Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
File: 323830343a3731633a3a2f33322d3438203d3e203533303830.roa (raw, json)
Hash identifier: OoS7ONeGV7PCXvP6ZnNLvL+rImTANZNZMR4X8MqQiU0=
Subject key identifier: 70:E4:C5:9F:90:75:9C:23:D2:F9:9A:13:A5:28:30:1B:C1:69:9A:D9
Certificate issuer: /CN=2F394F99007CD172C0832F8415F6842A1475173D
Certificate serial: 167C1A487B1CBC307AA54FA8B7C3D3ACD34629A0
Authority key identifier: 2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
Signing time: Thu 31 Oct 2024 17:05:12 +0000
ROA not before: Thu 31 Oct 2024 17:00:12 +0000
ROA not after: Thu 30 Oct 2025 17:05:12 +0000
asID: 53080
IP address blocks: 2804:71c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:7c:1a:48:7b:1c:bc:30:7a:a5:4f:a8:b7:c3:d3:ac:d3:46:29:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2F394F99007CD172C0832F8415F6842A1475173D
Validity
Not Before: Oct 31 17:00:12 2024 GMT
Not After : Oct 30 17:05:12 2025 GMT
Subject: CN=70E4C59F90759C23D2F99A13A528301BC1699AD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:7f:b5:a4:94:8a:0f:77:dc:b3:32:6c:69:86:
0c:09:9e:cf:72:79:c5:26:81:74:f9:8a:6c:8e:02:
46:34:af:90:be:21:ab:e2:d9:e6:eb:07:0b:4a:c8:
7a:4f:5f:c7:88:4c:99:db:ee:63:a3:63:e3:65:41:
26:a7:fe:a5:8c:75:be:ca:16:e7:2e:c3:5f:5f:a8:
a4:ed:8e:27:91:b9:5f:c0:7f:0c:2b:f6:fe:d6:7e:
2d:84:29:cc:1a:7a:04:68:03:df:74:ae:ac:ef:68:
22:6b:cd:91:0a:a5:06:96:ea:bb:03:bc:82:6f:47:
f2:f1:fd:48:07:2e:cc:60:7b:69:4c:f1:73:b2:d2:
1f:08:67:7f:5a:41:3f:e3:32:94:5d:92:72:b6:79:
54:b0:11:e3:80:72:0a:5e:ac:e2:98:e8:12:be:93:
d9:80:64:ef:03:b1:74:d4:c3:c8:97:fb:4e:03:fd:
25:fd:35:d2:eb:0e:ad:14:a3:b4:e0:96:65:10:d7:
f8:fe:d9:32:aa:df:30:7e:3f:ce:db:68:b6:f7:79:
c2:6c:63:a7:26:42:9b:c3:1e:ba:fb:5f:d2:61:30:
52:ca:9f:21:d3:f5:c9:09:6b:a1:f0:03:2c:34:f1:
d4:9d:44:ce:19:7a:73:58:76:b0:9b:ff:c0:a5:74:
78:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:E4:C5:9F:90:75:9C:23:D2:F9:9A:13:A5:28:30:1B:C1:69:9A:D9
X509v3 Authority Key Identifier:
keyid:2F:39:4F:99:00:7C:D1:72:C0:83:2F:84:15:F6:84:2A:14:75:17:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/2F394F99007CD172C0832F8415F6842A1475173D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F394F99007CD172C0832F8415F6842A1475173D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/2/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:71c::/32
Signature Algorithm: sha256WithRSAEncryption
1e:db:f7:41:eb:94:10:da:ca:2b:16:b0:5b:f1:83:e7:d9:76:
6a:6d:fb:49:e7:7c:34:0b:09:95:fd:49:0b:9b:b3:89:80:02:
20:31:bf:0a:79:83:dc:cc:48:94:ca:6a:61:08:9b:8b:1c:c6:
c7:4c:e0:a5:fd:12:47:c4:24:21:c4:4f:2d:22:8c:82:95:38:
1d:c3:4d:c6:60:5a:b1:a3:31:00:3f:a1:c6:8a:e5:31:dd:ff:
eb:f0:a0:3d:4f:d2:b2:aa:60:d4:27:80:dd:be:c6:e9:42:e6:
d9:85:7d:0b:f1:0c:95:68:df:2c:8e:7c:e1:8d:13:fb:a1:d3:
e1:7a:d5:04:43:8e:a1:ef:5b:c4:46:77:2a:64:b0:e7:70:0b:
b1:aa:02:f9:de:db:15:32:92:78:c8:66:6f:bd:89:13:fd:8f:
17:a5:41:68:5e:78:c3:37:66:d2:e5:14:27:cf:c9:20:ea:f2:
6d:c8:23:6a:0c:87:a4:f1:f3:b5:e8:c9:61:69:be:bc:b7:f7:
0b:75:29:79:3a:3f:08:38:65:2e:23:a6:1c:b1:4e:73:5e:6f:
0d:cd:c7:c9:f0:0f:9c:e7:d7:24:84:2f:4b:ac:d3:97:97:c6:
15:7e:ed:23:80:97:8b:49:18:8a:e7:d7:9d:20:6b:43:dd:12:
a3:91:c5:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 15:01:50 2025 by rpki-client