Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa
File: 323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier: 0YIvFtdEjV4Yk+KJiyR8k/iTmqiZcbYhGa+zTyKKg7c=
Subject key identifier: 70:40:DE:8F:A9:7D:74:5D:1D:87:FA:AF:06:C3:91:2C:C0:9D:92:06
Certificate issuer: /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial: 3810D5CDE550BF462201BFE9B394FD9712471757
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa
Signing time: Thu 20 Jul 2023 14:25:00 +0000
ROA not before: Thu 20 Jul 2023 14:20:00 +0000
ROA not after: Thu 18 Jul 2024 14:25:00 +0000
asID: 52706
IP address blocks: 2804:c70:6::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:10:d5:cd:e5:50:bf:46:22:01:bf:e9:b3:94:fd:97:12:47:17:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
Validity
Not Before: Jul 20 14:20:00 2023 GMT
Not After : Jul 18 14:25:00 2024 GMT
Subject: CN=7040DE8FA97D745D1D87FAAF06C3912CC09D9206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5f:da:f7:8e:fc:30:2f:6b:ae:b8:e9:68:71:
a5:a7:d7:8d:53:71:e7:b1:bf:ce:e5:82:1a:d7:a1:
d9:31:f7:20:14:15:1a:05:bd:a0:9c:b6:ea:52:af:
80:12:2d:57:8f:eb:dc:fa:ec:d4:51:17:5c:b3:57:
57:46:66:f5:08:a1:23:cc:9d:85:03:41:b4:f7:8c:
29:33:ec:f5:17:08:e7:66:45:2c:d1:89:79:cd:e6:
17:46:c3:c8:cd:5e:b2:ef:07:40:f0:d0:c9:dd:93:
54:9d:d7:34:c8:6f:ec:07:1f:93:16:a5:d5:61:74:
6d:0d:c1:2e:d1:2f:87:1d:9c:c8:1e:a8:73:00:62:
dc:69:3c:15:32:00:02:f0:83:3b:6c:4a:ca:0d:cc:
9b:2f:00:17:6b:1e:d3:7a:83:12:62:07:04:8b:61:
dc:d5:3b:80:44:5d:8c:a1:4d:0c:4b:7a:63:5c:8d:
89:9f:3a:0f:2b:60:34:e5:e6:24:3d:c2:4e:69:37:
76:06:f5:a0:d6:a9:be:a9:9e:cd:6c:01:0d:d2:e4:
43:6e:2d:cd:b0:6a:09:4f:9e:00:d2:f6:3e:d2:aa:
4a:d6:b6:c3:31:75:72:2c:59:28:2c:25:2e:2f:d2:
02:e9:30:ed:a0:0e:2b:ae:ad:e7:9d:6b:8b:93:f9:
c6:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:40:DE:8F:A9:7D:74:5D:1D:87:FA:AF:06:C3:91:2C:C0:9D:92:06
X509v3 Authority Key Identifier:
keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363a3a2f34382d3438203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:6::/48
Signature Algorithm: sha256WithRSAEncryption
0b:be:8c:e0:7d:4e:59:e8:ec:58:ba:a3:fe:ce:62:3a:e1:75:
f3:e3:71:3c:42:8d:f9:85:7a:84:f6:f0:78:4a:9d:b8:93:bc:
55:e2:45:a8:67:74:43:56:93:49:3d:57:63:d8:0a:01:80:aa:
08:f4:3e:17:f1:f7:9e:8e:c3:75:2f:1f:bb:5d:42:dd:26:5f:
63:4a:45:e8:92:96:1d:7c:98:88:43:4e:9b:35:ed:c2:e7:b1:
6d:d0:12:ad:1e:05:3f:8b:2b:e1:3f:6c:fa:e6:22:9a:94:74:
bc:6c:fb:dc:78:4e:ef:89:e6:68:ae:04:5a:d2:66:d7:34:6e:
13:dc:43:89:58:f4:e6:0f:1e:5f:bf:68:56:7d:1a:43:2e:80:
12:e5:25:70:ec:cf:0f:e0:e1:73:f0:62:da:38:4c:f1:66:48:
e0:d8:ce:da:b3:da:26:ba:ee:a1:35:41:2e:6d:b0:2f:3d:67:
b9:90:e9:62:35:22:91:f9:2b:b7:f2:92:c3:fd:74:0c:2d:4c:
57:57:92:74:70:26:18:2b:cc:81:20:4b:30:03:02:d6:13:b0:
15:35:b8:f7:8e:9f:8a:cf:fe:b9:5f:af:2e:1f:d0:fe:04:65:
91:a4:ca:53:e5:52:d9:39:9d:91:d7:c8:6a:72:51:29:30:27:
fd:d4:4f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:03 2025 by rpki-client