Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/323830343a343466303a3a2f33322d3438203d3e20323637363632.roa
File: 323830343a343466303a3a2f33322d3438203d3e20323637363632.roa (raw, json)
Hash identifier: iUwraubuWWitmd/gtiED7N74gd+xuY33ybcpAD7XsT8=
Subject key identifier: 91:F5:57:DF:17:D5:99:6B:1E:47:1F:76:01:18:1B:5D:EF:1A:88:B2
Certificate issuer: /CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
Certificate serial: 7F0887D238AE418D3085B3BE418AA12DA6D17F8F
Authority key identifier: 7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/323830343a343466303a3a2f33322d3438203d3e20323637363632.roa
Signing time: Mon 17 Jul 2023 14:30:08 +0000
ROA not before: Mon 17 Jul 2023 14:25:08 +0000
ROA not after: Mon 15 Jul 2024 14:30:08 +0000
asID: 267662
IP address blocks: 2804:44f0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:08:87:d2:38:ae:41:8d:30:85:b3:be:41:8a:a1:2d:a6:d1:7f:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7AAFCFB9DE7462BB49F0748B8300043D3B895DCA
Validity
Not Before: Jul 17 14:25:08 2023 GMT
Not After : Jul 15 14:30:08 2024 GMT
Subject: CN=91F557DF17D5996B1E471F7601181B5DEF1A88B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:21:62:bb:e8:a4:6f:99:34:0e:f5:a7:26:
52:19:ec:1f:52:17:4d:c0:c4:6f:db:b8:c0:d3:39:
63:21:7a:05:b3:bb:a1:5d:8e:21:6b:e5:2e:be:87:
44:cd:3d:89:bb:e2:a1:67:b8:68:f8:22:d0:fd:f6:
ec:23:88:b1:ff:dd:46:74:65:d6:f1:40:ed:93:1b:
76:05:07:13:2b:14:54:a7:8c:1f:61:93:b9:0a:ec:
a7:40:ee:64:49:a0:1c:ee:99:52:f6:6c:14:18:e8:
81:58:88:c5:a4:ea:4a:49:a4:c5:80:a1:3a:2b:7d:
aa:37:45:7e:de:69:83:a2:21:ca:f7:8e:a2:fe:c6:
12:fe:78:69:65:81:ee:08:cf:fb:0a:44:39:6f:b8:
26:d6:a1:f2:68:de:fd:ef:1c:37:c7:d4:d6:7e:76:
6d:52:cb:32:ba:a1:1c:2f:21:1e:6d:86:4b:ef:de:
93:c9:0c:6a:b4:39:ad:be:e5:5f:ff:dd:fa:42:81:
50:8a:9a:80:b4:8b:b7:01:14:09:3a:21:33:e3:71:
e5:af:07:48:bb:d8:b3:4c:68:8a:66:e2:b4:3a:12:
9d:56:ff:1f:f8:25:0c:f6:8a:39:59:9e:2e:e0:58:
05:6b:09:1f:26:64:cf:96:a2:37:55:97:c0:ae:ce:
65:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F5:57:DF:17:D5:99:6B:1E:47:1F:76:01:18:1B:5D:EF:1A:88:B2
X509v3 Authority Key Identifier:
keyid:7A:AF:CF:B9:DE:74:62:BB:49:F0:74:8B:83:00:04:3D:3B:89:5D:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7AAFCFB9DE7462BB49F0748B8300043D3B895DCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5MVgeL9hjjMMubBa1WYTTFXoF63ZxBGK42YRSXanLUoM/0/323830343a343466303a3a2f33322d3438203d3e20323637363632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:44f0::/32
Signature Algorithm: sha256WithRSAEncryption
30:78:f5:5e:86:e3:cb:84:8d:54:dc:a4:90:47:ae:8b:f0:55:
53:66:34:de:44:d2:16:1f:7c:8d:73:f7:9b:d7:23:cd:12:65:
68:45:0c:11:e7:34:de:2f:73:ca:85:50:61:45:e0:9a:4f:d6:
ea:96:8a:36:c2:53:3a:b6:08:e2:ca:80:c0:ad:9e:95:eb:1f:
a6:68:64:c0:a2:38:b9:60:74:cb:51:41:ce:1e:85:0d:c1:2d:
73:26:48:54:a8:85:9a:fc:29:d8:f7:39:e6:d3:9c:52:15:c7:
4f:9b:83:4b:28:96:41:63:e8:d3:93:97:23:39:d6:43:ba:c5:
7d:a2:03:10:b5:95:fb:47:8d:58:fd:46:67:d3:e9:47:96:4e:
d5:87:58:77:a9:12:f8:98:a7:e9:d0:48:23:c1:fa:f3:e2:29:
1d:5a:77:ee:c2:23:45:f8:d4:7b:43:f4:ca:db:db:b2:ce:5b:
3c:54:83:e6:9c:1c:5c:51:fb:ff:a7:fc:04:36:b1:b2:6c:ec:
97:f2:3e:f9:ce:b6:64:3b:f0:48:db:61:1d:1a:0c:07:b9:b9:
9d:ac:e7:da:df:2c:44:00:c1:ad:8a:8c:0a:94:cb:53:a1:94:
c9:62:07:47:60:a7:a6:5b:cc:ff:52:28:78:2b:38:ab:2a:d0:
65:93:2c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:10 2025 by rpki-client