Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
File: 323830343a386566303a3a2f33322d3430203d3e20323733343537.roa (raw, json)
Hash identifier: YAtqrVV+xg88hkgL0aYqNplCb5PxWZqzL/yIr1XmROg=
Subject key identifier: A7:C5:C9:DF:9E:63:CC:0D:8E:6A:D7:A6:6D:CE:0F:AA:E9:D4:C1:3C
Certificate issuer: /CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
Certificate serial: 5B4C41BFC740669C230A29C18A360F65904699DE
Authority key identifier: D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
Signing time: Tue 27 Feb 2024 14:07:31 +0000
ROA not before: Tue 27 Feb 2024 14:02:31 +0000
ROA not after: Tue 25 Feb 2025 14:07:31 +0000
asID: 273457
IP address blocks: 2804:8ef0::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:4c:41:bf:c7:40:66:9c:23:0a:29:c1:8a:36:0f:65:90:46:99:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D7C29F49CD5CA0C5E396E35EC2F1D3365A704923
Validity
Not Before: Feb 27 14:02:31 2024 GMT
Not After : Feb 25 14:07:31 2025 GMT
Subject: CN=A7C5C9DF9E63CC0D8E6AD7A66DCE0FAAE9D4C13C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8b:b8:af:75:c3:ef:e1:e6:64:66:24:5c:52:
8a:9e:b3:62:d2:37:53:2b:cf:1f:85:e7:52:d4:eb:
c2:be:ac:2d:f0:47:32:eb:03:35:49:42:e5:7c:43:
e0:c9:09:bf:8e:b0:31:e7:2f:1f:5c:5f:0a:d8:30:
23:91:c2:f5:9b:be:29:c5:39:91:e4:63:da:bd:c4:
be:e6:c3:47:68:53:03:fd:ab:ec:87:9f:76:35:f6:
75:92:28:36:07:a4:9d:0a:12:7a:5d:ea:51:a4:38:
a9:29:c0:a8:3c:bd:54:51:bb:3a:5c:9d:10:d3:8f:
ec:ff:ef:a5:27:9d:72:10:70:e8:96:a6:7a:fb:91:
41:b7:e6:be:a8:eb:08:92:ec:3f:d1:c3:4e:d7:98:
db:31:a0:90:58:08:9e:f8:29:e5:bc:3d:f7:cd:06:
f5:fe:95:7e:da:17:2e:ee:38:a0:b6:25:38:ca:84:
3a:12:0e:8a:43:c8:ea:e5:50:e9:92:d7:9b:47:fa:
ee:be:61:01:1a:22:b0:84:b0:f3:3b:7e:8d:ed:ec:
ae:86:a4:f9:5d:db:f3:b6:24:1b:ff:ea:29:25:e6:
39:66:42:cf:e1:e1:2f:0c:46:1b:f5:13:2b:14:77:
8d:74:5b:a7:92:43:3a:ae:c0:2d:8d:21:f2:91:26:
b1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C5:C9:DF:9E:63:CC:0D:8E:6A:D7:A6:6D:CE:0F:AA:E9:D4:C1:3C
X509v3 Authority Key Identifier:
keyid:D7:C2:9F:49:CD:5C:A0:C5:E3:96:E3:5E:C2:F1:D3:36:5A:70:49:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7C29F49CD5CA0C5E396E35EC2F1D3365A704923.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dPfuREPTBttMqQopTytpniKhE3LHdFszavDZMBc52Um/0/323830343a386566303a3a2f33322d3430203d3e20323733343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8ef0::/32
Signature Algorithm: sha256WithRSAEncryption
9a:9c:8d:40:4c:96:73:fe:28:93:29:0d:df:a8:be:bc:af:58:
4b:bb:53:5c:dc:a6:87:3d:a6:32:dd:ac:c1:53:d3:99:1a:7d:
84:ac:53:04:c9:af:19:1d:2f:5e:76:d5:f5:d4:3d:fb:09:91:
1b:1d:33:92:f3:29:58:a1:62:d5:69:d4:95:a6:fa:59:ea:ed:
90:6c:e8:ef:95:19:12:96:bf:e6:4e:37:fc:df:94:02:a8:ad:
ec:76:bd:22:4e:67:d2:c1:bc:a3:39:ac:ca:7b:9a:50:a1:69:
ec:9b:fd:6f:bc:f1:1e:1f:ba:2d:93:96:64:53:20:07:10:d6:
e3:2a:17:b1:db:b7:20:88:31:43:97:60:c7:4c:5e:1e:c1:32:
52:e8:4f:a0:16:88:53:e9:5b:37:02:b1:49:28:59:27:d8:c1:
07:dc:5c:33:8c:0f:da:36:cd:6a:56:36:e5:a2:09:59:2c:8e:
63:4a:48:fd:21:0c:9e:6b:b5:c5:08:a4:59:09:2f:07:8d:87:
90:78:d6:56:1f:d1:5e:2b:2f:9b:6b:e3:9d:a4:9f:fb:a2:59:
a0:4d:79:fe:67:00:d5:a3:87:89:4e:3e:0c:f1:d4:fd:f8:0a:
90:bf:6f:ef:0e:41:66:ef:8f:57:12:e1:d4:5c:cc:cf:5e:a2:
2b:18:ea:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:14 2025 by rpki-client