Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
File: 323830343a376537383a3a2f33322d313238203d3e20323731363236.roa (raw, json)
Hash identifier: q1nojoG60utUp2toXkFUEnWcRIYwF6LBDWY2Fm44VbU=
Subject key identifier: 0F:D7:CA:94:FE:04:92:DB:50:C9:ED:34:24:F2:82:01:BC:B9:23:F9
Certificate issuer: /CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
Certificate serial: 1930F00FEC1D8C4BC0D17C024511292C68D0FD77
Authority key identifier: AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
Signing time: Thu 22 Feb 2024 16:28:23 +0000
ROA not before: Thu 22 Feb 2024 16:23:23 +0000
ROA not after: Thu 20 Feb 2025 16:28:23 +0000
asID: 271626
IP address blocks: 2804:7e78::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:30:f0:0f:ec:1d:8c:4b:c0:d1:7c:02:45:11:29:2c:68:d0:fd:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AD5387D9495868D8BE3A9449C0A4182442615CAA
Validity
Not Before: Feb 22 16:23:23 2024 GMT
Not After : Feb 20 16:28:23 2025 GMT
Subject: CN=0FD7CA94FE0492DB50C9ED3424F28201BCB923F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:9b:17:2b:95:0a:bd:73:19:fb:97:c6:35:
da:d9:ea:72:63:af:96:49:55:0e:db:82:10:da:6a:
db:47:db:1a:32:95:f7:aa:40:f2:39:8a:0b:c2:6a:
5b:4d:4b:1d:ba:0c:3c:32:0d:8b:eb:5f:72:aa:e0:
c5:41:d3:48:b0:6a:26:d4:de:ab:90:9c:dd:14:13:
b3:f0:54:a0:1f:61:91:fb:f0:74:e2:59:da:7d:2d:
de:4d:26:c4:89:9b:54:6e:f8:4a:0e:8b:c4:60:12:
a3:a6:c6:b8:58:cc:14:3c:63:59:9b:e9:2c:26:c4:
30:80:ee:7b:c7:28:bf:8d:47:89:c2:1c:18:5c:e9:
6f:14:a7:e7:54:c7:d2:db:b5:a1:71:4e:e6:aa:c8:
35:c0:1f:7b:e7:d2:7a:5e:37:7d:07:12:4f:45:50:
b2:9e:82:ba:dd:76:59:42:f3:73:f6:49:ac:a5:91:
11:88:d2:f4:1c:30:7a:e9:71:c4:be:3f:25:1f:ca:
1e:ea:5a:e2:c6:1d:d3:0e:b6:bc:30:18:6d:1c:33:
47:79:c0:2d:e3:20:55:ee:e7:14:35:9e:00:28:1e:
ab:cf:14:7e:d9:ce:78:9d:8a:51:de:4d:cc:cf:f0:
f5:84:44:ca:97:7e:e8:48:25:96:39:4c:6a:45:88:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:D7:CA:94:FE:04:92:DB:50:C9:ED:34:24:F2:82:01:BC:B9:23:F9
X509v3 Authority Key Identifier:
keyid:AD:53:87:D9:49:58:68:D8:BE:3A:94:49:C0:A4:18:24:42:61:5C:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD5387D9495868D8BE3A9449C0A4182442615CAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a3a2f33322d313238203d3e20323731363236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7e78::/32
Signature Algorithm: sha256WithRSAEncryption
74:d5:f2:88:a1:09:2f:08:74:65:c4:ef:98:fd:61:0d:62:a6:
d6:cd:d5:f4:7b:ef:00:41:88:88:41:81:64:6d:53:88:b4:0a:
b9:65:1a:a5:40:03:5c:05:e2:27:f9:d1:fb:32:10:c1:5f:36:
be:a4:d6:a0:42:24:77:f7:ec:cc:26:93:81:ed:d6:61:cb:ee:
41:1c:c7:8b:db:1c:6b:12:76:6a:7c:f6:01:ec:1e:71:58:bd:
45:5b:92:20:d0:6e:90:9d:6f:45:e5:f1:4c:85:ce:d4:a8:ce:
37:60:47:e0:26:41:bf:4c:2b:3e:56:d9:b7:9f:06:0f:37:4d:
43:50:b1:22:6b:e7:5c:cd:7e:07:f4:23:68:88:d7:ae:d4:1a:
e3:31:e7:fd:92:03:9a:8b:26:30:29:4d:28:d3:db:20:23:89:
0b:d8:bf:18:d6:4d:35:5a:98:98:fa:ff:34:d0:8b:56:be:54:
de:43:13:42:57:ab:7a:40:18:1f:5e:ec:f0:f1:88:88:22:c1:
57:2f:13:a7:45:2d:90:1d:42:7e:f9:0d:a0:5b:cf:8a:7a:57:
d8:51:8e:2d:0a:25:17:f0:3b:c7:1e:80:66:2c:1d:64:0e:a2:
50:e9:85:78:fd:89:79:72:17:31:30:a8:9d:e5:bb:1d:f0:d5:
70:f2:31:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:30 2025 by rpki-client