Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33322d3332203d3e20323638323239.roa
File: 323830343a346466303a3a2f33322d3332203d3e20323638323239.roa (raw, json)
Hash identifier: HwdWtsyo7aT6HRbI1jMbBrQqavp9dKhhA6eh/sGAdB0=
Subject key identifier: 14:BC:7C:99:49:FE:70:0E:D3:8F:A8:33:63:03:15:F4:23:E4:A5:7A
Certificate issuer: /CN=321510E0836AA48D9EE42A00551338BB403CE659
Certificate serial: 4CD4AB008D6AD89BB1727AB7A0DA0AA71904DE01
Authority key identifier: 32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33322d3332203d3e20323638323239.roa
Signing time: Wed 03 Jul 2024 21:10:26 +0000
ROA not before: Wed 03 Jul 2024 21:05:26 +0000
ROA not after: Wed 02 Jul 2025 21:10:26 +0000
asID: 268229
IP address blocks: 2804:4df0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d4:ab:00:8d:6a:d8:9b:b1:72:7a:b7:a0:da:0a:a7:19:04:de:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=321510E0836AA48D9EE42A00551338BB403CE659
Validity
Not Before: Jul 3 21:05:26 2024 GMT
Not After : Jul 2 21:10:26 2025 GMT
Subject: CN=14BC7C9949FE700ED38FA833630315F423E4A57A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:58:fb:27:11:ef:7f:44:fc:5b:71:b2:7e:12:
9c:45:07:6d:84:01:47:ab:85:be:6e:48:c0:78:57:
f3:4e:c1:d8:b3:41:0f:8c:ee:31:8e:f1:c2:1b:42:
52:91:11:4e:b9:e4:19:ff:49:3e:31:27:89:c8:47:
ff:03:5b:68:96:5f:fb:5d:20:d7:b2:3d:01:25:ff:
23:44:55:58:45:ca:5b:e5:fa:b2:2c:4b:dd:31:a4:
86:37:8a:1b:64:a0:52:ec:bd:56:77:86:07:c6:99:
5d:80:8d:ba:57:f4:3e:ef:ef:6a:bf:c3:9d:8d:b9:
4b:2d:ad:06:bf:c3:7e:74:dd:4c:71:9b:3d:22:e2:
b6:27:4d:76:6a:e5:20:a3:5c:e3:6c:d5:07:f7:87:
d9:c8:28:52:f9:94:cd:3b:66:68:cb:a8:96:55:97:
7f:e6:b8:f8:cf:2a:20:18:a2:9c:df:c7:76:6e:04:
05:fa:05:d8:69:b3:a8:39:e4:1c:a7:6b:7c:d7:cb:
a7:87:d3:7a:e4:6e:2a:e9:b0:34:63:e8:3f:07:96:
b5:96:6e:d8:9d:b5:83:9d:90:a1:e1:b8:f7:8a:50:
08:22:e4:40:ae:cb:ff:d6:52:22:ac:44:7f:55:04:
c6:01:15:df:09:21:c1:d9:e3:ea:34:ad:e3:33:6b:
ad:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:BC:7C:99:49:FE:70:0E:D3:8F:A8:33:63:03:15:F4:23:E4:A5:7A
X509v3 Authority Key Identifier:
keyid:32:15:10:E0:83:6A:A4:8D:9E:E4:2A:00:55:13:38:BB:40:3C:E6:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/321510E0836AA48D9EE42A00551338BB403CE659.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/321510E0836AA48D9EE42A00551338BB403CE659.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oC3f7TwdFYaNDnmuQhiE5j3vsrogxm9hqFq3evonbei/0/323830343a346466303a3a2f33322d3332203d3e20323638323239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4df0::/32
Signature Algorithm: sha256WithRSAEncryption
80:47:76:a3:91:c1:02:f1:19:4d:ee:9a:17:31:7f:d4:21:b6:
8a:db:5a:d2:72:38:7f:92:c5:2e:13:ca:86:3b:b5:f4:4d:99:
ce:ac:fc:dd:83:40:18:13:74:5f:14:c9:da:b8:96:87:5d:7c:
23:93:ff:1e:20:c4:bb:24:e0:13:2e:b2:00:7f:45:55:d3:1a:
3e:a7:d9:8f:8f:53:fc:6a:45:d0:af:23:6e:b7:4d:db:aa:22:
5e:cc:b8:00:50:f4:5f:33:51:56:9e:0f:4a:7b:7b:3c:df:dd:
6e:96:ef:4c:70:d1:50:ba:ae:49:27:8a:37:40:c8:69:cf:a0:
cc:b5:22:d9:ac:26:01:90:2b:9c:43:55:c3:5c:20:81:14:14:
15:a4:fe:c4:20:16:d0:36:c7:f0:f9:ee:20:7f:ab:c7:1a:29:
f9:f2:ad:24:77:83:74:54:17:fe:99:92:f2:a8:b0:7a:89:47:
c0:b7:c3:2b:a7:b3:19:b0:5b:ab:6b:a7:f0:fd:50:35:7b:9b:
44:c3:6d:2c:11:a8:a4:38:12:94:26:7d:60:31:ca:18:1f:ae:
23:44:28:34:b4:ff:aa:5e:e9:5e:96:b6:5b:de:60:cc:dd:7f:
76:14:b3:31:c2:cd:66:4e:84:d0:8d:90:a7:8c:dd:76:42:e4:
7d:3d:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:29 2025 by rpki-client