Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
File: 323830343a386566343a3a2f33322d313238203d3e20323733343538.roa (raw, json)
Hash identifier: SEukqQ5ldYEDMvTnW9OPy8oLNO1X4sEhf2UdmJyYbbQ=
Subject key identifier: FA:8B:F7:09:CB:32:F3:75:6C:B2:BE:40:A5:69:C1:92:66:CC:2B:3F
Certificate issuer: /CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
Certificate serial: 3536A46B78C5F7C37A85C1B81B36B8203A174095
Authority key identifier: CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
Signing time: Mon 01 Apr 2024 17:57:09 +0000
ROA not before: Mon 01 Apr 2024 17:52:09 +0000
ROA not after: Mon 31 Mar 2025 17:57:09 +0000
asID: 273458
IP address blocks: 2804:8ef4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:36:a4:6b:78:c5:f7:c3:7a:85:c1:b8:1b:36:b8:20:3a:17:40:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CE6673E4E2D92D342F7617B1A3604FBF01849C9D
Validity
Not Before: Apr 1 17:52:09 2024 GMT
Not After : Mar 31 17:57:09 2025 GMT
Subject: CN=FA8BF709CB32F3756CB2BE40A569C19266CC2B3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fa:ac:75:d4:23:93:68:b0:66:18:67:04:06:
c7:40:b8:8e:0c:94:ba:90:dd:8e:7c:45:27:98:e0:
77:df:f4:82:2e:c7:34:61:c6:27:99:1b:31:7e:b8:
3b:01:08:da:5d:4c:93:13:8b:79:3b:04:31:63:43:
11:23:11:24:94:b3:d8:a5:a0:5a:fb:66:9f:92:60:
dc:a7:75:c0:30:32:c8:a1:24:52:16:f0:cd:8e:2d:
4c:ad:43:54:38:9a:4f:76:74:c9:05:f1:59:99:46:
54:e2:bf:fd:ac:d0:38:3e:49:11:c2:4f:90:6d:dd:
59:fa:ef:ca:20:a6:20:66:a9:7d:05:16:ac:3e:2a:
e0:ea:f6:d8:17:53:66:51:90:a4:92:33:10:49:aa:
a9:27:35:40:9d:8a:ec:ac:5f:a3:65:a4:7c:e1:6a:
09:25:fe:99:4b:38:44:67:d1:d7:84:b1:5b:3b:f9:
31:32:27:cd:b1:e5:9d:08:c9:4f:49:a9:6c:d1:8c:
cc:76:c7:d3:30:72:26:1d:59:6f:78:9a:4c:5d:6d:
8f:4e:ee:37:1c:7f:9f:fb:39:0e:20:8e:a6:58:60:
0f:98:8e:10:ab:dc:e4:ea:54:f5:83:76:81:e8:c3:
6b:83:be:d1:ff:a9:91:3a:00:62:a4:46:a0:a4:ce:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:8B:F7:09:CB:32:F3:75:6C:B2:BE:40:A5:69:C1:92:66:CC:2B:3F
X509v3 Authority Key Identifier:
keyid:CE:66:73:E4:E2:D9:2D:34:2F:76:17:B1:A3:60:4F:BF:01:84:9C:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CE6673E4E2D92D342F7617B1A3604FBF01849C9D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4rEhye7EPJToSwn5YPuFUhPM7236669sgmBEJjjtiyS6/0/323830343a386566343a3a2f33322d313238203d3e20323733343538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ef4::/32
Signature Algorithm: sha256WithRSAEncryption
52:d5:a6:6a:5b:c6:15:26:54:18:9c:7e:09:b3:1d:ae:78:ba:
69:9d:25:da:b9:d7:62:59:29:b9:e0:9e:e9:49:d6:13:d7:29:
b5:c1:51:ed:7c:da:1c:13:8c:86:a2:20:0f:9a:02:c4:44:fa:
28:92:fc:e8:55:75:5c:ba:c1:8f:31:93:1b:80:5c:d4:4c:9c:
43:73:94:0a:ba:b1:6a:91:11:f2:64:9b:69:63:c0:e0:78:3c:
9a:58:b7:ab:ba:38:ad:7c:94:5d:96:7c:9d:ac:9f:98:49:31:
92:04:3f:78:4b:6c:c3:46:08:02:e7:8f:d8:d9:5c:0e:29:84:
d8:51:10:f1:b6:12:e7:d9:2b:f1:94:b0:00:fa:f3:1f:6f:39:
3d:80:64:c2:e0:db:f2:d2:b7:a2:bc:8e:81:3b:2b:46:39:38:
0e:54:71:e3:5c:a7:32:eb:f6:81:eb:c8:c6:a8:38:61:74:b6:
0b:52:b0:10:49:b6:fa:fa:e8:29:34:2a:bf:d4:4c:25:69:b3:
88:07:a5:eb:1b:c8:38:b8:78:88:93:12:7a:f9:e1:76:3d:fb:
24:8a:b1:e8:f4:c5:7a:2d:68:13:9c:45:dc:37:43:3f:a5:e7:
3b:4d:94:74:f1:f6:b7:b5:81:b0:21:b1:7d:56:9b:ba:1b:f5:
90:17:38:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:39 2025 by rpki-client