Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa
File: 323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa (raw, json)
Hash identifier: X+Fw4dh33XmX2XhXGFpV05VSBwG5IP91ClXxXyuLiQY=
Subject key identifier: 16:87:95:7B:F5:ED:2E:63:DC:0E:42:1F:89:4D:5D:40:92:93:31:1A
Certificate issuer: /CN=9EBA1BA9267695A75FD5015C54F64CF52473073D
Certificate serial: 5F6B4D7878964E9A0FD7DE720AED0E9F2F04A1A1
Authority key identifier: 9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa
Signing time: Tue 30 May 2023 19:08:48 +0000
ROA not before: Tue 30 May 2023 19:03:48 +0000
ROA not after: Tue 28 May 2024 19:08:48 +0000
asID: 272248
IP address blocks: 2804:843c:5000::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:6b:4d:78:78:96:4e:9a:0f:d7:de:72:0a:ed:0e:9f:2f:04:a1:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9EBA1BA9267695A75FD5015C54F64CF52473073D
Validity
Not Before: May 30 19:03:48 2023 GMT
Not After : May 28 19:08:48 2024 GMT
Subject: CN=1687957BF5ED2E63DC0E421F894D5D409293311A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1b:36:c9:55:8a:8e:d6:5b:0e:89:19:46:93:
55:18:83:3e:c3:be:7b:c7:b4:75:86:c8:02:6a:31:
69:b8:84:08:6c:ac:c5:b2:23:50:10:4c:68:07:6e:
0a:1a:2a:af:09:99:e9:bd:6e:e8:18:12:dc:88:04:
43:58:aa:52:4b:60:17:95:c9:e3:83:4e:e3:c7:fb:
8f:b2:b9:0c:78:0d:a8:0d:89:7c:c2:eb:da:d9:25:
f2:3a:09:83:7b:18:1d:17:0c:11:1e:2e:16:f3:42:
dd:87:00:f8:0c:2a:46:79:3f:4e:e0:07:2d:ee:e8:
db:3f:19:e5:ad:f3:7a:a2:01:f0:d6:5c:93:12:11:
7e:88:8e:f0:bb:3b:1a:3f:4c:3b:36:b4:c4:fe:69:
43:93:5e:2c:2f:55:35:e1:fe:30:53:b7:0d:12:93:
75:a1:31:31:9c:81:53:a8:bc:3c:c9:da:c7:70:70:
13:a7:e4:46:4d:2a:17:fd:69:18:8c:0f:fd:bc:db:
cc:bc:ee:b7:6c:12:f3:76:5e:ce:18:03:d2:74:1e:
60:27:09:46:2e:18:e0:68:b3:35:13:97:1c:7d:24:
d2:26:18:05:5f:d8:fa:18:84:e4:d8:d2:0a:36:5e:
52:00:f4:62:58:52:ee:df:5b:03:ed:50:4b:16:ee:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:87:95:7B:F5:ED:2E:63:DC:0E:42:1F:89:4D:5D:40:92:93:31:1A
X509v3 Authority Key Identifier:
keyid:9E:BA:1B:A9:26:76:95:A7:5F:D5:01:5C:54:F6:4C:F5:24:73:07:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9EBA1BA9267695A75FD5015C54F64CF52473073D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7YALjWqUpXCdVD3C8oSfNw8oiAkXskHtj79AfrPw9cKx/0/323830343a383433633a353030303a3a2f34342d3434203d3e20323732323438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:843c:5000::/44
Signature Algorithm: sha256WithRSAEncryption
9c:17:50:ae:97:03:91:01:88:95:68:ce:e8:7c:2e:65:8f:13:
4b:49:47:4f:79:0e:08:d3:51:89:87:e9:42:1e:16:d5:dd:90:
eb:f5:a3:80:e5:54:84:9a:4c:53:89:6c:3d:02:ba:fb:30:44:
c4:be:2f:70:c2:7c:a6:1d:7f:8e:c1:08:29:f9:46:8a:51:dd:
db:87:b2:e5:59:41:13:56:99:a1:d0:4e:bc:3b:4d:d3:81:11:
35:be:ac:6e:6d:8a:28:c6:ac:ba:14:38:db:7c:f3:85:03:3f:
01:04:dd:05:c1:de:58:c9:10:f0:24:d4:88:96:8f:f2:52:7e:
0a:9b:c9:7d:cb:d1:b0:ae:47:b6:1b:8d:01:6e:7c:e3:87:66:
d8:3b:6b:e0:4b:d3:5e:5b:04:a7:77:75:82:22:b8:14:c8:67:
18:f5:e2:bf:b8:3f:00:28:42:4e:5b:54:71:c9:f5:c1:00:dc:
c4:67:62:5a:0c:d3:a4:f0:53:8b:84:82:ff:42:32:fe:e6:1a:
d0:b7:be:5a:41:1b:25:7c:c7:0c:68:0b:98:fd:fb:56:4f:1f:
6f:ba:b3:12:55:35:20:a6:e1:ec:01:31:44:2b:b5:3c:26:03:
00:ec:8e:f4:39:0a:95:02:fa:45:c7:b7:d7:87:04:9c:fb:23:
bb:8f:a5:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:32 2025 by rpki-client