Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d3332203d3e20323731333537.roa
File: 323830343a376133633a3a2f33322d3332203d3e20323731333537.roa (raw, json)
Hash identifier: B10XYhdYZBYxWoshaNJnRtu5fkoSz2wD+9scQkRHsx0=
Subject key identifier: 78:4C:19:B3:D2:C2:35:5D:90:E2:4B:D1:25:DD:68:6E:ED:F8:C8:04
Certificate issuer: /CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Certificate serial: 0C1B3E7F35217DEF6055B63BF039FF50A0A3BF0C
Authority key identifier: 55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d3332203d3e20323731333537.roa
Signing time: Tue 24 Oct 2023 14:35:29 +0000
ROA not before: Tue 24 Oct 2023 14:30:29 +0000
ROA not after: Tue 22 Oct 2024 14:35:29 +0000
asID: 271357
IP address blocks: 2804:7a3c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1b:3e:7f:35:21:7d:ef:60:55:b6:3b:f0:39:ff:50:a0:a3:bf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A
Validity
Not Before: Oct 24 14:30:29 2023 GMT
Not After : Oct 22 14:35:29 2024 GMT
Subject: CN=784C19B3D2C2355D90E24BD125DD686EEDF8C804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:cd:d8:9d:11:4f:37:28:ca:f1:22:d5:4a:c8:
87:b5:b1:49:51:4e:63:7a:d0:31:f9:e0:e4:b1:bf:
da:ba:e6:a8:a0:f7:aa:ef:3e:ac:1c:df:70:70:b4:
5d:78:41:2c:c2:28:13:8b:a5:b8:e5:52:66:38:90:
8b:b7:04:a8:5d:a4:42:fd:3c:13:f9:42:e9:00:01:
23:b7:5f:d6:96:7a:1e:6a:4a:d3:dd:41:28:52:f1:
47:d8:ed:82:d5:0e:a7:e4:2e:61:dc:48:56:99:17:
01:b1:97:2d:a7:9d:57:b6:cd:84:22:cc:f2:8f:3f:
c1:99:a4:f7:e0:9c:e6:e9:97:72:a8:ad:79:7b:8d:
7a:f8:a5:ae:fd:a9:b8:be:65:20:43:47:40:68:f3:
ff:9f:60:9c:89:9f:a8:9a:4d:7e:55:67:09:fe:ca:
39:15:35:d5:e9:f5:6b:81:b3:07:63:24:61:c5:4d:
3a:d3:82:0e:4c:b3:69:3a:0b:c9:6e:92:b9:9b:d0:
14:c7:f1:f1:1d:0c:84:95:cd:ef:93:87:ad:1f:fc:
8d:47:32:a2:d1:75:39:47:9d:bb:5a:a5:f7:f0:04:
02:91:cd:5f:2e:54:58:66:fd:8a:d3:9f:33:b8:0f:
f9:84:6e:21:2e:49:75:40:4e:94:ef:a6:29:18:8b:
f3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:4C:19:B3:D2:C2:35:5D:90:E2:4B:D1:25:DD:68:6E:ED:F8:C8:04
X509v3 Authority Key Identifier:
keyid:55:7B:9A:FE:2B:83:AC:C4:BF:FA:14:90:30:06:7D:9D:FC:5A:E3:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/557B9AFE2B83ACC4BFFA149030067D9DFC5AE31A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5U1AcRxqpmVZjRg3vgSUw6eiWJJaNt16evESvKD9ebSQ/0/323830343a376133633a3a2f33322d3332203d3e20323731333537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a3c::/32
Signature Algorithm: sha256WithRSAEncryption
59:c2:ea:df:90:29:37:64:c7:bf:b5:8b:8d:17:7b:fb:4f:4c:
a6:2e:0a:32:db:e5:8a:02:40:90:48:47:ec:a6:ec:39:01:2b:
a2:55:fc:e3:31:0a:e8:2d:b2:e7:9f:8a:bd:5c:a8:bd:45:a9:
cc:67:79:69:0f:cc:7f:27:1e:98:da:ef:fe:53:e7:80:67:81:
b7:e2:ad:50:fb:2f:b0:05:e5:b5:85:00:94:93:33:b1:8a:75:
cb:43:43:8c:f0:32:23:cb:e6:6e:4e:b5:eb:ee:9c:94:93:d5:
e2:84:5e:10:ec:f4:da:88:c1:62:e0:bc:ab:97:2a:45:f2:9a:
a6:ec:a2:e0:88:22:af:f2:bf:4e:bb:27:e2:3a:6e:d5:d1:54:
48:c6:34:5f:bc:e7:04:78:93:d9:b8:11:99:db:95:7c:05:6b:
17:87:60:1e:1c:10:0c:fa:6c:b9:94:ce:1a:d7:28:e3:ff:d3:
9b:a3:69:4d:97:d7:c8:b7:fb:30:07:21:c2:d1:dd:ce:d9:e0:
cb:50:be:b1:d0:d9:45:93:dc:30:b4:4a:d6:41:da:48:6c:78:
31:63:29:95:8e:37:8e:05:40:41:f0:30:39:e4:2e:b9:f6:d4:
70:2f:f5:93:b6:54:dd:c9:cf:fb:dd:40:b7:75:c4:10:4f:9e:
8a:70:05:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:19 2025 by rpki-client