Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33332d3333203d3e20323638363932.roa
File: 323830343a353532343a3a2f33332d3333203d3e20323638363932.roa (raw, json)
Hash identifier: mm0LgZyVpZ6uEMbz+GwCBDCE/4zoUK8Sj1PQJslpNdw=
Subject key identifier: 51:70:59:30:5A:27:7E:8A:88:69:49:06:20:9A:00:E4:B7:45:49:75
Certificate issuer: /CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Certificate serial: 4567AAC4E71574C4AAF8AF2D7408EAE7C74CB3A6
Authority key identifier: 2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33332d3333203d3e20323638363932.roa
Signing time: Fri 20 Sep 2024 18:57:37 +0000
ROA not before: Fri 20 Sep 2024 18:52:37 +0000
ROA not after: Fri 19 Sep 2025 18:57:37 +0000
asID: 268692
IP address blocks: 2804:5524::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:67:aa:c4:e7:15:74:c4:aa:f8:af:2d:74:08:ea:e7:c7:4c:b3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07
Validity
Not Before: Sep 20 18:52:37 2024 GMT
Not After : Sep 19 18:57:37 2025 GMT
Subject: CN=517059305A277E8A88694906209A00E4B7454975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:32:cd:01:70:53:c2:3c:f2:5d:38:13:b5:27:
c8:84:e1:34:4e:49:af:74:ff:09:85:75:58:50:5a:
e1:3f:ca:2a:b0:1a:77:f3:2f:93:73:6e:2f:c0:16:
78:7a:6e:33:a1:89:b4:d9:b4:43:1e:e7:34:b5:0e:
5e:6f:56:4e:ea:82:fb:7e:b5:9c:d8:10:f1:41:30:
3d:f3:1e:21:58:11:27:0e:69:56:e6:5c:33:a2:b6:
3f:5a:ad:58:2d:1e:5d:be:52:59:a3:56:40:27:5a:
9e:91:bf:2f:c6:92:45:ad:66:31:95:7d:91:4d:13:
a5:53:46:0a:8a:42:7c:b5:4e:fc:6e:a2:c0:1a:5c:
d7:05:04:cf:28:75:97:f6:80:6a:37:40:e0:dd:1d:
ce:fe:f8:a6:ac:c6:e2:3a:c8:02:28:57:e2:ad:6f:
b7:d5:96:9f:ee:21:57:d2:f4:74:40:2e:57:b4:f4:
be:32:77:8b:96:d6:d0:f1:a1:6b:61:95:43:6c:a2:
b2:74:57:9a:e7:5c:c1:1c:10:5d:76:a3:d8:0a:e1:
38:09:bb:c9:24:07:2c:81:ae:0c:40:39:d3:65:f9:
77:05:ee:c4:7c:65:c5:03:9e:24:13:3e:f7:71:65:
33:d8:8a:4a:33:77:fb:d6:0c:39:75:d3:29:1e:6f:
1e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:70:59:30:5A:27:7E:8A:88:69:49:06:20:9A:00:E4:B7:45:49:75
X509v3 Authority Key Identifier:
keyid:2F:01:25:A1:30:8A:C4:DE:6A:3A:CC:AF:CC:3D:AD:8D:0D:C5:2E:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F0125A1308AC4DE6A3ACCAFCC3DAD8D0DC52E07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8fknVDemo6ra2jgnbdiE6Zxe1Fsw4QA3hqt2mspeTUNK/0/323830343a353532343a3a2f33332d3333203d3e20323638363932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5524::/33
Signature Algorithm: sha256WithRSAEncryption
8f:67:fc:dd:12:a9:d6:d1:7c:40:b5:a3:b6:16:f8:4d:af:9a:
61:1e:b3:a4:77:80:1d:78:6a:9e:ec:23:70:79:eb:e4:16:66:
d6:77:54:6f:51:c1:79:d6:d2:07:78:01:60:98:34:4a:14:c8:
82:63:7f:11:5f:f8:ed:a4:7a:be:ac:b1:d7:6d:aa:af:bd:f9:
43:97:79:27:ff:a4:65:be:da:79:10:2b:cc:a5:6c:47:ee:ec:
4a:83:fd:7c:05:d0:3c:4e:b3:9e:fd:71:df:9e:7a:1e:06:fb:
b0:7a:13:7c:e8:38:7a:4b:6a:6e:9d:f1:6b:91:3d:37:50:00:
02:78:40:d3:b6:dd:1c:c6:a5:3f:cd:86:9b:50:8b:c4:c2:ed:
f8:11:b8:b9:62:1f:75:f2:76:18:a8:66:5b:c0:3a:ef:d3:36:
17:cc:99:5a:8d:be:5f:89:78:64:a2:ef:48:2d:01:f6:c7:ac:
57:b2:a7:24:d5:1c:90:16:0b:b5:f3:d4:de:07:77:3e:61:ca:
5a:1a:a1:51:30:19:6a:d1:a8:9e:96:e3:26:e6:87:8f:99:d2:
68:52:20:e7:65:2a:a3:0e:b9:33:20:94:27:2e:b1:67:5f:ad:
22:81:a9:f7:b7:1c:b2:c0:a7:0e:2c:f1:b3:da:b6:79:f7:55:
d9:b3:75:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:44:54 2025 by rpki-client