Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
File: 323830343a353936633a3a2f33322d3438203d3e20323638373031.roa (raw, json)
Hash identifier: Qd+fBouHHnGAIZfOtnUjQA0D78Uq2Ng4y/m69AY1Ey8=
Subject key identifier: D7:C6:BD:F9:27:6B:0E:55:9E:A9:93:99:D7:06:9C:AD:06:61:10:E8
Certificate issuer: /CN=3DD549F23D2BB009A1484217ADA075AADCB1028D
Certificate serial: 75595D75A4CDB4E9F39D6E0238B4A9BE1EA63B6F
Authority key identifier: 3D:D5:49:F2:3D:2B:B0:09:A1:48:42:17:AD:A0:75:AA:DC:B1:02:8D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
Signing time: Tue 22 Aug 2023 15:25:30 +0000
ROA not before: Tue 22 Aug 2023 15:20:30 +0000
ROA not after: Tue 20 Aug 2024 15:25:30 +0000
asID: 268701
IP address blocks: 2804:596c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:59:5d:75:a4:cd:b4:e9:f3:9d:6e:02:38:b4:a9:be:1e:a6:3b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DD549F23D2BB009A1484217ADA075AADCB1028D
Validity
Not Before: Aug 22 15:20:30 2023 GMT
Not After : Aug 20 15:25:30 2024 GMT
Subject: CN=D7C6BDF9276B0E559EA99399D7069CAD066110E8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ba:38:d1:42:5d:b8:90:ba:78:5e:46:b6:4c:
93:09:99:cf:cb:d7:e2:0e:da:34:26:9d:38:fd:86:
2f:05:54:1a:15:56:5c:78:0e:e9:fd:11:84:86:43:
9c:e4:02:1f:71:80:30:a7:6e:da:c4:14:fe:11:48:
a7:4d:78:bd:f7:1b:1b:24:04:8e:54:e3:3f:b9:dc:
7a:37:f7:9b:70:f4:a0:1f:22:99:8e:62:1d:b4:7a:
47:8b:95:7b:8b:7d:2a:60:19:54:80:f9:21:f5:40:
90:83:91:19:ea:a6:fe:c5:d5:af:0c:75:60:b7:84:
d7:91:f0:76:ef:d0:14:34:2e:df:d0:64:cc:28:1f:
4c:e9:5a:28:7e:4a:2a:de:76:33:9a:7d:04:43:c7:
5b:ce:8b:e1:80:88:b4:23:69:27:5f:f9:c7:b5:ef:
92:31:87:0d:30:22:a2:eb:30:7d:10:29:b0:3b:c8:
da:05:f8:85:02:cd:6f:81:0f:ce:31:82:80:97:2a:
ff:0c:24:03:21:84:13:fd:ac:7d:9c:f4:54:5d:73:
06:85:41:f6:a1:f2:6c:99:8d:79:d7:c0:d8:c7:87:
b4:9e:35:ee:7e:48:a6:31:ea:c8:75:fe:cd:d6:9c:
4e:2a:55:74:0e:9f:f8:5f:b3:f3:15:1c:fc:47:14:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C6:BD:F9:27:6B:0E:55:9E:A9:93:99:D7:06:9C:AD:06:61:10:E8
X509v3 Authority Key Identifier:
keyid:3D:D5:49:F2:3D:2B:B0:09:A1:48:42:17:AD:A0:75:AA:DC:B1:02:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3DD549F23D2BB009A1484217ADA075AADCB1028D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pva4tQzH36bLQmausbgvvMoVnkKQGsdtBPxuPgUadGF/0/323830343a353936633a3a2f33322d3438203d3e20323638373031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:596c::/32
Signature Algorithm: sha256WithRSAEncryption
72:97:aa:49:cd:34:ef:be:d6:c1:47:d6:77:26:69:59:49:c6:
d7:74:db:98:a7:29:a8:c2:c4:d9:9b:36:10:12:8d:9e:31:26:
de:07:9a:77:5e:fb:13:5a:2a:cf:0a:b1:d6:9b:c0:f6:15:9c:
3f:71:4a:5f:42:52:0c:7e:65:28:1d:aa:fc:01:3b:ca:77:ca:
09:11:de:89:fe:4a:22:13:0f:42:c6:d4:1d:89:59:f8:c6:26:
cd:e2:be:36:03:7b:20:53:eb:1e:30:c0:eb:1d:c0:aa:b5:61:
3a:ef:2e:d5:6c:83:5a:41:33:60:f3:f7:b5:ee:86:bf:d8:6c:
24:5c:03:da:6e:b4:3d:ae:ce:d7:5d:11:6a:ab:96:c7:e4:4c:
89:ee:da:e8:a3:b7:a6:9c:56:de:78:e0:50:e9:3d:b1:70:39:
f2:fb:d5:15:75:5a:7e:35:71:2b:30:44:4e:48:37:ba:66:cb:
81:13:97:23:15:17:42:05:a5:9c:ef:4d:c1:ac:d1:b7:ec:2d:
c9:04:96:a7:45:ee:4f:9e:b4:68:8a:38:81:ae:0e:3b:75:f7:
5c:3a:9e:64:d7:fd:84:ba:af:46:b2:ec:0e:80:9a:10:47:75:
28:57:38:08:cc:62:4c:a1:0b:60:cb:0c:a7:8f:c1:d8:e4:bc:
66:30:d5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:48:09 2025 by rpki-client