Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/323830343a353932303a3a2f33322d3332203d3e20323638313730.roa
File: 323830343a353932303a3a2f33322d3332203d3e20323638313730.roa (raw, json)
Hash identifier: kze8yLr/KJUZQrMalPmhuZxrWxZk/Hc9dlNZ31ZoFcA=
Subject key identifier: 88:70:EC:23:45:AC:1B:F2:36:55:66:71:ED:21:9C:0D:E6:11:EE:50
Certificate issuer: /CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
Certificate serial: 0DBBE6D6995E4685A88A86B348D1105C5D9ECAC0
Authority key identifier: 7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/323830343a353932303a3a2f33322d3332203d3e20323638313730.roa
Signing time: Tue 10 Jan 2023 00:21:48 +0000
ROA not before: Tue 10 Jan 2023 00:16:48 +0000
ROA not after: Tue 09 Jan 2024 00:21:48 +0000
asID: 268170
IP address blocks: 2804:5920::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bb:e6:d6:99:5e:46:85:a8:8a:86:b3:48:d1:10:5c:5d:9e:ca:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D
Validity
Not Before: Jan 10 00:16:48 2023 GMT
Not After : Jan 9 00:21:48 2024 GMT
Subject: CN=8870EC2345AC1BF236556671ED219C0DE611EE50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:15:c7:fb:d8:8c:a2:b0:83:7a:92:af:6b:b7:
50:b5:34:4a:fb:5b:2e:f0:41:d1:41:f5:17:96:65:
4a:84:03:58:2d:df:f5:23:1b:ab:03:71:4b:c1:a8:
61:75:16:f1:98:dc:23:b1:b2:28:f8:6f:cb:19:59:
e2:2f:b7:18:59:ae:78:5d:65:f5:21:d2:ad:53:5c:
78:21:91:50:ca:65:5b:7c:39:4a:7d:81:20:00:96:
cc:64:12:12:d2:77:9f:a3:a9:94:fe:0a:3b:ae:c8:
94:96:bd:e8:62:71:77:a9:39:b3:9f:71:c2:43:05:
04:29:e6:47:ac:e3:a9:d3:f1:bd:0f:93:0e:5c:35:
f3:32:2e:ba:ad:7b:ec:49:64:14:d0:01:90:56:39:
0e:a0:b3:46:53:2f:58:73:50:b3:42:80:09:70:50:
d7:16:ab:b1:ba:f0:49:da:1b:c7:36:92:d0:54:93:
44:61:f6:81:18:b8:a7:1e:ef:6e:d7:27:7f:78:ea:
e9:c8:f7:55:fb:fa:de:a1:dc:f1:48:e7:66:20:26:
df:08:2f:fc:a2:4d:b8:c7:3a:dd:a9:fe:be:55:e1:
f1:ff:af:0e:61:92:b7:15:4f:0b:76:b8:64:9e:6e:
52:91:57:3b:53:f9:39:59:3f:74:90:01:31:c9:5f:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:70:EC:23:45:AC:1B:F2:36:55:66:71:ED:21:9C:0D:E6:11:EE:50
X509v3 Authority Key Identifier:
keyid:7A:8A:52:E1:0C:E2:8F:02:16:87:2E:59:AD:50:CA:6A:E4:BC:4A:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A8A52E10CE28F0216872E59AD50CA6AE4BC4A6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8APaYhJhSNEZyVhLVWet9quW3qrtXY7UEkUY8oowPzqp/0/323830343a353932303a3a2f33322d3332203d3e20323638313730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5920::/32
Signature Algorithm: sha256WithRSAEncryption
7b:23:b8:5f:32:91:93:65:c0:dd:9a:d0:a9:b5:86:29:a4:b9:
88:2b:e6:8f:ee:c5:ab:21:ab:ec:d3:8e:e1:77:0e:b9:1a:1f:
01:52:22:7b:cb:62:93:62:3c:16:58:71:05:f3:a4:1c:52:e0:
22:b1:11:10:d6:2f:4c:a1:3e:70:de:dc:21:87:43:5d:50:b1:
58:00:c0:80:95:00:33:c1:71:bd:3e:0b:14:b1:8d:c5:31:b6:
8a:4a:2b:44:26:d1:b8:a0:c4:00:29:ef:cb:4b:f3:67:37:d6:
44:9c:54:49:f6:74:94:83:1b:1f:ef:77:5c:e5:2f:c7:49:cc:
0c:24:0d:4d:ac:8c:14:d8:b2:f3:b2:cf:24:14:7b:f9:55:05:
12:b3:f4:66:c0:28:c0:6b:57:c7:31:0d:20:04:0c:bc:7a:e6:
88:b5:b8:b3:04:27:3c:a2:d1:dc:28:8a:ae:30:ba:05:0b:dc:
2c:a9:09:7e:83:68:90:24:60:57:01:c4:8e:aa:69:ec:8b:71:
ee:7d:61:9a:ad:5f:61:f9:89:dd:7a:c1:77:78:c2:bc:eb:cb:
eb:e2:49:6c:05:51:56:5d:71:15:03:3e:c3:10:be:f1:d2:51:
33:81:4a:1b:8e:bd:c2:57:40:1d:de:c2:63:ea:77:03:cc:1e:
07:04:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 19:10:39 2025 by rpki-client