Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa
File: 323830343a323139383a3a2f33322d3332203d3e203532383037.roa (raw, json)
Hash identifier: RxsXusGc0uIAQUWM2nS6rzr9tcTrOdHRRFvByxoHfn0=
Subject key identifier: 81:99:52:26:B7:2F:59:60:A1:F2:A5:0C:88:41:1F:AA:51:D4:C0:71
Certificate issuer: /CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Certificate serial: 54100C38DAE3C5BA692D1D0B1BF0C86F809D91AA
Authority key identifier: 81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa
Signing time: Fri 23 Aug 2024 19:53:28 +0000
ROA not before: Fri 23 Aug 2024 19:48:28 +0000
ROA not after: Fri 22 Aug 2025 19:53:28 +0000
asID: 52807
IP address blocks: 2804:2198::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:10:0c:38:da:e3:c5:ba:69:2d:1d:0b:1b:f0:c8:6f:80:9d:91:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81F7376E7749836FA880B5CF61B6A41239B2AD17
Validity
Not Before: Aug 23 19:48:28 2024 GMT
Not After : Aug 22 19:53:28 2025 GMT
Subject: CN=81995226B72F5960A1F2A50C88411FAA51D4C071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:db:76:f0:f3:34:d1:a5:73:cd:9f:04:7c:
fb:c1:45:b4:c3:43:42:c8:2c:ae:34:37:df:89:55:
7c:0a:ea:e2:28:52:77:66:8b:8b:6b:ec:5a:ec:6a:
f5:9a:41:cb:0a:bb:fc:0d:93:3f:59:c7:0b:c6:08:
b7:04:e9:13:47:31:0e:32:6b:16:d4:6e:94:75:05:
51:84:c6:2a:0c:ec:fa:84:ea:90:0b:83:d4:6f:03:
c8:34:bd:66:f3:fb:72:f9:01:ae:df:ef:b0:0e:ea:
65:52:be:73:2d:8c:5d:52:46:08:21:95:71:b1:af:
60:5c:3d:2f:8e:87:2f:c8:c4:ef:77:be:48:c6:aa:
74:d6:8a:73:aa:01:7e:80:e5:9d:9e:b2:f4:d4:c7:
8b:b6:a1:41:aa:1e:c6:ea:45:4c:a5:15:f6:ef:bc:
24:9d:73:b5:d9:ee:7c:c9:c3:31:f0:97:e1:da:ce:
05:7d:82:9d:46:30:74:e7:2c:22:d0:50:50:c3:2a:
5a:44:a6:f9:c0:81:24:b2:ee:0b:8f:7b:f0:aa:ba:
55:89:c5:5d:36:a4:40:f5:c3:09:ad:81:59:7d:59:
13:e6:41:fd:04:9f:63:67:f9:ec:8a:df:9d:87:7e:
da:54:2a:0f:3a:21:61:fb:e2:ef:d1:c6:f9:73:48:
f7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:99:52:26:B7:2F:59:60:A1:F2:A5:0C:88:41:1F:AA:51:D4:C0:71
X509v3 Authority Key Identifier:
keyid:81:F7:37:6E:77:49:83:6F:A8:80:B5:CF:61:B6:A4:12:39:B2:AD:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/81F7376E7749836FA880B5CF61B6A41239B2AD17.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/81F7376E7749836FA880B5CF61B6A41239B2AD17.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2198::/32
Signature Algorithm: sha256WithRSAEncryption
cc:65:de:25:0d:d5:c2:82:aa:2b:2f:96:4f:37:89:ea:07:0e:
df:a6:da:c5:a3:ce:fb:d4:80:7b:e5:f8:b0:f7:94:a0:ed:ac:
53:52:a8:af:eb:9f:f7:9d:ee:e4:0d:36:b6:19:71:71:49:cc:
ce:ed:98:2e:de:80:1d:cc:41:78:09:9b:29:a9:74:b6:8a:1b:
63:64:4a:39:78:ae:55:5d:43:12:59:82:80:56:f3:43:ac:0e:
a9:1a:5e:a1:50:5e:69:e7:b6:7a:79:08:10:de:3f:e2:a9:05:
43:9d:ad:29:0d:ce:d5:3a:9a:04:83:2a:6d:3c:a9:88:df:04:
33:18:b7:87:56:d1:bd:23:06:4c:a7:6a:60:48:70:11:96:fd:
36:90:ed:14:6a:ad:97:42:46:16:dd:22:8b:90:25:a2:cf:26:
0c:10:e8:b6:3d:13:f1:ae:f1:78:e9:1f:0a:c9:94:fd:b1:f7:
0f:af:e1:a4:3a:3e:58:3e:3e:ce:54:3e:f9:17:ba:ba:fc:ae:
4c:f6:a7:99:f8:a0:39:7f:3e:cb:42:9b:bd:93:f4:fc:a6:4a:
6a:63:7e:5f:3c:0a:ff:2f:b1:27:b9:e3:03:f5:be:41:f0:24:
6e:ec:85:d1:9f:f2:9d:e6:b0:01:65:25:39:45:63:33:c9:b2:
00:23:db:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:34 2025 by rpki-client