Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
File: 323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa (raw, json)
Hash identifier: /7de1NwFgRwsavO9QVeziHoSya2Crk6o8lgretC3/1o=
Subject key identifier: 90:CB:51:F5:EA:10:69:53:C0:3C:38:60:01:FB:CF:D8:4C:AB:A5:5C
Certificate issuer: /CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Certificate serial: 6870D5DEB718D5776AA68F3AAE378100D06A0489
Authority key identifier: AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
Signing time: Mon 19 Feb 2024 20:58:28 +0000
ROA not before: Mon 19 Feb 2024 20:53:28 +0000
ROA not after: Mon 17 Feb 2025 20:58:28 +0000
asID: 267942
IP address blocks: 2804:5590:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:70:d5:de:b7:18:d5:77:6a:a6:8f:3a:ae:37:81:00:d0:6a:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73
Validity
Not Before: Feb 19 20:53:28 2024 GMT
Not After : Feb 17 20:58:28 2025 GMT
Subject: CN=90CB51F5EA106953C03C386001FBCFD84CABA55C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c0:57:a2:e4:7d:33:71:91:1d:66:7c:2b:97:
12:05:0e:28:08:23:38:70:41:a2:f8:36:d2:5b:f8:
69:3f:75:d1:18:79:a4:36:0c:2e:01:f9:d1:54:2b:
5a:35:18:6b:2d:de:21:36:67:74:e1:fa:7f:3f:f3:
f1:c0:33:74:d8:3c:0e:50:34:ec:23:21:fc:d4:6d:
1e:72:40:28:53:73:38:0c:62:c1:ed:31:b5:55:5c:
33:e0:6b:c9:f9:06:3a:60:53:67:eb:be:56:53:15:
08:4e:86:47:be:31:46:35:dc:c7:34:7c:7b:f7:45:
c0:24:ce:a7:07:90:7c:2d:74:45:fb:39:65:b5:8f:
1e:01:f0:3b:8f:c9:82:04:e3:1d:4d:6e:a1:7a:12:
76:4e:d3:70:68:14:a8:11:05:a7:e6:90:22:82:41:
ff:8d:38:9f:89:c4:dd:f8:62:b3:ec:e3:92:fb:0b:
ae:df:ac:c4:f3:19:ed:49:d9:bc:d1:25:13:a2:ba:
51:8c:67:6b:c9:3f:47:60:cb:ee:77:02:22:a1:e5:
d7:06:e0:f3:c0:72:9e:fb:8e:26:f4:e2:18:0a:ad:
e6:85:a3:02:ff:f7:43:bc:7a:a8:c4:20:15:35:1b:
ac:15:7e:a4:19:70:dc:3a:ba:06:0e:e8:9a:e3:17:
0b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CB:51:F5:EA:10:69:53:C0:3C:38:60:01:FB:CF:D8:4C:AB:A5:5C
X509v3 Authority Key Identifier:
keyid:AF:BE:5F:9D:8B:8C:17:D6:EB:A4:E6:94:F3:6F:C1:E7:9F:50:FF:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AFBE5F9D8B8C17D6EBA4E694F36FC1E79F50FF73.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CBnFNpckvPeN1pUpvYU7jR52Hpb1X6DH4UwxPywrtiA/0/323830343a353539303a643030303a3a2f33362d3336203d3e20323637393432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5590:d000::/36
Signature Algorithm: sha256WithRSAEncryption
71:19:b2:64:8f:89:7b:33:ad:ec:8a:7e:b3:38:17:c5:85:c7:
37:b6:5e:92:2d:4c:c1:87:2f:4e:8f:15:f3:bf:a4:f6:3a:94:
c7:6b:f4:4a:4a:3f:e1:a3:73:0a:55:3d:ff:e4:43:39:10:31:
97:98:6f:73:ff:3c:af:bf:44:c4:16:15:cf:04:16:c0:94:52:
95:8f:a4:7c:48:bb:2d:48:33:14:56:37:2e:95:2a:81:3c:5e:
5d:b2:d7:fa:af:9d:b0:89:8d:0d:65:a3:19:56:3f:af:8c:7e:
3b:a6:cb:63:4f:34:a7:42:6b:75:bf:2a:d9:e3:1b:f8:c1:22:
f0:e6:f8:8d:29:c4:52:e9:35:4e:fc:4b:78:d6:0d:d9:cc:b3:
47:a8:3d:cb:60:08:06:99:7f:63:ec:be:ab:a6:85:90:cb:37:
5b:53:ff:5c:fa:33:23:c3:ac:81:c3:b7:02:19:e3:fd:f1:a2:
dc:68:7a:74:04:96:9f:79:77:b5:14:ae:93:47:f2:11:a1:aa:
88:3c:5a:8d:db:ca:ff:39:f9:f1:4a:31:43:f7:47:6b:f5:b7:
69:7d:fd:5f:d3:c7:f1:e6:34:9e:5c:0f:5c:ea:2e:c0:cf:ff:
6c:3d:d4:aa:9a:46:17:ee:3d:be:14:3b:c3:c7:df:0a:9d:7d:
e3:16:dc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:35 2025 by rpki-client