Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa
File: 323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa (raw, json)
Hash identifier: rxTd/r2YbMwzxNrx6iis9WsAtab5bJLEZ8kv67Axwos=
Subject key identifier: 42:81:7B:38:86:30:FF:62:21:1F:6C:1E:55:2D:62:EA:4A:14:F2:F3
Certificate issuer: /CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Certificate serial: 5F10B5F1D7433A28881BCD5A6A825AA67735FA4A
Authority key identifier: 41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa
Signing time: Tue 13 Feb 2024 15:52:47 +0000
ROA not before: Tue 13 Feb 2024 15:47:47 +0000
ROA not after: Tue 11 Feb 2025 15:52:47 +0000
asID: 264915
IP address blocks: 2804:2fd8:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:10:b5:f1:d7:43:3a:28:88:1b:cd:5a:6a:82:5a:a6:77:35:fa:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41A86F24F08AA1689D41C0058E1D1EF36578625D
Validity
Not Before: Feb 13 15:47:47 2024 GMT
Not After : Feb 11 15:52:47 2025 GMT
Subject: CN=42817B388630FF62211F6C1E552D62EA4A14F2F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:98:10:7b:64:2d:5c:5f:07:8d:19:b3:98:9b:
59:11:dc:80:9c:e6:b2:69:97:4d:20:78:9b:f7:fa:
ee:ad:78:1b:95:f1:2d:a5:7b:f7:bc:2f:0b:22:18:
72:dc:2f:e7:10:a3:c4:5c:91:ea:a6:17:57:f2:c7:
67:b2:f1:bf:74:f7:91:b8:0c:e7:c5:9f:92:11:3d:
1b:2e:dc:e4:e4:cf:f3:a6:68:d2:68:d7:37:b1:92:
50:ef:eb:c4:61:39:12:95:1a:b4:c6:61:14:5e:2a:
3f:e7:90:e7:7a:d2:bf:8b:46:2d:7e:59:11:d7:cb:
04:5b:d5:7f:2d:35:d2:c6:14:15:f5:01:6f:90:46:
9d:89:b2:59:91:f0:ee:03:46:e2:b2:34:17:70:c0:
e6:3d:3b:4d:f1:ed:a7:4e:b4:53:02:4b:ac:e9:ae:
f2:fe:19:66:04:57:3c:50:c5:60:ea:c3:bd:9c:61:
91:3d:01:3b:ee:2d:95:cd:27:a9:bc:5b:44:3a:b1:
b8:57:16:d2:da:39:fe:d2:bc:30:1d:55:2f:c5:54:
ee:de:e3:38:72:28:7c:d5:23:c8:e0:4b:1e:8f:de:
9a:80:10:46:88:f9:5f:09:eb:0f:5e:8c:4b:12:64:
b9:38:dd:e7:f9:b6:72:be:2d:a9:58:27:61:5c:df:
bd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:81:7B:38:86:30:FF:62:21:1F:6C:1E:55:2D:62:EA:4A:14:F2:F3
X509v3 Authority Key Identifier:
keyid:41:A8:6F:24:F0:8A:A1:68:9D:41:C0:05:8E:1D:1E:F3:65:78:62:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41A86F24F08AA1689D41C0058E1D1EF36578625D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5CzER6wAgRwvETMZkorbqLxMjXRycFMYLmpeGKtCK7kc/0/323830343a326664383a383030303a3a2f33332d3333203d3e20323634393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2fd8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
5f:66:8e:ba:1c:b7:e9:b9:1a:15:dc:d9:24:fe:e1:33:04:ea:
b1:f9:ab:88:25:80:72:f7:62:4b:38:8b:af:78:8e:42:32:4e:
c0:ce:4c:5c:e5:b0:1a:26:40:1a:c9:7a:68:1c:ff:fb:bd:82:
e7:3e:c4:94:2f:66:75:f8:73:99:7b:38:1c:89:ef:1e:0a:64:
eb:8e:ae:92:0c:d9:60:65:6d:b2:17:4e:b1:cc:e4:8a:e3:50:
3c:aa:77:48:53:a4:bf:8e:2a:fb:5f:c2:29:73:f3:d3:6f:9d:
35:90:d1:2c:53:21:29:b8:83:b9:8b:01:15:fa:88:3d:f9:93:
96:5d:31:b0:33:62:05:76:d4:56:7e:52:3d:16:de:f8:b2:b0:
89:21:81:bf:ed:04:94:c5:c4:f9:60:13:d8:ad:4b:09:03:29:
a7:1d:ea:87:a4:f2:91:00:7c:f1:bf:13:0f:ba:1c:81:69:eb:
de:fb:3f:e6:62:06:47:4b:e4:87:71:ea:a1:fd:0f:77:ab:f1:
c1:b9:68:91:b5:df:1a:cb:17:fe:78:24:bf:a4:01:70:c2:61:
65:51:c5:62:91:8d:c6:d1:5a:c3:8a:03:9e:de:a9:19:5e:e6:
dc:9b:ae:c0:b3:1a:9a:c7:54:92:f3:5e:4b:0a:cc:ad:c9:cf:
17:73:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:36 2025 by rpki-client