Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa
File: 323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa (raw, json)
Hash identifier: qsQ1ewPZC/B9tPh+LrS2RVP3vvkr4IlbjZkIp08lugM=
Subject key identifier: D5:60:62:86:76:65:FB:0A:60:D9:2A:0B:AC:3B:EA:75:A8:77:4A:DA
Certificate issuer: /CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Certificate serial: 575AC4B702336E8FB30F306815E33B7D545E65E0
Authority key identifier: 5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa
Signing time: Tue 24 Oct 2023 12:44:11 +0000
ROA not before: Tue 24 Oct 2023 12:39:11 +0000
ROA not after: Tue 22 Oct 2024 12:44:11 +0000
asID: 61678
IP address blocks: 2804:1cd4:8900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5a:c4:b7:02:33:6e:8f:b3:0f:30:68:15:e3:3b:7d:54:5e:65:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4
Validity
Not Before: Oct 24 12:39:11 2023 GMT
Not After : Oct 22 12:44:11 2024 GMT
Subject: CN=D56062867665FB0A60D92A0BAC3BEA75A8774ADA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e2:71:d9:5c:21:c3:b5:72:e7:2a:52:0e:57:
29:dc:6c:40:3c:4b:c8:3b:c1:5b:38:98:00:26:0d:
01:07:9e:ce:c8:14:e7:ba:c5:d7:4f:cb:71:c4:e1:
64:22:f2:4f:18:06:03:e9:a8:3f:e4:28:f6:74:ac:
5e:23:8e:f9:1f:ba:85:2f:df:a2:f2:23:ac:dd:18:
08:d0:18:6b:fa:84:95:15:7b:3f:8d:96:86:ef:fd:
28:f8:4b:d7:72:ca:4d:c0:43:53:8a:dc:ac:cd:60:
aa:f9:f6:da:b4:ab:75:e9:00:2a:19:28:b9:5a:8e:
14:25:43:b2:d5:d4:55:60:80:60:66:df:48:71:67:
66:0f:f3:e0:b5:0a:ee:7b:da:10:b1:e1:7f:53:1e:
ea:f8:d0:43:b0:ab:b6:2e:1f:4c:f7:12:d7:a3:6c:
a5:aa:3d:01:d7:66:df:c3:9e:fc:8a:32:6a:d3:42:
80:a3:f9:bf:ac:32:ab:10:f3:99:ef:d7:8f:a6:09:
0a:e7:42:f8:c0:06:40:0a:ee:68:e2:d6:19:86:df:
9d:fa:53:07:da:3f:e3:58:cf:61:73:8e:be:ce:b3:
f6:7f:04:cb:33:35:a8:be:24:c5:bf:f6:30:6d:0e:
52:0c:01:80:cd:c5:ad:80:3a:4f:20:db:2f:74:ee:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:60:62:86:76:65:FB:0A:60:D9:2A:0B:AC:3B:EA:75:A8:77:4A:DA
X509v3 Authority Key Identifier:
keyid:5F:FF:1D:3A:94:7B:8B:5F:F7:5D:D7:1F:F1:CE:D7:0D:4E:3F:A0:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5FFF1D3A947B8B5FF75DD71FF1CED70D4E3FA0B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/0/323830343a316364343a383930303a3a2f34302d3430203d3e203631363738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cd4:8900::/40
Signature Algorithm: sha256WithRSAEncryption
2d:1a:cd:4d:e0:68:df:a2:00:2b:0a:b9:87:47:b8:ef:2f:e0:
d3:ad:61:03:e4:d1:6f:04:28:c7:4f:31:5f:41:4e:6e:84:f3:
09:e2:5a:37:f6:46:0c:64:2a:53:8c:50:94:ec:69:43:6a:c2:
f4:23:b9:34:5a:75:12:7b:44:3a:87:06:ff:01:fd:85:ad:30:
d4:10:25:ee:b2:d8:67:22:68:b7:db:e1:2c:9e:38:17:6c:ae:
b8:7b:c8:15:fd:b8:37:61:62:d2:9c:77:c7:83:12:06:62:9a:
44:e6:f4:3f:af:d5:dc:57:88:5b:fb:66:71:4f:d7:d8:45:f7:
fd:1e:36:ac:a9:0c:47:6b:14:f1:2e:dc:9e:9e:7e:3d:1d:b9:
9a:26:b9:31:d9:80:ec:a9:66:36:89:97:5d:e0:23:fe:2a:95:
9c:40:5a:28:eb:7b:74:d2:62:c0:13:6d:bc:8f:b6:8c:e0:59:
be:77:dc:99:64:04:66:dc:40:46:3b:cc:89:12:e5:3b:87:e2:
e7:c1:76:f7:56:14:e2:b7:e1:8f:be:10:91:1e:ae:b2:e9:54:
fc:92:88:dc:b8:a7:9e:fb:b5:b9:7f:a7:e5:0d:e8:3b:89:c6:
9c:30:1a:59:26:6e:5c:f7:c1:36:f8:9c:e9:38:c9:39:5e:c3:
29:fd:39:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:27 2025 by rpki-client