Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3438203d3e20323635343835.roa
File: 323830343a333464633a3a2f33322d3438203d3e20323635343835.roa (raw, json)
Hash identifier: yLtYtEOQNvOnUcI71uWhxYy6WS6ZCZW3uLT9GsdUBsk=
Subject key identifier: D1:EE:7A:27:1E:8E:90:66:A5:A4:B5:A1:2E:CF:C9:D2:88:77:42:08
Certificate issuer: /CN=EF531ED7D14F0D5A9816244417F263E1E521376E
Certificate serial: 05772D7DEE41074BC4E5458677F3AA1D18085F81
Authority key identifier: EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3438203d3e20323635343835.roa
Signing time: Mon 07 Feb 2022 12:09:34 +0000
ROA not before: Mon 07 Feb 2022 12:04:34 +0000
ROA not after: Mon 06 Feb 2023 12:09:34 +0000
asID: 265485
IP address blocks: 2804:34dc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:77:2d:7d:ee:41:07:4b:c4:e5:45:86:77:f3:aa:1d:18:08:5f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF531ED7D14F0D5A9816244417F263E1E521376E
Validity
Not Before: Feb 7 12:04:34 2022 GMT
Not After : Feb 6 12:09:34 2023 GMT
Subject: CN=D1EE7A271E8E9066A5A4B5A12ECFC9D288774208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ad:82:aa:19:af:1a:db:d9:e0:71:ff:4b:f9:
98:c9:5a:23:d1:7d:9d:d2:e3:33:1d:a7:28:fe:c2:
da:96:64:5f:13:a8:c8:2a:43:67:0a:eb:c9:f5:66:
22:45:1f:02:2f:32:ca:bf:17:80:1a:8f:4d:91:2b:
f2:ce:fb:96:dc:91:d7:9f:df:91:9b:7c:fa:5d:f7:
4b:73:ae:c0:d2:b6:30:6b:32:23:f2:1d:15:8c:da:
36:84:6c:e3:ab:bf:f9:c6:66:ef:04:c0:42:3c:c7:
d9:b3:f5:95:e6:34:53:2c:9f:3a:e5:79:0a:5b:a0:
e1:75:56:0b:00:36:cf:5b:7d:cd:d9:38:71:70:97:
06:19:ca:fd:68:90:59:c9:95:9d:cf:d2:9d:b8:e0:
60:ed:bd:68:c8:b7:57:b3:ec:9d:4c:bc:00:f4:db:
1d:c8:10:f7:40:f0:57:cc:9b:57:19:69:2b:69:af:
28:4c:a2:ed:fb:6e:fe:21:be:96:11:65:b4:b4:2a:
1d:66:9b:7a:af:0c:51:0f:a2:7f:ed:33:ee:d9:cf:
d2:69:4e:0f:23:d6:eb:fd:41:4e:7e:eb:c2:ed:9c:
aa:0a:de:23:2c:7c:37:72:bb:17:c1:01:06:a6:bb:
5d:45:54:5f:03:47:cb:99:9a:ab:a0:4b:ea:4c:63:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:EE:7A:27:1E:8E:90:66:A5:A4:B5:A1:2E:CF:C9:D2:88:77:42:08
X509v3 Authority Key Identifier:
keyid:EF:53:1E:D7:D1:4F:0D:5A:98:16:24:44:17:F2:63:E1:E5:21:37:6E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/EF531ED7D14F0D5A9816244417F263E1E521376E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EF531ED7D14F0D5A9816244417F263E1E521376E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5dktwpt3QEXn3oCWzptfJ1LzPKRHmKnKnkorK17yYjj/0/323830343a333464633a3a2f33322d3438203d3e20323635343835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34dc::/32
Signature Algorithm: sha256WithRSAEncryption
1e:90:23:58:86:3a:e4:55:e1:ee:b0:01:67:d2:8c:11:c4:e5:
7e:2c:ee:31:e7:43:ca:e2:94:cb:0c:63:64:2b:d5:28:55:3c:
1a:50:84:92:be:2d:d7:7f:8c:fa:fb:46:7e:02:0d:59:a8:37:
21:0c:c3:37:d4:dc:cc:5b:fa:55:06:d1:28:e1:46:6c:0b:d4:
11:7b:f4:59:92:73:a1:9a:92:87:26:c8:89:5e:05:a6:d3:3b:
f9:ae:99:cb:81:87:f1:cb:8a:3f:c5:f7:ab:4c:0f:ee:66:51:
e7:9c:f3:b1:46:a4:0c:cb:52:d7:b7:f6:ba:8c:30:9e:a8:1b:
07:f9:09:db:80:9f:b2:b3:19:af:0e:86:d0:ee:7c:c2:70:5f:
ff:e7:7c:ee:29:1d:88:cf:c0:37:9e:9f:4a:74:87:f4:86:90:
5c:87:cc:c6:d8:14:da:42:61:df:64:e4:f4:1d:7e:1b:8f:b4:
10:de:12:66:65:b1:4e:96:d5:a9:1d:34:7b:a3:ba:4e:68:91:
11:bd:7b:ff:f1:eb:d4:b3:fb:28:51:b4:1d:74:62:97:04:34:
3d:dd:98:97:e8:b9:bc:20:80:1e:67:fa:59:48:c1:51:d0:17:
66:b1:3f:10:26:a8:92:eb:53:f9:de:0c:aa:c6:8b:d6:b0:4f:
ee:8c:4b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:14 2025 by rpki-client