Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
File: 323830343a333464633a3a2f33322d3430203d3e20323635343835.roa (raw, json)
Hash identifier: K1lDtONvvGwmeeNNcIaosGKV6OqRzfkm6LTAC4fiulo=
Subject key identifier: D0:DE:CF:8A:69:F6:6F:D2:7E:9A:A3:86:9D:DB:A4:0B:AD:5F:76:6B
Certificate issuer: /CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Certificate serial: 52E9BFB4A8FF45502015DAA2BB0141E5CFE1D098
Authority key identifier: DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
Signing time: Tue 12 Mar 2024 14:02:32 +0000
ROA not before: Tue 12 Mar 2024 13:57:32 +0000
ROA not after: Tue 11 Mar 2025 14:02:32 +0000
asID: 265485
IP address blocks: 2804:34dc::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e9:bf:b4:a8:ff:45:50:20:15:da:a2:bb:01:41:e5:cf:e1:d0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB4775FF1387265B8F4B430B70351316A66B6D44
Validity
Not Before: Mar 12 13:57:32 2024 GMT
Not After : Mar 11 14:02:32 2025 GMT
Subject: CN=D0DECF8A69F66FD27E9AA3869DDBA40BAD5F766B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:63:2c:7e:89:46:fc:7a:82:c8:a1:59:32:
cd:96:6a:c2:71:7c:57:40:1f:32:8d:a1:13:4a:a6:
9a:a2:90:2f:34:e8:a0:47:92:47:73:7f:ee:ea:4a:
31:19:dc:e7:5b:21:08:75:08:04:6b:a2:5e:dd:40:
13:84:e4:37:62:d4:0c:87:f3:61:b9:78:5d:35:e4:
9d:7c:ea:76:d4:02:02:99:51:59:5a:c7:4e:c1:7c:
89:05:59:35:d9:cb:29:fd:74:74:ed:c5:ce:ec:bb:
51:c2:a7:8b:77:e3:b9:a4:e4:b1:27:82:ac:7b:2b:
b6:3a:52:0a:a5:10:02:21:87:d5:b9:86:2e:28:4f:
82:cd:04:61:92:dc:3e:f5:13:81:9c:31:34:13:e2:
e1:1f:cf:90:dd:1d:7c:eb:54:0d:4b:47:4b:48:de:
59:ba:dd:1b:9e:09:cf:67:6c:b5:79:2b:2c:42:72:
2e:b2:0e:4a:fa:a9:4f:07:ff:fc:7a:8c:fc:cf:0a:
6f:b1:bd:f1:94:e0:6a:af:f3:7e:e2:43:4a:50:4b:
05:94:74:89:bf:bc:ec:f1:23:72:88:23:84:c1:32:
74:8b:04:61:08:88:f6:e3:8b:62:0c:0a:53:dc:2f:
1e:75:e7:46:e9:65:22:38:e9:b1:51:ef:5a:85:89:
2c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DE:CF:8A:69:F6:6F:D2:7E:9A:A3:86:9D:DB:A4:0B:AD:5F:76:6B
X509v3 Authority Key Identifier:
keyid:DB:47:75:FF:13:87:26:5B:8F:4B:43:0B:70:35:13:16:A6:6B:6D:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/DB4775FF1387265B8F4B430B70351316A66B6D44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB4775FF1387265B8F4B430B70351316A66B6D44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3430203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc::/32
Signature Algorithm: sha256WithRSAEncryption
d6:87:01:44:a6:9d:5a:92:7e:4e:1e:44:8f:f9:f3:84:c6:c1:
3e:73:ce:9a:ba:86:fb:e2:13:d5:80:cd:85:86:9f:fc:e3:32:
e6:c6:d9:3a:5a:c9:b6:6a:ab:6d:d2:05:69:f8:22:67:a7:9b:
86:f0:59:83:80:2a:3b:8d:29:d5:64:68:5a:3c:86:15:99:e8:
64:7d:a3:d2:0b:aa:05:0a:4e:d5:54:ca:52:f7:2b:fc:af:c3:
c9:a0:c1:3c:a1:d8:5a:df:f7:f4:ff:d5:29:43:04:af:fa:e5:
c1:38:c4:60:da:d0:f7:c7:29:33:a4:b5:f5:68:2f:06:98:11:
f1:e5:ea:7e:72:e4:c9:87:cb:52:9b:b4:f0:e8:1d:74:34:19:
ac:a5:bd:d9:46:3e:10:e1:d3:20:bc:9e:8a:0f:df:2a:8e:f4:
54:f1:8d:26:f2:5b:5f:aa:6d:9b:c9:0d:17:b5:d1:d1:0a:90:
a7:b1:2d:48:17:bb:29:90:2a:13:93:38:c4:ee:ee:6d:39:21:
d3:14:8f:cc:43:27:51:2d:d4:75:71:3f:ac:94:46:03:7a:48:
ac:e6:9b:5e:37:33:32:92:ba:27:bb:19:9b:71:2f:6e:a8:36:
01:7c:4e:93:6c:ff:b4:03:37:34:60:20:0a:34:66:e5:fc:7a:
08:38:5d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:42 2025 by rpki-client