Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030333a3a2f34382d3438203d3e203238333036.roa
File: 323830343a33343a323030333a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier: 3bbHQqJzQz8xIAIbUSQj83fm6766XZDx0VwsP2w8B2g=
Subject key identifier: A4:D6:11:DA:73:61:DC:64:0E:16:9F:6D:1E:4A:A7:FC:86:6E:81:AF
Certificate issuer: /CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Certificate serial: 7AC8C6F957D8A51BEBEB8538B9120A812F2433AA
Authority key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030333a3a2f34382d3438203d3e203238333036.roa
Signing time: Thu 21 Sep 2023 19:37:58 +0000
ROA not before: Thu 21 Sep 2023 19:32:58 +0000
ROA not after: Thu 19 Sep 2024 19:37:58 +0000
asID: 28306
IP address blocks: 2804:34:2003::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:c8:c6:f9:57:d8:a5:1b:eb:eb:85:38:b9:12:0a:81:2f:24:33:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Validity
Not Before: Sep 21 19:32:58 2023 GMT
Not After : Sep 19 19:37:58 2024 GMT
Subject: CN=A4D611DA7361DC640E169F6D1E4AA7FC866E81AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2b:3d:46:d1:7f:db:bf:a1:cb:53:32:64:c1:
90:d4:15:d7:54:cc:b8:f6:cd:8e:7f:ac:db:ca:4f:
a5:b6:2f:e9:30:a5:f5:b1:6a:e4:55:4e:62:18:68:
e4:a2:69:1f:51:06:48:22:88:33:cd:61:06:1b:aa:
d3:e9:16:86:cd:f6:33:e7:63:6e:b3:9b:a3:ba:98:
ce:dc:c6:8f:22:21:0a:0f:17:24:a8:db:e1:91:57:
7f:6f:45:31:7b:c7:e2:f8:16:70:5c:b3:ca:b4:55:
2a:85:ac:de:3a:b6:31:ca:1f:2f:da:4f:7d:07:f0:
40:af:9f:44:24:ba:1d:86:97:1c:b5:d3:13:6f:ea:
e1:a6:ce:3f:09:d4:ef:17:6e:87:d7:29:02:2c:1c:
9e:a9:1d:ff:29:98:8c:6f:aa:2a:b5:10:60:94:70:
65:10:1b:78:23:22:ac:47:6c:7f:d0:13:0f:d9:7c:
c2:17:4b:b4:bf:2a:d9:4a:45:df:41:f7:57:8f:f6:
c0:bf:5e:42:5f:d8:5f:44:51:69:3f:f7:e2:4e:d5:
5b:f6:06:ac:ba:a1:80:19:2a:87:9f:df:29:d2:eb:
c3:5f:fb:a0:3d:8d:fe:79:71:93:a0:9b:af:3b:8b:
5a:7c:ff:68:d3:46:dc:22:9d:a7:09:a0:2e:42:39:
4e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D6:11:DA:73:61:DC:64:0E:16:9F:6D:1E:4A:A7:FC:86:6E:81:AF
X509v3 Authority Key Identifier:
keyid:DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323030333a3a2f34382d3438203d3e203238333036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34:2003::/48
Signature Algorithm: sha256WithRSAEncryption
2f:e0:fa:f1:1b:c4:e1:b7:77:41:fc:55:c5:bd:98:fc:cb:0a:
e7:d7:1d:85:1b:70:bd:73:9b:64:aa:bb:8f:7b:2e:5d:be:c5:
5f:4f:f9:60:6c:bd:67:59:76:cb:e0:85:87:09:09:3d:91:17:
26:2d:a3:2b:0c:53:3e:f1:e5:22:d1:0f:42:4b:fb:f8:20:50:
ff:70:22:ba:f9:fe:40:1c:0a:f6:f3:66:4b:9f:c4:3c:95:e2:
08:71:75:12:96:90:3a:65:ef:2e:f0:bb:de:5e:e8:96:cf:49:
53:8b:ce:15:5a:9e:c4:ac:76:d3:1f:19:e0:2a:70:c1:10:e9:
cf:17:b4:99:fe:77:63:f4:d4:fc:53:0a:90:e8:a7:99:d5:7c:
bd:43:6f:56:df:46:d4:17:86:6a:c1:a2:34:99:f8:ac:1e:f3:
59:17:82:8e:b2:9e:9c:b7:c2:2c:e9:48:91:ff:3c:c7:2f:27:
cc:b8:f5:03:67:e1:9c:e8:45:04:33:16:ab:cd:eb:aa:bd:29:
f4:0f:69:2b:9b:3d:85:63:bf:0e:5f:0f:8d:15:51:68:b3:3e:
cc:8c:94:b5:b5:b9:0e:a4:e9:ba:06:b1:b3:67:6c:56:4c:22:
44:14:92:c3:a0:00:93:cb:5e:fc:40:69:cb:76:21:4b:20:d3:
6a:75:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:46 2025 by rpki-client