Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa
File: 323830343a333363633a3a2f33322d3332203d3e203238363536.roa (raw, json)
Hash identifier: MI2dXaDfvqxIgn2sJeByf1xb22tCydVhDGXpRq/CrS0=
Subject key identifier: 4A:F1:CD:EF:11:7F:9E:93:E7:A5:03:8A:28:9D:88:50:93:5C:80:4E
Certificate issuer: /CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Certificate serial: 62395FE0FECFF3927A99704D00534CEF23EB0168
Authority key identifier: 1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa
Signing time: Tue 12 Sep 2023 14:14:45 +0000
ROA not before: Tue 12 Sep 2023 14:09:45 +0000
ROA not after: Tue 10 Sep 2024 14:14:45 +0000
asID: 28656
IP address blocks: 2804:33cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:39:5f:e0:fe:cf:f3:92:7a:99:70:4d:00:53:4c:ef:23:eb:01:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E
Validity
Not Before: Sep 12 14:09:45 2023 GMT
Not After : Sep 10 14:14:45 2024 GMT
Subject: CN=4AF1CDEF117F9E93E7A5038A289D8850935C804E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2e:52:ad:85:d4:32:4c:43:cd:fb:68:50:b9:
e7:3d:23:1e:3d:a8:e2:f5:f4:cc:3e:8b:ec:72:1c:
3d:b4:af:ac:1a:43:2b:90:b1:3b:e0:f3:3c:a8:aa:
a9:df:6f:32:15:b4:4c:46:e1:6b:34:d4:54:6d:c7:
30:42:05:3a:a1:b8:ac:16:e7:ae:59:ec:cc:6f:d4:
18:34:ad:a8:fe:7d:6b:8f:29:cf:93:85:d7:ce:b9:
e9:96:b0:fa:f5:d2:23:43:57:9e:7b:95:f1:b3:37:
25:55:16:e4:7f:2a:df:9a:be:f4:3a:f1:3b:bc:72:
2d:31:f2:c5:c5:48:65:d1:e3:87:73:65:bd:d9:c1:
2b:55:8e:8c:ba:29:e1:27:ee:13:9c:e3:23:2d:78:
be:6f:43:51:4e:66:be:b4:f9:9a:4c:c8:42:7b:47:
02:0e:c7:af:24:a1:85:f0:a7:c1:4b:79:cc:77:36:
2f:8b:97:ae:10:68:5d:79:a6:f0:b8:46:ec:e7:df:
93:b0:58:45:a7:51:8e:4e:0e:fd:1b:8a:5c:05:38:
17:f9:25:17:24:9b:da:15:74:df:40:38:2a:38:f3:
51:80:bb:50:fe:33:2a:35:e8:60:72:1c:39:5e:6a:
ec:ad:a7:f4:d0:f8:36:54:b1:7f:4e:98:10:13:1e:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:F1:CD:EF:11:7F:9E:93:E7:A5:03:8A:28:9D:88:50:93:5C:80:4E
X509v3 Authority Key Identifier:
keyid:1A:9F:DA:07:97:66:26:D4:1E:7D:F6:DE:52:A2:B0:D9:6B:47:C5:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A9FDA07976626D41E7DF6DE52A2B0D96B47C57E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/0/323830343a333363633a3a2f33322d3332203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33cc::/32
Signature Algorithm: sha256WithRSAEncryption
42:6a:1a:eb:84:e5:09:0a:22:33:d4:3b:36:7f:9d:7f:02:76:
57:bf:c6:a6:dc:ff:f6:70:40:bf:cf:69:8e:81:1a:6a:67:b0:
56:38:2f:21:74:e9:bc:0c:4b:32:49:9e:08:47:c0:cb:45:2c:
cc:66:28:3a:4a:36:5d:af:9f:ed:6c:64:e0:99:31:b1:40:10:
a3:72:a2:9e:92:be:02:03:1d:6d:b9:d4:a6:69:c4:c6:97:e7:
b5:b4:12:00:f4:10:80:53:10:11:c1:cb:8f:90:56:75:9e:fa:
1b:d2:9d:aa:42:22:34:d6:8c:29:ad:36:23:40:5e:8c:0a:1b:
53:70:5a:cc:51:37:c5:96:c5:6b:43:c2:a8:e2:77:2e:5b:e3:
fd:f2:8c:0c:a9:4d:81:ec:77:9c:de:00:5f:f2:4f:59:6c:58:
ab:3b:6b:61:28:fa:d7:d2:2c:cd:8f:c5:39:3b:9b:96:40:aa:
0e:98:a5:4e:e5:97:ea:3a:4a:b5:87:07:a7:46:0e:4b:ff:18:
e6:57:77:4d:87:e8:af:ee:0d:6a:15:e0:00:2c:9c:79:ea:a7:
ae:d5:f3:35:65:36:fa:f3:26:e3:50:86:d3:1f:0e:eb:07:74:
fd:f5:84:d8:eb:94:c6:14:26:68:ab:b7:db:42:86:1e:6b:75:
8f:13:e7:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:27 2025 by rpki-client