Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3335203d3e20323635343835.roa
File: 323830343a333464633a3a2f33322d3335203d3e20323635343835.roa (raw, json)
Hash identifier: wfK2qfZvISdwAOVsx5pMKtdVSMl8aPFC6/Wu5NQCROk=
Subject key identifier: B8:3C:BC:38:2E:73:E4:D7:FF:C0:0B:EA:57:2A:AC:9A:12:D2:74:9B
Certificate issuer: /CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
Certificate serial: 0A6C4C9D34D21288FEED1F28E67C6315957509D8
Authority key identifier: 9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3335203d3e20323635343835.roa
Signing time: Tue 05 Dec 2023 17:44:45 +0000
ROA not before: Tue 05 Dec 2023 17:39:45 +0000
ROA not after: Tue 03 Dec 2024 17:44:45 +0000
asID: 265485
IP address blocks: 2804:34dc::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:6c:4c:9d:34:d2:12:88:fe:ed:1f:28:e6:7c:63:15:95:75:09:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DAA10BB10976AC731B8667502BCFA1E45BD5CCE
Validity
Not Before: Dec 5 17:39:45 2023 GMT
Not After : Dec 3 17:44:45 2024 GMT
Subject: CN=B83CBC382E73E4D7FFC00BEA572AAC9A12D2749B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:29:c7:d9:ca:b0:ab:ed:41:65:88:a4:66:
c1:9e:bd:ad:6e:8c:8a:28:1e:1f:da:cd:ef:53:5b:
1d:20:b9:07:fd:cb:43:54:ed:d5:7a:d5:03:9e:44:
75:59:7d:7c:ad:59:7f:2d:74:83:85:73:36:9d:59:
5f:03:3a:c2:b9:67:c5:bb:e5:40:d4:0f:c1:25:35:
52:c6:26:0e:9c:11:30:24:48:78:f7:26:8d:25:75:
ac:8c:a4:1b:b9:99:72:4d:e2:70:69:4e:cb:fd:41:
a6:db:ab:d2:32:22:2a:ba:85:d0:57:b9:a7:56:c8:
43:3b:49:e1:ab:dd:cd:49:61:70:3a:06:a3:ab:68:
4c:cc:94:6c:32:cc:73:04:09:94:9b:a4:42:32:d5:
07:6b:6c:c7:db:b3:60:71:d1:e0:06:a7:7b:8b:bc:
f4:fa:11:55:d3:fa:95:a8:fd:1b:c3:67:89:ed:80:
f0:8c:2c:9b:c4:79:39:d6:23:97:15:f5:99:84:c9:
29:10:3a:f0:9d:17:99:af:91:45:cd:bb:f9:a6:1d:
69:51:60:20:73:13:bf:f3:a1:05:84:2b:48:f5:88:
09:28:83:69:32:34:c5:b4:ed:4f:e9:48:f5:05:60:
be:6f:a2:ff:2f:e9:ab:0e:07:14:25:b7:76:d6:25:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3C:BC:38:2E:73:E4:D7:FF:C0:0B:EA:57:2A:AC:9A:12:D2:74:9B
X509v3 Authority Key Identifier:
keyid:9D:AA:10:BB:10:97:6A:C7:31:B8:66:75:02:BC:FA:1E:45:BD:5C:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DAA10BB10976AC731B8667502BCFA1E45BD5CCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3335203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc::/32
Signature Algorithm: sha256WithRSAEncryption
19:98:1a:09:28:6c:0d:7b:96:39:f8:e2:08:1e:21:45:16:b3:
7d:b0:b6:22:40:2c:31:a3:28:19:ca:36:5e:f6:36:99:5c:ed:
3a:fe:10:e1:f5:d5:b6:dd:2e:dd:2c:3e:6b:7c:20:73:6f:ca:
c2:70:fb:3c:2a:e8:37:87:cd:a2:78:29:b2:eb:ce:02:c9:ea:
0d:ed:01:ec:d3:e3:3d:a7:c5:14:09:dd:97:26:0a:a5:8e:3d:
5a:e2:f6:4d:ef:a3:d9:21:e3:76:7e:38:2d:19:aa:1e:ad:0e:
4f:42:4b:a2:64:e4:64:d6:2d:8e:1f:b4:f4:4d:27:b9:97:da:
45:68:a3:89:77:62:ed:39:4e:44:aa:58:95:4d:ed:ca:99:26:
42:2b:58:69:9b:e2:8a:a4:25:05:19:68:f0:a7:a7:86:eb:57:
3a:02:69:5f:12:4d:a8:ea:dd:f7:9c:62:bb:4b:ab:1c:2c:78:
26:74:d8:51:a0:4f:10:a7:7f:a4:af:1b:3b:7d:7f:a0:be:e4:
e0:a5:20:44:a7:0d:70:e8:25:12:9e:6b:29:ca:5c:4e:9a:dc:
1e:0b:24:14:08:fd:63:d4:53:21:11:52:89:f6:75:51:b5:74:
a0:2a:18:70:f7:4c:48:69:08:e0:d2:ae:39:a5:e1:3d:ee:63:
aa:6f:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:34 2025 by rpki-client