Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
File: 323830343a356265303a3a2f33322d3332203d3e20323638383734.roa (raw, json)
Hash identifier: Jp0OfuXm8SL3ca09IojORIzMxmCVgbx2DDY1QBlpB7A=
Subject key identifier: 79:A4:76:B4:F8:7F:76:6D:6A:4E:8E:75:75:78:0F:F2:C4:52:E9:DD
Certificate issuer: /CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
Certificate serial: 5B58BA086B1CA9B15463E28A02EF2D9EFE40CC0B
Authority key identifier: 4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
Signing time: Mon 11 Mar 2024 11:58:40 +0000
ROA not before: Mon 11 Mar 2024 11:53:40 +0000
ROA not after: Mon 10 Mar 2025 11:58:40 +0000
asID: 268874
IP address blocks: 2804:5be0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:58:ba:08:6b:1c:a9:b1:54:63:e2:8a:02:ef:2d:9e:fe:40:cc:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4F774C8A6C512C5300411E7B17BB34D22FE6F2D9
Validity
Not Before: Mar 11 11:53:40 2024 GMT
Not After : Mar 10 11:58:40 2025 GMT
Subject: CN=79A476B4F87F766D6A4E8E7575780FF2C452E9DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:52:9f:ff:cd:9c:25:35:58:7d:22:76:58:4d:
1b:d7:f6:f1:51:70:7d:12:42:87:a1:aa:9d:41:31:
3f:a7:16:c5:eb:1d:4e:fb:d4:05:03:a5:52:54:24:
03:58:cb:c3:b1:59:b1:23:28:73:80:66:30:85:6d:
a0:23:d8:1e:35:af:7d:f8:2b:02:7c:bc:0b:5d:7d:
26:e5:55:33:8d:9d:3e:a9:bc:2d:b5:d9:2e:f0:b8:
5d:91:82:3e:96:25:ea:2c:0e:c2:02:e1:3b:4a:28:
24:0b:37:b4:29:66:f9:cb:fa:d5:18:1d:b1:f6:21:
ac:1a:7e:31:e9:d4:cf:ea:b1:58:90:bb:f3:4c:a3:
81:75:52:f1:cc:86:83:77:12:f9:3a:a4:94:dc:d7:
d5:7d:1d:df:1d:c8:2f:c9:e1:27:d5:c8:54:e6:cd:
88:f1:0a:ff:8b:3b:bd:b0:20:9c:f3:35:d3:62:34:
d5:5a:4f:84:19:37:50:ac:84:ee:93:bf:ca:c9:ce:
e3:a1:9f:90:a0:a1:c9:8d:4d:51:35:62:6e:c1:f3:
ce:ef:0a:be:ca:90:56:66:04:b6:b9:fa:00:77:5b:
0a:5f:8f:4a:6a:99:35:e0:ee:f3:ed:2f:02:eb:70:
cf:9c:e8:72:a0:e6:47:c8:1f:67:86:db:e9:1e:0d:
28:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A4:76:B4:F8:7F:76:6D:6A:4E:8E:75:75:78:0F:F2:C4:52:E9:DD
X509v3 Authority Key Identifier:
keyid:4F:77:4C:8A:6C:51:2C:53:00:41:1E:7B:17:BB:34:D2:2F:E6:F2:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4F774C8A6C512C5300411E7B17BB34D22FE6F2D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4jkPcRmxHMoom96gmaNWYQJv1Lh2PQhYvWeMV22YXci4/0/323830343a356265303a3a2f33322d3332203d3e20323638383734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5be0::/32
Signature Algorithm: sha256WithRSAEncryption
96:a7:2e:84:c0:63:6c:15:57:17:36:f7:57:8f:83:1c:89:47:
5b:e6:3f:72:2e:83:f3:52:e7:99:fb:86:f2:32:c1:cb:bb:6e:
17:75:17:b3:b5:16:e1:1f:63:9e:88:f8:3f:3b:d2:41:54:73:
5f:33:4d:59:f9:84:a3:b2:e8:7f:63:7d:bb:45:f4:65:2f:ee:
f6:ad:a9:ce:99:6e:e2:48:a7:b5:a5:ea:a0:93:01:bd:7b:c8:
eb:79:84:2e:a5:dc:5a:49:d9:85:73:9a:ad:3c:99:ca:b5:d4:
9f:5f:11:5f:84:73:70:cf:e5:9d:d5:93:03:df:d8:9a:95:8b:
48:11:ac:26:82:0a:3d:dd:78:30:ba:99:05:aa:b5:f2:d4:3d:
59:ee:09:4e:e0:4e:e6:51:5a:76:84:55:f8:d5:7c:1a:9c:60:
44:a6:b4:b5:4f:f0:bc:1e:9f:54:ad:04:3a:23:47:15:03:72:
16:4d:0e:d0:88:8e:0d:29:56:1d:f9:6c:47:77:f2:1e:f7:35:
11:80:ed:7f:81:de:9b:e8:4c:54:5d:38:cf:cf:26:ff:30:d2:
b3:f8:2e:87:d8:cd:fd:6a:72:8f:a3:ec:65:1c:af:dd:7f:2e:
89:fc:ad:ee:ac:82:ee:6d:92:f7:06:f9:cb:d6:6e:ec:09:84:
6b:cb:a8:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:46:51 2025 by rpki-client