Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/323830343a373662343a3a2f33322d3438203d3e20323731313239.roa
File: 323830343a373662343a3a2f33322d3438203d3e20323731313239.roa (raw, json)
Hash identifier: 6lB99X0pPCjd+CscZX2E3FYjPSE0V+jPEq6Guas7hwo=
Subject key identifier: 69:7E:EA:0E:90:9D:96:9B:73:4A:35:6B:A6:0E:2C:0C:9F:3F:65:47
Certificate issuer: /CN=332A76C31096E5489F824017290F825E1ED6B826
Certificate serial: 7751EED399B27717297137F2ACF6BE443F4B8BD9
Authority key identifier: 33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/323830343a373662343a3a2f33322d3438203d3e20323731313239.roa
Signing time: Wed 07 Feb 2024 14:11:08 +0000
ROA not before: Wed 07 Feb 2024 14:06:08 +0000
ROA not after: Wed 05 Feb 2025 14:11:08 +0000
asID: 271129
IP address blocks: 2804:76b4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:51:ee:d3:99:b2:77:17:29:71:37:f2:ac:f6:be:44:3f:4b:8b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=332A76C31096E5489F824017290F825E1ED6B826
Validity
Not Before: Feb 7 14:06:08 2024 GMT
Not After : Feb 5 14:11:08 2025 GMT
Subject: CN=697EEA0E909D969B734A356BA60E2C0C9F3F6547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4e:7d:38:aa:03:84:87:d3:25:8b:a3:fb:50:
64:1d:5c:ec:97:cd:97:ac:bf:c9:de:f3:eb:65:be:
d9:bd:43:24:2f:87:d2:95:cf:69:91:9e:34:85:65:
d1:56:3d:46:cb:d3:5a:ad:56:39:3d:6b:9f:5c:e2:
a7:a7:5e:6a:b9:75:2d:9c:9f:9b:3f:3e:33:ec:99:
00:02:35:c8:80:95:b0:9d:1d:8f:dc:f4:1e:0e:5b:
9a:d0:59:9f:56:a7:9e:cd:83:da:23:2e:e4:1b:93:
2a:f8:6d:f7:3d:cb:ea:0c:ea:16:3a:04:fd:96:99:
22:6b:56:86:27:ee:27:78:54:36:e0:29:ee:eb:42:
5e:1f:ac:bf:d4:c1:22:d7:e8:8d:00:d1:3d:a9:da:
e3:4c:7c:db:f6:36:ab:c0:4e:83:76:4d:ef:d9:93:
20:28:db:ae:04:82:74:09:5f:29:80:88:d7:b9:66:
78:42:c2:d4:50:6b:ba:3d:1c:33:5c:ab:ba:f0:fd:
37:f6:4b:05:ba:57:07:71:a3:fa:d3:80:a7:29:e2:
14:b2:81:bd:78:d4:b0:f0:d3:d3:43:33:0c:e4:2c:
90:5b:ba:61:40:cc:06:6c:0b:ef:5c:36:ac:46:0c:
f0:4e:b1:99:52:74:7f:c0:06:be:53:9a:74:2f:36:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7E:EA:0E:90:9D:96:9B:73:4A:35:6B:A6:0E:2C:0C:9F:3F:65:47
X509v3 Authority Key Identifier:
keyid:33:2A:76:C3:10:96:E5:48:9F:82:40:17:29:0F:82:5E:1E:D6:B8:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/332A76C31096E5489F824017290F825E1ED6B826.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/332A76C31096E5489F824017290F825E1ED6B826.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PWqY87C59sNXFrtH2wgGY9i8SifabDboMverdtbwRn6/0/323830343a373662343a3a2f33322d3438203d3e20323731313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:76b4::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ae:14:bc:21:61:0a:11:bb:71:bb:fc:b7:c4:52:f8:9b:c9:
c1:37:8d:ba:77:10:aa:c4:75:71:8f:70:69:45:d9:ee:72:7a:
dc:e3:b5:19:91:f2:05:3d:ee:6d:00:13:fd:56:e5:2f:26:f9:
d2:60:bd:ee:f5:42:1a:04:45:31:98:ef:22:47:c5:88:8b:7c:
1b:bf:27:37:cb:ff:e3:f2:a1:7c:84:c5:d9:49:00:76:87:90:
e4:de:76:97:75:f6:2e:2f:48:47:56:80:f8:dd:0f:3f:2c:45:
88:26:f3:d9:f5:2c:ac:f8:54:fb:5a:8f:75:90:5e:bb:aa:1a:
33:eb:ca:bb:34:7f:0f:8e:60:89:03:eb:1a:99:f8:32:71:8c:
84:73:a9:7b:e2:ec:2e:cd:a0:32:b9:5d:0b:56:ad:d5:0d:0d:
83:58:ac:61:3f:87:31:b7:55:f5:c5:b4:15:aa:9e:b8:b6:f5:
1f:11:6e:fa:84:92:74:d5:54:c3:66:21:98:88:c7:8a:02:f7:
d9:46:33:0d:ac:5a:4f:5f:63:6d:3b:47:0e:56:57:18:ba:05:
0d:00:90:04:0e:83:41:a0:90:dc:37:7e:9d:4e:46:fc:0b:6b:
c4:8c:33:6a:24:f0:31:e6:ba:5a:54:ba:a4:15:d9:ae:5e:a3:
aa:74:c7:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:37:16 2025 by rpki-client