Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/323830343a326439303a3a2f33322d3438203d3e203532363832.roa
File: 323830343a326439303a3a2f33322d3438203d3e203532363832.roa (raw, json)
Hash identifier: au46NXd4yzN9Z/FbPrElr514MR6isHeAf382ZyyLGsE=
Subject key identifier: E3:8E:A9:CE:1F:26:CC:2C:58:D4:4F:90:3C:F6:8B:36:7C:22:0E:6B
Certificate issuer: /CN=871DE338B0AD69AA6F0631338AE08DB27D7D8F6B
Certificate serial: 30BAC7C691F52BFBA086D4B9235FD25322A5D8A7
Authority key identifier: 87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/323830343a326439303a3a2f33322d3438203d3e203532363832.roa
Signing time: Thu 11 Jan 2024 18:57:14 +0000
ROA not before: Thu 11 Jan 2024 18:52:14 +0000
ROA not after: Thu 09 Jan 2025 18:57:14 +0000
asID: 52682
IP address blocks: 2804:2d90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:ba:c7:c6:91:f5:2b:fb:a0:86:d4:b9:23:5f:d2:53:22:a5:d8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=871DE338B0AD69AA6F0631338AE08DB27D7D8F6B
Validity
Not Before: Jan 11 18:52:14 2024 GMT
Not After : Jan 9 18:57:14 2025 GMT
Subject: CN=E38EA9CE1F26CC2C58D44F903CF68B367C220E6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2b:8d:20:53:46:4b:70:7f:16:f1:e5:8c:db:
cf:cb:4a:f5:36:fc:7c:3c:48:66:b0:77:21:96:4d:
73:d6:05:7e:9a:fc:00:12:d4:ed:7c:24:23:46:fd:
da:bb:96:9c:2f:06:b1:73:42:16:76:e2:8d:43:21:
df:45:f7:24:96:02:0a:b9:09:04:7b:97:1e:53:66:
58:19:68:b7:ac:d3:e4:52:b4:61:e6:c7:8c:a1:e2:
6f:a9:7d:be:ae:12:eb:c4:74:e3:38:42:d6:5b:c8:
c2:6b:cd:1b:04:68:bc:bb:60:5a:bc:41:e1:e2:85:
db:c8:ce:75:91:cd:88:4d:fb:95:03:7f:d2:d5:ba:
fe:72:03:99:14:ea:42:a5:4c:ab:11:e0:a8:7b:8a:
a5:cd:6f:10:3c:aa:14:b8:2a:f9:f4:4e:c6:14:16:
d1:fd:ec:16:f1:a2:d2:fb:d2:99:96:8c:5d:cf:22:
4d:ef:bb:88:b0:27:c8:69:f2:cb:3a:a4:d3:21:32:
5e:77:0c:de:d4:3f:9f:19:df:43:f3:45:b6:ad:df:
47:8d:4e:5c:14:6d:f2:06:67:76:4c:c4:79:60:cd:
07:65:75:c4:ab:74:81:6c:ca:ad:e8:0b:53:c2:44:
08:86:4e:9b:91:44:71:78:53:ae:12:71:7b:0e:a2:
a2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:8E:A9:CE:1F:26:CC:2C:58:D4:4F:90:3C:F6:8B:36:7C:22:0E:6B
X509v3 Authority Key Identifier:
keyid:87:1D:E3:38:B0:AD:69:AA:6F:06:31:33:8A:E0:8D:B2:7D:7D:8F:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/871DE338B0AD69AA6F0631338AE08DB27D7D8F6B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BXWDtWtwyu4z8cnJBT4hpn1yyh5peWhywJ3PLxuzU25/0/323830343a326439303a3a2f33322d3438203d3e203532363832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2d90::/32
Signature Algorithm: sha256WithRSAEncryption
d8:61:c7:52:75:65:66:66:25:4e:c9:17:e1:26:cd:ca:c3:1b:
f3:e2:b9:00:5e:a0:8a:47:69:28:ad:ac:1d:b5:a0:1e:32:19:
1c:bd:d7:b5:2a:3c:47:92:46:ba:56:c5:cc:b7:ee:d2:34:df:
61:d0:d3:ae:63:e0:df:91:82:b8:f0:3d:37:8d:29:18:ed:32:
02:82:d0:a4:ff:51:b7:c9:83:83:9a:00:b5:7e:7d:00:7e:2a:
50:f1:89:b1:0b:76:f8:5a:1f:7e:88:97:76:e8:9b:14:fd:d4:
d7:2e:70:e2:64:56:16:c8:b2:2a:c6:39:34:80:38:f6:c5:04:
ca:45:9c:67:0a:4d:e1:81:a5:00:df:d5:8a:e7:2a:67:a1:75:
8c:a4:ef:d4:b0:b4:97:ba:90:46:07:43:a0:53:0a:b0:1b:2e:
57:a8:f5:46:41:09:64:36:25:e2:43:77:e5:c3:eb:07:49:4e:
37:5a:52:72:cf:58:c2:c4:34:fc:73:0a:f4:7a:5a:78:44:f8:
59:38:ff:02:7e:67:15:30:ca:86:06:d5:d4:dd:42:84:87:2c:
60:58:83:f7:ba:fc:a7:d7:39:ac:6e:a0:df:ef:01:6e:60:ee:
ae:04:36:ee:23:b9:9d:f0:06:f7:f7:9a:8f:2e:3b:b8:fe:48:
92:b1:c9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:19:11 2025 by rpki-client