Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323033.roa
File: 323830343a6439303a3a2f33322d3332203d3e20323033.roa (raw, json)
Hash identifier: 68y9ruGNwawVw1EJ9CsS6NQV8AqAzU18jn4lIAtTvmU=
Subject key identifier: E0:96:73:17:B1:E4:36:AF:75:7C:C1:8B:0D:34:3A:D7:3B:36:B1:D6
Certificate issuer: /CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Certificate serial: 775C7A67959F2E4376E60421C53C97FEA308E704
Authority key identifier: 24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323033.roa
Signing time: Mon 19 Dec 2022 16:49:33 +0000
ROA not before: Mon 19 Dec 2022 16:44:33 +0000
ROA not after: Mon 18 Dec 2023 16:49:33 +0000
asID: 203
IP address blocks: 2804:d90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:5c:7a:67:95:9f:2e:43:76:e6:04:21:c5:3c:97:fe:a3:08:e7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2444B4EFFAB2FF62A2518F28FA3AF906FF80C277
Validity
Not Before: Dec 19 16:44:33 2022 GMT
Not After : Dec 18 16:49:33 2023 GMT
Subject: CN=E0967317B1E436AF757CC18B0D343AD73B36B1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:1d:54:42:70:0a:e1:dd:68:00:f9:a4:6f:
67:0f:83:5f:7a:be:e7:ac:ea:85:d1:87:93:83:bc:
85:e4:47:ee:eb:bf:46:09:2a:7a:8d:79:c6:0f:48:
1c:af:28:3c:7c:90:4c:8c:2f:fa:aa:cb:0f:74:45:
31:4e:1d:3c:c9:d2:d4:d0:f6:0a:a4:c5:97:bb:6b:
2a:b2:af:36:71:73:f7:ba:32:09:4a:35:d5:a1:ce:
bb:9d:06:ec:7b:ce:ca:06:e5:07:1f:e4:26:9e:b6:
19:00:27:33:8b:3f:5d:39:8e:a0:90:3f:a1:bb:e4:
65:50:a3:58:24:51:00:5c:8c:8d:b8:cd:ce:64:8c:
8b:c1:e8:99:90:1e:ee:97:89:c7:41:b6:a4:02:12:
95:f6:bb:c2:c7:e0:a8:11:db:76:8f:b6:04:18:8c:
39:8f:30:6b:e0:bf:50:7d:75:be:61:f1:99:ca:11:
37:b0:d0:ef:57:42:1b:ba:4d:5b:83:5e:80:bf:87:
73:2e:1d:95:f8:29:11:ed:82:63:a8:22:28:ca:7e:
89:75:bb:7a:39:16:5e:4e:72:da:d6:0e:5d:79:82:
36:76:af:e4:4a:e1:c1:bd:cc:86:16:c9:36:84:a0:
95:78:39:62:5b:08:9d:94:53:fd:44:9b:54:4d:b9:
fa:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:96:73:17:B1:E4:36:AF:75:7C:C1:8B:0D:34:3A:D7:3B:36:B1:D6
X509v3 Authority Key Identifier:
keyid:24:44:B4:EF:FA:B2:FF:62:A2:51:8F:28:FA:3A:F9:06:FF:80:C2:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2444B4EFFAB2FF62A2518F28FA3AF906FF80C277.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/1/323830343a6439303a3a2f33322d3332203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d90::/32
Signature Algorithm: sha256WithRSAEncryption
a5:2e:d1:7c:2c:6f:57:cb:ae:2a:f4:e8:dc:2b:fc:ad:a9:dd:
e1:50:03:ba:ce:d5:b8:40:06:3d:fa:74:0d:d5:ef:8d:44:7b:
27:c8:66:af:89:93:e4:30:b0:c8:db:89:d0:02:b5:cf:35:70:
36:aa:10:95:5d:d7:48:f8:4d:66:bf:b2:1e:b1:a8:b0:87:7d:
08:0d:e4:e9:d7:b4:46:ca:41:02:8e:73:b7:42:78:37:bb:7d:
91:0c:dc:0f:50:5e:cf:6d:37:7b:e7:88:df:3b:5b:07:41:64:
4e:59:08:1a:48:35:ee:ae:18:2d:d2:c9:71:d5:2a:1d:48:f7:
89:9e:fa:a6:2d:11:6b:04:17:ae:c6:a2:fa:78:dc:02:ea:b9:
bf:45:6d:f2:ca:7c:76:51:d2:d0:70:6b:3e:58:53:12:94:96:
0e:37:e2:7e:49:ef:4b:7b:f3:8f:fa:43:8e:da:ed:47:06:0c:
8c:32:7a:32:de:bf:b6:17:03:f5:29:4d:df:c4:dc:2f:2b:32:
ad:ec:64:1b:5a:ed:aa:c7:09:c3:96:90:af:2b:27:12:87:24:
52:67:72:e0:ee:b1:fe:95:e2:18:f9:3c:0e:64:df:49:aa:2e:
51:78:ec:ce:35:c0:1c:fd:6a:bb:36:9a:91:56:0e:88:96:d0:
21:69:f4:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:04:56 2025 by rpki-client