Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa
File: 323830343a356435303a3a2f33322d313238203d3e20323638393634.roa (raw, json)
Hash identifier: j79D+O9h+aSeVFvqLqrk1lzAkozN7RzvGQHqcnSDwGw=
Subject key identifier: 2E:94:9B:33:BA:89:89:D9:9D:BC:93:5A:48:4D:E6:83:39:BA:9A:10
Certificate issuer: /CN=DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223
Certificate serial: 3B1AB9330841791E5F3ADBA984870E0611D02807
Authority key identifier: DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa
Signing time: Wed 05 Jun 2024 00:54:21 +0000
ROA not before: Wed 05 Jun 2024 00:49:21 +0000
ROA not after: Wed 04 Jun 2025 00:54:21 +0000
asID: 268964
IP address blocks: 2804:5d50::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:1a:b9:33:08:41:79:1e:5f:3a:db:a9:84:87:0e:06:11:d0:28:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223
Validity
Not Before: Jun 5 00:49:21 2024 GMT
Not After : Jun 4 00:54:21 2025 GMT
Subject: CN=2E949B33BA8989D99DBC935A484DE68339BA9A10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:63:95:e2:44:65:57:05:cc:ec:96:3f:f0:de:
f9:39:40:ea:0c:61:a7:7e:49:b5:35:51:c4:e4:b5:
7a:70:f2:7c:cf:dd:b0:88:08:b7:ee:55:c1:ee:db:
a8:ce:5a:05:2a:b3:9c:3e:19:8e:6a:bc:c6:13:e4:
4f:9d:07:33:d7:b8:66:db:29:3e:58:38:ef:4f:59:
68:9c:d1:c9:ae:28:6b:af:42:93:dd:4a:f5:06:30:
48:7f:d2:4d:22:9c:f9:ae:cc:64:6f:e4:72:1f:52:
bc:19:a5:3e:db:c1:e7:01:d1:82:8f:b6:b0:33:6b:
93:01:30:59:1d:2e:ba:a3:b5:b2:58:10:07:b7:b0:
5c:17:16:58:6f:16:af:e1:32:05:a6:60:ea:c4:15:
31:8a:df:46:de:35:56:97:15:7b:33:28:74:44:88:
f7:d2:75:19:e5:80:e1:ab:00:3f:ce:a6:2d:95:60:
23:d4:d6:43:4d:4b:af:14:b9:55:ce:39:d1:a0:12:
ab:ab:b6:98:49:2e:7a:d6:87:28:25:20:20:97:13:
57:21:33:df:aa:7a:1f:85:f8:f9:be:eb:8f:13:d8:
ac:77:76:72:93:52:51:fb:17:48:2d:c2:62:25:aa:
98:68:8f:35:51:f2:25:f3:93:e7:4a:79:09:72:b5:
55:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:94:9B:33:BA:89:89:D9:9D:BC:93:5A:48:4D:E6:83:39:BA:9A:10
X509v3 Authority Key Identifier:
keyid:DD:E7:3F:9A:5B:A4:B8:CD:F6:BA:C6:B7:C0:60:5E:43:AF:9A:92:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDE73F9A5BA4B8CDF6BAC6B7C0605E43AF9A9223.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QFh71nUnuhweHKBwdYvoU2CacsVbSEYdTcaTjcTD2ts/0/323830343a356435303a3a2f33322d313238203d3e20323638393634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5d50::/32
Signature Algorithm: sha256WithRSAEncryption
a0:da:f6:42:e5:18:e5:33:23:60:6b:c3:d7:33:8b:73:f0:8f:
9f:00:6f:41:4f:87:8f:80:7f:93:5d:85:f7:4e:11:c4:10:47:
7e:fc:1c:39:55:03:bc:31:8e:9b:20:fd:7a:75:c9:93:04:c8:
e1:87:99:31:ed:88:28:c8:e2:8c:4e:60:a4:e6:a3:d4:f7:47:
1b:53:69:bc:b2:18:ec:b3:ef:0a:27:71:c2:28:4c:7e:e9:b2:
20:f0:88:ae:6a:0e:e3:41:c4:16:3b:f2:a3:26:ba:ae:51:62:
ed:84:14:ed:35:29:1c:bf:81:7a:47:58:2e:5a:ec:91:39:7e:
a4:0a:ca:15:4e:b2:c3:52:f9:68:36:85:3b:b2:2f:45:6d:e2:
ea:60:3c:88:72:05:38:79:ce:7e:71:22:34:36:26:4f:a5:e1:
e4:40:8e:d1:45:90:01:aa:2d:03:d0:8d:d8:eb:83:06:45:62:
42:45:bd:7a:70:dd:df:0c:4f:35:d8:84:ce:b6:67:4a:22:ef:
bc:8a:2f:93:09:8b:13:24:54:3f:a1:7c:1d:0b:af:06:36:d0:
13:51:42:bb:76:a6:0b:8f:da:2c:09:ea:1b:cb:a4:21:47:79:
38:44:eb:b2:9f:ce:86:ed:f2:fa:aa:1c:5b:18:05:40:74:0f:
62:01:3d:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 03:53:21 2025 by rpki-client