Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d3430203d3e203238363536.roa
File: 323830343a333363633a3a2f33322d3430203d3e203238363536.roa (raw, json)
Hash identifier: ookEq7GpAB5aZ/4Q14MW5WUklpx8TTwuWMNS5bOjhw4=
Subject key identifier: 7C:D4:CA:D8:48:21:E9:E7:90:91:B2:0C:97:87:DC:EA:95:E8:DE:F1
Certificate issuer: /CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Certificate serial: 7FCF0AA5E15C1B52D1C2589E8F373531FD62C6FF
Authority key identifier: 3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d3430203d3e203238363536.roa
Signing time: Mon 27 Mar 2023 15:13:57 +0000
ROA not before: Mon 27 Mar 2023 15:08:57 +0000
ROA not after: Mon 25 Mar 2024 15:13:57 +0000
asID: 28656
IP address blocks: 2804:33cc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:cf:0a:a5:e1:5c:1b:52:d1:c2:58:9e:8f:37:35:31:fd:62:c6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA
Validity
Not Before: Mar 27 15:08:57 2023 GMT
Not After : Mar 25 15:13:57 2024 GMT
Subject: CN=7CD4CAD84821E9E79091B20C9787DCEA95E8DEF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:db:e8:33:49:11:69:4b:c9:54:a7:19:ae:0f:
df:f6:b5:69:2f:4f:eb:d1:4e:27:60:db:79:b9:bb:
ac:79:f2:e0:4d:3d:8f:88:f0:b9:1d:10:43:fc:ec:
1f:c3:41:4a:10:fa:b2:72:54:6f:35:e5:ed:4d:57:
f1:01:e4:84:75:db:22:4c:07:f8:5f:17:d7:d7:e7:
33:8d:bc:5e:b2:cb:92:76:3d:e4:e9:63:33:f6:cb:
72:09:76:5e:9d:b1:25:10:8a:ce:51:39:ae:9e:80:
8b:be:88:7f:06:17:33:1d:a7:71:85:d3:29:47:64:
0f:af:f8:f9:e9:af:ec:80:ab:fb:a2:4b:d4:cd:9e:
da:71:04:87:a8:17:8b:5a:4c:01:29:4d:be:f0:e4:
50:be:e6:6b:6c:93:54:89:93:47:1d:bd:ed:87:6e:
cf:5c:97:4e:60:1a:be:ec:b9:34:1c:a3:8f:db:eb:
94:b1:6e:5f:a0:3e:80:98:8f:2f:d0:bd:d7:20:ac:
4c:0e:08:d5:c3:ff:16:c0:ad:b9:e8:41:5f:b6:d9:
6c:c6:6f:f1:a4:ac:27:df:63:99:bb:2a:c5:4a:06:
57:e5:cd:5d:4e:cf:72:45:16:4b:91:6c:20:eb:04:
6e:65:26:11:04:1b:e1:c1:e2:cf:e3:b7:2c:54:f6:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:CA:D8:48:21:E9:E7:90:91:B2:0C:97:87:DC:EA:95:E8:DE:F1
X509v3 Authority Key Identifier:
keyid:3C:FE:E7:CF:39:A3:16:A9:0F:BA:59:02:55:22:0C:BC:EB:5B:BE:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3CFEE7CF39A316A90FBA590255220CBCEB5BBEAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5DStw3JiYMo8QnDAcZZE5UhgCZP5dSuSxQGJtx7qFzgd/1/323830343a333363633a3a2f33322d3430203d3e203238363536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33cc::/32
Signature Algorithm: sha256WithRSAEncryption
a1:00:4c:0b:7e:60:72:b5:ea:b5:6f:0d:8b:a0:f9:eb:96:cb:
c0:56:69:4e:ec:df:10:96:ec:f8:dd:44:24:9c:6f:83:2c:11:
89:52:88:bc:c1:10:5c:90:5f:db:75:72:61:b4:4a:44:ad:5b:
eb:d0:ae:29:cb:dd:5c:75:28:69:ea:2e:d4:5c:61:b6:bd:42:
dc:3f:5d:14:5a:b4:c1:10:83:8d:c1:61:87:5c:d5:22:18:45:
e7:d6:0e:ae:da:8a:51:8f:bc:25:b2:3c:78:84:6b:a8:67:d0:
72:ff:b0:d9:bc:13:d6:cb:11:09:07:12:72:9b:ae:99:fb:6a:
4d:f7:7b:83:44:91:cb:92:46:43:05:53:e5:a6:7b:83:df:21:
8f:54:f9:8e:25:d4:ee:c3:a2:42:f7:89:fa:94:41:25:76:7c:
4b:8a:15:67:72:86:b6:54:2c:0a:5e:6b:e4:8c:53:44:8b:22:
71:39:ab:d4:c1:36:55:fd:26:e0:de:e2:d9:a6:12:81:66:ba:
c7:19:c7:82:95:47:54:4f:7e:cb:1b:d5:d2:c9:0d:cd:28:45:
1e:fb:3e:51:ce:8d:91:3c:f4:11:80:f8:f9:08:6f:34:c7:aa:
c5:fb:fc:15:3d:50:58:99:ed:2e:1a:44:fe:0d:92:b1:55:02:
97:fa:e4:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:35:01 2025 by rpki-client