37:d1:b5:b0:29:e7:9b:10:b7:93:fe:af:
8b:bd:27:b3:e4:6f:07:b2:14:c8:34:a1:0c:19:bd:
af:d6:47:06:e5:f6:a0:f7:73:9d:d6:5c:4d:45:44:
f0:88:32:c4:a8:21:b4:8e:d3:8d:e8:c7:c5:a4:68:
73:0b:11:11:a9:db:89:ac:60:b5:a5:9b:05:ed:9a:
57:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B0:C2:8B:65:EB:31:EF:97:7A:E1:91:DF:5D:F5:7A:FD:9A:63:6A
X509v3 Authority Key Identifier:
keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a353030303a3a2f33362d3336203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:5000::/36
Signature Algorithm: sha256WithRSAEncryption
b1:98:d3:31:62:23:7e:77:47:71:5b:82:c2:f9:5d:92:61:2f:
f1:03:1e:a6:f3:3f:58:ba:9c:e1:f9:e6:d7:7f:8f:73:56:96:
8d:69:26:58:44:06:1e:11:ec:3d:78:af:94:56:8f:0b:08:c2:
05:f9:5f:f4:bf:6e:04:8a:d0:60:d7:fc:31:bb:7c:d8:1b:64:
9d:88:22:bb:40:29:4b:bb:fa:d4:77:7a:02:d8:48:d1:07:33:
ae:78:8a:b2:f0:de:7d:5a:5a:37:1b:32:81:35:bf:66:c1:e7:
8c:f3:cd:dc:57:09:01:94:95:58:1a:bc:14:d6:4a:39:f2:1d:
74:66:65:1d:57:45:fb:54:be:0a:fd:5d:2e:4a:ce:85:57:6a:
9c:79:00:8f:52:bb:62:a7:e5:bf:12:86:19:7d:23:8a:1b:32:
5d:91:c3:5d:28:ac:ad:f0:5b:c0:e9:16:0e:fe:c9:e6:31:3f:
f5:eb:27:62:de:eb:4c:06:aa:34:8f:63:02:3c:65:e9:3f:45:
2c:b6:79:4c:58:e1:ec:40:39:da:ac:71:95:e0:e3:46:18:60:
28:06:72:2b:28:5a:9c:83:56:a6:4c:6c:a9:81:9f:9f:8c:c0:
59:4f:62:54:8c:1a:a6:17:97:f7:32:41:b5:47:aa:dc:0e:b2:
9f:f4:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:20 2025 by rpki-client