Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
File: 323830343a326661343a3a2f33322d3438203d3e203532373731.roa (raw, json)
Hash identifier: 2Wvmnzi/uNM8razU56aRtpOmlWf6BDDfjoBSgF19BNk=
Subject key identifier: 24:A8:3E:FF:81:A1:BD:E9:E2:28:2E:B8:4E:B0:44:BA:CA:CA:00:14
Certificate issuer: /CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Certificate serial: 6A942825C1A852DD058B233C6EBD2FF9BEC4C9DC
Authority key identifier: 66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
Signing time: Tue 30 Jan 2024 20:35:48 +0000
ROA not before: Tue 30 Jan 2024 20:30:48 +0000
ROA not after: Tue 28 Jan 2025 20:35:48 +0000
asID: 52771
IP address blocks: 2804:2fa4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:94:28:25:c1:a8:52:dd:05:8b:23:3c:6e:bd:2f:f9:be:c4:c9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Validity
Not Before: Jan 30 20:30:48 2024 GMT
Not After : Jan 28 20:35:48 2025 GMT
Subject: CN=24A83EFF81A1BDE9E2282EB84EB044BACACA0014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f0:b1:94:fa:d3:3c:41:1c:cd:4a:8c:15:03:
c1:99:be:0d:16:87:ae:2f:eb:0a:71:83:a0:cc:4e:
21:28:07:38:3f:09:65:1f:7b:e1:9b:95:d2:65:d9:
39:57:59:d0:34:b2:87:ad:5f:07:21:7c:91:47:2f:
d2:5a:6d:f7:69:16:e9:d2:ec:07:64:40:1e:19:30:
29:df:a6:17:11:a8:c2:c5:da:d3:74:fc:9d:99:19:
94:92:9f:73:49:27:c5:fc:94:71:d9:a9:b2:b0:c2:
ca:03:ed:e3:08:03:40:6d:08:b1:b9:db:ae:f5:42:
fe:fd:65:3e:49:51:0e:2d:bd:63:8d:13:66:ee:42:
54:3a:65:cd:c5:09:64:e0:e8:4b:13:2f:94:fb:ec:
f8:7c:2b:9f:51:ef:c3:eb:af:f0:37:e7:60:3c:e2:
63:db:cd:c0:c6:5d:37:42:2c:68:39:03:47:20:88:
12:73:24:d3:fd:81:51:1a:48:b2:73:75:93:74:d3:
f1:46:86:7a:70:57:38:d4:71:c3:e3:25:32:53:99:
ef:31:2a:64:50:ed:fc:93:84:ef:13:aa:d3:3d:ef:
9d:0f:6f:e0:db:06:f1:e0:d5:b5:e1:ec:1d:33:25:
c2:9b:92:2a:1f:ab:4b:c2:80:a3:04:ec:e3:75:f0:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:A8:3E:FF:81:A1:BD:E9:E2:28:2E:B8:4E:B0:44:BA:CA:CA:00:14
X509v3 Authority Key Identifier:
keyid:66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2fa4::/32
Signature Algorithm: sha256WithRSAEncryption
2d:47:b3:72:fc:e6:1f:7d:49:b0:a2:c4:e1:30:12:c2:0a:09:
22:f6:cf:16:54:a9:5b:5c:07:5f:18:d2:31:e1:8b:3b:1f:cc:
63:54:03:8a:4e:83:dd:07:55:6a:b2:15:c3:f5:a1:7e:df:78:
a4:52:ab:3b:2f:c6:eb:3b:2b:44:fe:d4:2c:26:47:b6:90:fd:
9c:54:ee:ad:43:5a:a2:89:9e:1e:54:f4:bd:10:96:30:d7:6c:
b0:c3:41:1c:8f:d8:35:5c:66:23:f8:67:e0:67:aa:30:35:f5:
5d:9a:c9:d3:1d:ac:35:88:d8:c8:7d:21:bb:c6:ad:5b:59:d3:
9d:70:e3:08:09:4c:82:e3:fa:00:f2:3e:3a:bb:e2:12:74:5d:
6a:df:d6:c9:ff:ad:8c:85:59:e8:ae:45:aa:be:0a:d4:24:23:
a0:50:d6:f0:b9:9f:e0:b9:92:c4:52:5f:13:9d:9d:bd:7d:44:
b8:24:8e:5f:ec:51:d1:15:41:d8:01:7a:5b:4c:9f:33:fe:9c:
e0:6b:2d:0a:4e:90:79:37:9e:9f:60:9c:74:ce:b7:60:f6:60:
ef:03:4b:2c:b1:51:3b:6d:98:7e:de:06:22:e1:97:03:b0:9e:
c3:83:10:23:73:e3:97:74:11:8f:c4:fc:a9:6f:76:5d:88:e0:
4c:f9:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:56 2025 by rpki-client