Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a346265633a3a2f33322d3438203d3e203238363639.roa
File: 323830343a346265633a3a2f33322d3438203d3e203238363639.roa (raw, json)
Hash identifier: viiDjGpqc4DUFTHrE8VcEgSBzFrr7xxwew8ISiREMRc=
Subject key identifier: 0A:95:8D:4F:A4:0B:65:2C:9E:87:53:98:A0:CA:40:41:92:88:4B:5E
Certificate issuer: /CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Certificate serial: 0E6715328B6EBAACD91BE18EDECD5ED7531A159C
Authority key identifier: 36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a346265633a3a2f33322d3438203d3e203238363639.roa
Signing time: Fri 03 Nov 2023 13:04:29 +0000
ROA not before: Fri 03 Nov 2023 12:59:29 +0000
ROA not after: Fri 01 Nov 2024 13:04:29 +0000
asID: 28669
IP address blocks: 2804:4bec::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:67:15:32:8b:6e:ba:ac:d9:1b:e1:8e:de:cd:5e:d7:53:1a:15:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36DF3C54C34BC0040ABBBE412EC6948C87D1622A
Validity
Not Before: Nov 3 12:59:29 2023 GMT
Not After : Nov 1 13:04:29 2024 GMT
Subject: CN=0A958D4FA40B652C9E875398A0CA404192884B5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:a4:ea:f6:14:63:ed:a9:03:ab:b8:20:b3:
6d:c4:de:56:14:58:9f:61:d8:17:cb:2a:74:81:04:
00:03:57:a4:eb:9f:f3:aa:51:8c:7f:7d:a1:7c:12:
47:c9:4c:5f:1a:f7:65:2a:1d:01:b5:6e:d5:13:c6:
89:bf:36:39:e2:81:d2:26:96:2b:c8:f6:89:18:ff:
1e:a7:4c:c4:3a:3f:ba:d3:a7:89:a1:e8:82:5b:43:
76:32:54:7e:95:df:a2:11:8e:a4:de:e3:5c:4a:72:
12:24:b0:4e:71:24:88:4b:8d:72:48:27:b9:16:6a:
14:23:23:1b:7f:7b:5a:ff:c0:12:d2:fe:e3:27:63:
64:05:78:55:86:ae:de:da:bf:fc:47:ef:0d:19:71:
24:85:9d:2e:50:37:2d:41:27:13:0d:12:ae:ea:26:
9b:45:e0:72:0d:2e:13:f3:93:44:20:2c:e5:7b:68:
77:1f:e7:83:da:52:5b:29:b6:0f:b9:cf:9b:38:dc:
6c:5b:be:2c:22:41:f0:fe:15:1e:21:1a:12:bf:b6:
8a:61:87:bb:c3:b1:84:43:87:b8:f0:28:ce:14:b1:
18:94:40:c9:ad:d2:3e:66:fc:7a:df:5b:de:a1:8f:
8a:33:51:0d:80:48:55:2b:be:ef:d3:37:5f:40:e9:
56:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:95:8D:4F:A4:0B:65:2C:9E:87:53:98:A0:CA:40:41:92:88:4B:5E
X509v3 Authority Key Identifier:
keyid:36:DF:3C:54:C3:4B:C0:04:0A:BB:BE:41:2E:C6:94:8C:87:D1:62:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/36DF3C54C34BC0040ABBBE412EC6948C87D1622A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/0/323830343a346265633a3a2f33322d3438203d3e203238363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bec::/32
Signature Algorithm: sha256WithRSAEncryption
17:5e:08:bc:19:b6:5a:9e:ec:bc:ce:c8:f3:3c:23:15:0b:c1:
91:cc:e6:58:06:58:a5:fa:0a:a3:44:c6:ae:6f:48:20:d9:e8:
5a:d5:3b:bf:34:15:6e:12:b2:05:c3:af:b8:de:c2:48:3a:76:
c0:b7:eb:d9:25:16:89:f2:46:4a:4d:86:31:b5:cd:60:85:53:
42:c5:06:fd:e0:5e:fd:3f:fe:2f:54:23:b2:f9:56:77:d2:22:
0a:35:3c:5c:e1:2b:b5:3b:cb:e0:4f:12:e2:86:94:0e:9b:70:
36:5d:3c:4b:99:14:3f:78:60:d1:1f:f5:4c:a9:45:38:20:dc:
e9:cf:01:e3:06:fb:c3:59:e3:e7:81:fd:56:4c:13:a3:6a:e8:
fb:19:25:8d:1c:fc:9d:29:54:a8:f0:ed:da:dc:98:4e:e0:68:
b7:52:75:5a:3a:98:9f:c7:ab:34:f2:4a:24:7b:20:24:93:5b:
eb:f8:26:fe:46:2e:15:70:10:ec:49:08:fd:70:93:30:76:f9:
56:83:2f:78:0a:08:1d:f7:06:3e:67:c2:90:dc:18:f4:47:f5:
8a:aa:fa:a0:78:83:db:c2:3a:f9:62:8e:02:9b:1c:3e:72:a1:
0c:d2:72:86:45:a2:43:59:68:4a:27:67:99:a7:65:30:95:3a:
37:3e:fe:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:53:56 2025 by rpki-client