Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a633030303a3a2f33342d3334203d3e20323638383738.roa
File: 323830343a356266303a633030303a3a2f33342d3334203d3e20323638383738.roa (raw, json)
Hash identifier: UexbVYrkDLe5th8alRxB8oEstu21gBlvTTfMbVLgm9c=
Subject key identifier: 83:35:53:77:BE:16:75:8F:6F:99:62:44:73:A5:91:E7:B7:E0:3B:34
Certificate issuer: /CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Certificate serial: 4294423E07CDCA372E076BF2ADE22D07DC8D64D9
Authority key identifier: DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a633030303a3a2f33342d3334203d3e20323638383738.roa
Signing time: Tue 12 Nov 2024 19:10:07 +0000
ROA not before: Tue 12 Nov 2024 19:05:07 +0000
ROA not after: Tue 11 Nov 2025 19:10:07 +0000
asID: 268878
IP address blocks: 2804:5bf0:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:94:42:3e:07:cd:ca:37:2e:07:6b:f2:ad:e2:2d:07:dc:8d:64:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC42DA8F09130640B6DE00AA84DFB10862A2F59
Validity
Not Before: Nov 12 19:05:07 2024 GMT
Not After : Nov 11 19:10:07 2025 GMT
Subject: CN=83355377BE16758F6F99624473A591E7B7E03B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:cd:0c:59:81:90:49:4d:a9:d1:32:1d:9c:73:
ad:5c:55:51:79:85:87:7a:8c:38:c6:32:4c:4c:7b:
82:88:f5:34:93:1c:41:2d:cf:fa:c0:be:5f:25:dd:
19:73:ca:85:b6:19:f8:77:f4:d7:2f:81:61:27:77:
8e:4c:98:01:f3:18:e0:1f:65:4d:fe:39:75:4c:a0:
7b:c7:18:14:7b:ef:1f:6a:62:a7:fe:38:2d:f7:0e:
a6:29:ae:66:9a:d3:e3:f7:28:07:34:f6:0f:9d:ae:
95:66:6a:17:8e:f1:a4:0e:4c:1a:02:94:d8:82:f7:
ce:85:79:e2:35:fa:90:3b:9f:8e:0f:a0:3f:cd:2f:
c6:1f:0e:b1:e1:02:37:5c:9f:8a:0e:c3:24:1d:01:
65:75:a6:cc:de:29:94:9e:e1:b8:c1:bc:86:58:0d:
9b:9c:25:1b:dd:69:b2:bb:bd:28:c2:bf:d8:ef:98:
3d:85:9e:c7:cb:26:3f:ab:22:bd:31:ff:1b:ae:0a:
c8:ec:be:02:8d:8f:9b:12:d9:fe:cc:64:bc:08:67:
3c:d2:f4:29:94:e7:75:73:70:28:cb:84:bd:60:1a:
43:8c:ca:47:69:17:35:c9:4f:96:5c:cf:a1:20:d0:
94:28:51:14:64:51:3a:65:58:62:5a:16:aa:00:14:
44:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:35:53:77:BE:16:75:8F:6F:99:62:44:73:A5:91:E7:B7:E0:3B:34
X509v3 Authority Key Identifier:
keyid:DB:C4:2D:A8:F0:91:30:64:0B:6D:E0:0A:A8:4D:FB:10:86:2A:2F:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBC42DA8F09130640B6DE00AA84DFB10862A2F59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/79K4idmLm4ees52PwYMAJQKWXbcVQT85693ikRyzskbo/0/323830343a356266303a633030303a3a2f33342d3334203d3e20323638383738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5bf0:c000::/34
Signature Algorithm: sha256WithRSAEncryption
03:a5:67:93:8e:b7:03:c4:ca:e6:9c:8f:b9:4f:fa:80:c6:20:
77:9f:bc:40:95:bc:cb:8b:79:90:94:49:7f:41:30:a1:74:3c:
f0:e9:be:7f:d4:3a:38:35:0e:ed:80:9d:a1:76:a7:cb:1f:70:
7d:49:ad:c7:e2:00:78:9a:6f:db:2a:d3:a7:c4:34:f7:81:a1:
ca:36:af:2f:01:f4:2b:cb:fd:5a:6d:ab:e6:b8:21:de:6e:1b:
55:a8:f1:a5:4b:69:af:4f:13:06:49:3c:21:94:16:75:48:bb:
58:39:75:24:8c:57:2e:2f:d9:f7:f6:10:3f:0e:5f:ce:c2:96:
78:2d:e6:0d:7a:23:78:55:da:f7:8f:9b:3c:9a:1a:f3:d1:0b:
9a:e6:5d:0c:f6:70:cd:3a:47:c0:d0:11:8b:f6:4c:15:a8:a9:
52:79:c1:62:d2:d8:58:83:f0:78:79:5c:35:03:48:26:32:27:
49:21:ec:ab:9d:58:a9:78:65:05:48:9d:41:b6:74:a1:87:ba:
06:dc:c5:7e:8b:93:0a:6f:19:cc:c8:e0:11:1c:ac:f7:01:6e:
c0:9b:37:a4:75:c0:83:81:1c:00:a7:fd:73:d9:0f:36:1f:e3:
c9:c4:8e:48:f8:7d:71:d3:80:48:d9:26:d1:51:9b:94:06:57:
e3:90:d5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:13:55 2025 by rpki-client