Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3333203d3e20323637353038.roa
File: 323830343a343239303a3a2f33322d3333203d3e20323637353038.roa (raw, json)
Hash identifier: YW8PHkBEhi3yKPr8yFTx9l1LTMPEJdoDpv2tGB9k5BU=
Subject key identifier: 0C:FB:DB:09:B0:71:CA:95:99:D3:42:8A:0A:DE:4C:87:EC:2D:E2:3E
Certificate issuer: /CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Certificate serial: 5D7540FB52C998B1B05005C77E025933C3110AA8
Authority key identifier: 2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3333203d3e20323637353038.roa
Signing time: Sun 28 Jul 2024 19:53:38 +0000
ROA not before: Sun 28 Jul 2024 19:48:38 +0000
ROA not after: Sun 27 Jul 2025 19:53:38 +0000
asID: 267508
IP address blocks: 2804:4290::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:75:40:fb:52:c9:98:b1:b0:50:05:c7:7e:02:59:33:c3:11:0a:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3
Validity
Not Before: Jul 28 19:48:38 2024 GMT
Not After : Jul 27 19:53:38 2025 GMT
Subject: CN=0CFBDB09B071CA9599D3428A0ADE4C87EC2DE23E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:74:e6:6a:0d:d9:bc:ad:df:f9:c8:0e:20:
d7:d1:1c:de:37:f4:14:a0:6d:cb:41:75:b0:d5:22:
20:c6:54:88:75:b9:59:38:44:c3:a0:97:28:16:77:
80:67:f6:fe:ee:67:05:ee:fb:cf:ca:13:5f:4b:b9:
3d:e4:7f:8a:bb:d4:11:0a:bb:4b:e4:77:b8:46:69:
92:c6:58:0f:f2:8a:27:f2:d2:84:bc:97:3f:17:9a:
69:90:28:64:29:8f:30:2a:7c:6f:4d:68:83:3b:07:
27:53:b8:b3:50:f1:da:81:6c:5c:1b:66:8f:85:02:
6c:95:4a:d9:ed:d0:88:4e:34:df:f5:0b:eb:e7:9f:
fa:c8:e0:f3:00:7e:6c:df:63:81:fa:2c:00:80:b7:
3a:43:22:4b:8e:7b:1e:e8:1e:3b:22:3c:e2:1b:65:
74:4c:d8:8f:17:da:98:90:cb:80:d1:9f:30:1c:24:
30:c6:ac:b0:82:53:28:c8:a2:75:44:eb:65:f6:20:
53:66:c3:1b:2c:9d:5c:0f:ed:f3:3a:9a:5c:6d:d0:
86:3b:bc:82:e2:4b:67:4b:c9:56:36:e8:a9:cd:4c:
cb:b4:68:ca:73:64:53:23:62:bb:34:7c:2b:49:8d:
89:dc:6a:39:7c:67:ef:5f:b3:12:40:f0:84:16:ce:
f6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:FB:DB:09:B0:71:CA:95:99:D3:42:8A:0A:DE:4C:87:EC:2D:E2:3E
X509v3 Authority Key Identifier:
keyid:2D:D0:BF:AA:F0:E9:96:85:7B:7F:4B:08:92:C6:F3:78:A6:AF:9C:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2DD0BFAAF0E996857B7F4B0892C6F378A6AF9CE3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6CrV8L79nCgst2zav6rcbBftARp2tgdo3osqdAN82D7n/0/323830343a343239303a3a2f33322d3333203d3e20323637353038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4290::/32
Signature Algorithm: sha256WithRSAEncryption
a7:91:2f:0a:2d:30:9c:26:fb:94:63:70:e5:65:c8:a7:cd:29:
6b:c8:c1:c5:a2:7a:fc:41:82:ed:40:e5:10:6d:5e:ed:56:1d:
89:86:85:57:a1:99:45:e7:ba:55:a4:68:df:d3:3b:84:49:6d:
34:96:a5:fc:4c:ac:6b:1b:58:82:d1:a7:26:f8:54:b8:2d:4d:
c4:ce:c4:80:77:2f:26:6f:21:1a:25:ee:5a:da:ee:4f:99:3a:
fb:72:05:3d:71:f3:5b:2c:fc:83:7b:86:78:f8:90:c8:5b:f9:
b3:44:df:7e:75:b3:65:81:5b:6c:23:de:9e:80:7f:5c:b8:9e:
42:3f:d4:fe:1b:4b:b3:85:51:fd:c3:96:b6:de:61:ba:0c:64:
43:93:f3:b5:09:02:69:37:5c:de:26:be:41:d3:e7:83:0b:3f:
24:80:6f:7a:68:2e:be:02:b9:2b:29:93:b2:3c:2c:27:46:91:
60:01:1e:65:87:7b:ea:0a:7b:11:4c:86:a7:9a:c5:9a:3f:eb:
d9:67:33:32:a6:2c:e6:37:fb:1a:ed:05:df:d3:94:7c:09:8a:
54:9b:a6:1b:f5:d5:00:6f:ca:90:fe:f9:b5:7e:99:a3:75:d8:
d6:50:2c:d5:32:48:f2:d0:ec:74:e0:23:13:25:13:38:24:9a:
75:06:53:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:21:43 2025 by rpki-client