Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: 5qqbkBGT8Z9FsUnLDO0NCgoWVABUdd6OUPFw4m2x8iA=
Subject key identifier: ED:84:56:85:BA:8A:7C:14:42:4D:34:CC:88:07:2C:0C:76:49:F5:22
Certificate issuer: /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial: 65272E1E3A46F2469DC239EDA708B6F26BF070D5
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Mon 19 Feb 2024 20:58:08 +0000
ROA not before: Mon 19 Feb 2024 20:53:08 +0000
ROA not after: Mon 17 Feb 2025 20:58:08 +0000
asID: 267942
IP address blocks: 2804:5590:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:27:2e:1e:3a:46:f2:46:9d:c2:39:ed:a7:08:b6:f2:6b:f0:70:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Validity
Not Before: Feb 19 20:53:08 2024 GMT
Not After : Feb 17 20:58:08 2025 GMT
Subject: CN=ED845685BA8A7C14424D34CC88072C0C7649F522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:56:91:e0:fd:56:24:ae:73:85:79:d4:68:
2f:79:ff:e3:4c:1b:56:0e:5e:b5:04:3e:b7:a0:98:
c6:7e:42:f3:9f:ee:1b:d6:15:37:d4:e0:18:f1:34:
76:dc:cf:eb:51:9c:b5:ba:b9:cc:b4:73:1e:75:66:
c1:ae:eb:79:40:51:19:4e:3d:58:d0:a4:ea:5b:a6:
28:ef:c7:a7:e5:4e:ab:4e:d0:c1:89:21:c9:47:b2:
ec:e7:d0:42:ed:39:45:1b:7a:bc:21:2b:ee:49:60:
3b:c6:d6:ec:64:d7:be:5d:ff:91:a7:74:31:f8:a1:
0b:71:e8:68:94:16:c6:fb:70:a6:23:d2:71:02:17:
be:0d:49:de:d6:f0:4a:c7:21:ef:97:57:a7:56:3f:
5c:d0:73:14:be:a2:eb:71:18:02:ba:74:f8:8b:65:
ab:f3:e7:24:95:b8:d7:4b:9c:f4:c6:24:4b:d4:06:
e6:72:6e:ba:34:6d:1b:1b:e7:35:2d:1d:b7:91:30:
3f:31:d1:f7:ff:e1:47:4c:71:31:4d:b7:af:2a:1e:
ac:41:dc:29:3e:50:26:6a:1d:69:d5:96:b6:eb:e3:
c0:02:a0:5d:e0:93:bc:d8:3c:b6:fc:6b:0b:ca:59:
d4:b0:84:0f:3f:ab:2c:08:77:4e:61:0a:10:64:73:
2b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:84:56:85:BA:8A:7C:14:42:4D:34:CC:88:07:2C:0C:76:49:F5:22
X509v3 Authority Key Identifier:
keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a373030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:7000::/36
Signature Algorithm: sha256WithRSAEncryption
d1:c5:44:8c:5b:89:d0:13:87:4a:7b:c1:02:f2:72:ef:cb:2f:
e5:d5:14:8f:83:41:06:70:cc:0b:e8:54:c8:42:41:a0:7c:c1:
67:b8:d7:6a:d0:00:cc:9f:ca:04:62:c9:0d:01:60:92:59:44:
44:35:c0:13:db:03:f7:76:f5:6e:62:b2:a2:b7:a5:cd:ec:34:
b6:ed:dd:d8:ca:3f:e6:77:fa:bc:72:87:b7:5f:9d:2b:0c:a2:
c0:23:45:f1:7d:1e:b1:1a:1a:46:da:01:12:03:97:6d:24:8d:
2a:70:eb:de:e4:b8:40:80:18:d4:7a:ee:a3:b3:06:35:2a:7c:
21:64:08:2e:f7:24:d2:5d:3d:b6:c5:f8:74:07:a3:7e:00:7d:
8d:06:db:39:df:e5:65:25:02:2d:49:36:fc:10:77:3f:78:fa:
34:f2:df:b9:fd:bc:82:49:b4:b8:f3:6e:c3:7e:18:09:40:ad:
bc:87:c9:e4:64:15:6b:e4:6d:da:49:7a:30:7d:ed:b9:bf:d7:
06:8c:cf:8a:4d:e6:f5:0e:b6:e5:33:3f:79:fd:38:23:e2:93:
5b:2c:65:ae:41:69:00:95:6e:18:f6:2f:03:e5:e5:98:f7:9f:
a2:ec:8e:ee:31:cc:3f:40:b9:c7:e6:e4:41:0d:34:25:50:c1:
aa:30:2e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:02:39 2025 by rpki-client