Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3332203d3e20323638363932.roa
File: 323830343a353532343a3a2f33322d3332203d3e20323638363932.roa (raw, json)
Hash identifier: KdSxZsFtnl7uGBY2Bjo9Yw+VhD/NrKxENnE1VQ1fAjE=
Subject key identifier: 4C:AC:98:99:52:02:2D:58:80:D2:92:D2:0D:C7:B1:95:B9:95:26:56
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 4D5F2E7AE8567001084A7DD9A057EC6724AEDDD4
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3332203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 2804:5524::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5f:2e:7a:e8:56:70:01:08:4a:7d:d9:a0:57:ec:67:24:ae:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=4CAC989952022D5880D292D20DC7B195B9952656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:af:b4:d7:f6:00:07:d4:29:26:02:cc:bd:34:
30:73:d7:ed:40:d0:49:e8:b7:60:03:f7:b6:cc:3a:
80:0a:6e:14:74:ea:4c:07:5c:fe:09:82:82:3f:2f:
24:8c:82:9c:47:c0:ad:7e:79:81:2a:49:79:26:a8:
e4:58:41:05:fb:5e:a4:ed:20:cf:ea:5c:e9:73:fe:
ad:b7:2a:91:80:31:e7:b2:70:23:c2:37:a6:64:f4:
78:89:79:bb:4f:12:c7:61:1b:9b:69:d2:88:3e:6f:
61:99:31:ee:4f:95:b6:f3:5b:c1:9a:8e:3d:7d:7d:
22:e9:3c:12:71:c7:c1:76:fd:44:08:de:de:ae:40:
58:12:2e:7e:f4:b9:c5:9a:40:69:28:2c:ab:b9:54:
4e:95:d4:1d:c1:8c:f7:c1:83:60:b5:27:91:45:ea:
3f:24:0b:7a:20:d1:81:61:cf:f1:ee:c1:e5:52:77:
a8:8f:f9:94:4f:4e:ad:9e:ca:e0:15:90:bb:ab:69:
71:b1:99:7d:c8:5b:66:7c:03:62:c2:f9:83:f5:c6:
74:04:ce:1a:b4:ce:95:7b:ff:bd:ca:0e:85:b3:57:
ab:89:bc:b3:bf:c3:dc:1c:6f:cf:67:f9:f8:96:7a:
d6:36:bf:c7:41:4a:fd:85:1a:e1:71:95:93:4f:fc:
b9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:AC:98:99:52:02:2D:58:80:D2:92:D2:0D:C7:B1:95:B9:95:26:56
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33322d3332203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5524::/32
Signature Algorithm: sha256WithRSAEncryption
52:10:a5:81:49:a6:46:0f:de:d9:0b:62:51:b6:2c:e2:15:31:
e6:ff:d0:0f:f6:d0:c8:34:32:5b:d7:fc:a5:38:6a:b0:2f:cf:
f0:ce:7a:2f:02:44:34:b2:0b:da:1d:e9:83:1c:51:ec:bc:39:
84:72:a4:15:22:4a:80:3d:b9:47:ee:2a:9b:33:b3:e3:a8:a1:
91:6d:2a:7f:b9:20:ae:27:33:48:90:12:35:04:60:1a:7a:26:
b6:4e:d7:79:d0:50:47:7b:47:72:cd:5e:af:81:b2:b9:93:8b:
7c:bc:f5:2b:d2:88:67:5c:0c:7f:fc:f7:58:5d:2e:04:3f:40:
c8:fe:b5:70:9e:c5:c7:5e:d2:5a:7b:ec:30:68:35:d7:ea:a6:
04:66:56:96:da:28:7a:17:2f:0a:fa:61:52:8d:4d:24:44:b2:
68:65:ed:61:8c:d9:f3:a8:bd:6e:c5:ba:eb:7c:fb:79:03:28:
7a:86:a2:c8:08:e0:43:90:20:cd:c1:99:39:ce:64:31:04:b6:
57:5d:88:8d:fc:8a:3c:23:99:60:ab:7a:b4:ec:98:10:fd:a1:
18:9f:39:ad:23:a8:cd:10:73:af:e6:d9:b4:ee:6b:23:75:6b:
f9:3f:81:67:93:58:c9:88:fc:02:70:58:8b:e3:81:6d:12:1f:
a1:37:f3:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:30:31 2025 by rpki-client