Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3335203d3e203532363031.roa
File: 323830343a333833633a3a2f33322d3335203d3e203532363031.roa (raw, json)
Hash identifier: UUj3U8s9/xKwuee+Juq8ZG0QEw+BDvpgD1jUsjYN2yo=
Subject key identifier: 29:3F:A8:C0:E7:C6:BA:C0:AF:D8:B3:B8:4B:72:EC:70:38:65:07:25
Certificate issuer: /CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Certificate serial: 325B38F334A7D25F9EDD36D42D98014D27B16AE5
Authority key identifier: 96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject info access: rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3335203d3e203532363031.roa
Signing time: Tue 03 Dec 2024 18:43:00 +0000
ROA not before: Tue 03 Dec 2024 18:38:00 +0000
ROA not after: Tue 02 Dec 2025 18:43:00 +0000
asID: 52601
IP address blocks: 2804:383c::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5b:38:f3:34:a7:d2:5f:9e:dd:36:d4:2d:98:01:4d:27:b1:6a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96F3E99149446CE908CDA1678FD9180CD4020D16
Validity
Not Before: Dec 3 18:38:00 2024 GMT
Not After : Dec 2 18:43:00 2025 GMT
Subject: CN=293FA8C0E7C6BAC0AFD8B3B84B72EC7038650725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d5:fd:bf:f1:61:57:84:3a:4e:bb:6e:ad:0f:
42:fa:2b:7b:64:a8:01:a1:44:b7:f4:3f:9c:b5:4b:
a1:6e:16:45:31:38:f9:18:5f:dc:78:5c:24:e0:da:
17:a7:e9:f2:d8:e0:e0:3f:46:cb:ba:3a:5a:7e:8f:
21:6f:36:b7:c2:c7:eb:90:48:62:66:19:4e:50:f8:
5f:3b:b5:40:45:9a:09:25:98:cb:e7:16:27:1f:8d:
c5:25:cf:8b:7a:56:78:ca:72:7c:bc:90:3f:8a:15:
69:43:59:54:59:8f:be:57:0f:5c:9c:e4:29:df:6f:
11:22:9e:d5:f0:ce:d6:ce:86:d7:d5:42:94:bb:86:
8c:2f:47:d3:a5:f0:3b:e6:f0:3c:24:1e:6c:08:84:
0d:ed:a1:86:cb:a7:7a:ae:45:b9:d5:e0:19:d5:98:
54:f9:a5:92:c0:90:98:52:1e:aa:c1:32:11:ff:b2:
fe:0c:b9:a1:26:11:6c:ce:37:c0:e5:85:89:96:1f:
04:7a:a9:45:76:4d:55:8e:ad:20:d9:63:c8:8e:45:
88:ff:8d:7a:4b:a9:57:74:82:a3:f0:96:90:8b:fb:
32:0c:2c:0f:d6:50:e7:c8:84:07:4c:10:b5:6e:f1:
72:26:22:f4:4d:d7:a1:06:dd:a3:04:6d:f7:62:c2:
63:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3F:A8:C0:E7:C6:BA:C0:AF:D8:B3:B8:4B:72:EC:70:38:65:07:25
X509v3 Authority Key Identifier:
keyid:96:F3:E9:91:49:44:6C:E9:08:CD:A1:67:8F:D9:18:0C:D4:02:0D:16
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/96F3E99149446CE908CDA1678FD9180CD4020D16.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/96F3E99149446CE908CDA1678FD9180CD4020D16.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/0/323830343a333833633a3a2f33322d3335203d3e203532363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:383c::/32
Signature Algorithm: sha256WithRSAEncryption
9f:5b:9d:ac:e3:1e:76:d5:a7:3f:16:c2:a1:0a:e5:d9:15:d5:
a9:60:06:3c:0f:bd:b8:7e:a1:3d:c8:5f:a5:d0:86:07:c9:8f:
90:ca:41:3c:a6:fe:6b:3d:b8:74:e9:a2:2e:b0:75:fb:3f:4e:
0a:1b:2d:5b:1b:3b:f9:16:33:21:74:2d:0d:31:cf:d0:ff:cf:
b0:2b:bd:15:bc:08:a1:cb:fa:5b:61:a8:7d:3f:9e:ed:fc:85:
cb:92:30:8b:77:be:c8:cb:f0:79:59:32:9d:7c:c2:a8:94:fb:
5f:93:7c:4b:21:9e:dd:12:2a:96:24:47:6e:3c:e3:94:c5:63:
9b:e2:1b:7f:f2:4c:81:9e:d3:12:65:ce:e5:5d:1a:8b:f0:21:
a4:fb:3c:21:f4:b1:b1:35:08:80:cb:62:85:5f:eb:64:f7:d2:
da:e8:2c:f9:d0:0c:54:9b:70:ee:50:a8:2c:96:02:d8:50:43:
e5:b6:53:c9:0b:ce:87:55:64:aa:3c:a8:12:37:6d:84:27:0f:
a8:ea:22:52:38:a9:56:67:8f:3b:a2:67:47:de:da:0c:d5:4f:
4c:be:5e:41:5e:ac:e7:bc:93:e7:0d:4b:aa:00:6c:fd:3e:15:
cf:6a:24:d6:d1:3f:42:69:ee:cf:05:6d:93:ab:3d:5a:7c:b9:
3f:b1:25:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:57:38 2025 by rpki-client