Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a383030303a3a2f33332d3333203d3e20323638323134.roa
File: 323830343a346462343a383030303a3a2f33332d3333203d3e20323638323134.roa (raw, json)
Hash identifier: GDt+dgVdVwALiCmCpGdzLR/bL5ThROQ82oB+D2KBLKo=
Subject key identifier: 5C:B4:86:E6:63:22:9A:88:8E:1A:CE:C8:88:C5:7A:84:44:17:A8:90
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 57A298207B21B42BB2A9E844CE417286D1C591F7
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a383030303a3a2f33332d3333203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:29:50 +0000
ROA not before: Wed 22 May 2024 20:24:50 +0000
ROA not after: Wed 21 May 2025 20:29:50 +0000
asID: 268214
IP address blocks: 2804:4db4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:a2:98:20:7b:21:b4:2b:b2:a9:e8:44:ce:41:72:86:d1:c5:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:24:50 2024 GMT
Not After : May 21 20:29:50 2025 GMT
Subject: CN=5CB486E663229A888E1ACEC888C57A844417A890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:71:dc:22:bc:5b:fe:c3:6c:88:8f:c5:d1:93:
22:d6:fd:00:b5:b0:fc:34:07:3e:bc:01:3d:e7:90:
39:66:eb:f2:d0:5f:41:a7:53:8e:5a:db:60:07:7e:
89:de:1f:a9:29:d7:32:19:0b:5b:66:63:d0:a8:04:
56:f3:c7:21:89:dd:0d:82:66:13:b8:67:9a:79:10:
64:9f:1a:a9:91:b6:21:b4:b7:68:4d:8a:33:78:c3:
df:b2:fa:8f:06:7e:c8:d3:fc:df:d9:c6:60:1f:0e:
15:21:5a:1a:bf:e0:c4:ce:92:7e:d7:5a:c6:c0:84:
3b:e7:45:97:35:e3:ae:76:6d:63:7c:33:40:cc:f5:
44:bc:3c:bc:9d:57:52:fa:e5:13:be:f9:8a:23:82:
59:78:d8:bf:b1:99:f9:e7:9b:e4:90:6b:8a:b1:2d:
e7:87:e6:87:c4:06:d4:52:07:aa:63:4e:14:e8:75:
ee:17:c5:3f:1e:e0:aa:fe:71:d7:f0:35:76:f7:be:
20:8f:a3:5e:5a:7a:98:6f:81:89:69:f6:93:51:d1:
37:e4:18:15:a0:b9:30:5e:ac:1c:6d:44:6e:5f:bb:
96:14:df:67:18:b4:50:df:81:4f:ed:7c:d6:4f:47:
43:31:b5:e9:31:bf:2b:b1:1d:f1:95:34:46:13:d7:
ef:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B4:86:E6:63:22:9A:88:8E:1A:CE:C8:88:C5:7A:84:44:17:A8:90
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a383030303a3a2f33332d3333203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4db4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
6d:d3:14:59:37:17:77:1e:be:37:3a:4a:96:45:c4:7f:97:c2:
64:8d:74:7c:36:88:e2:7a:10:bb:46:8b:03:50:23:64:45:22:
c7:e0:d7:e0:c9:cf:e3:e8:8c:4c:d2:8b:93:da:c4:36:ba:6e:
6f:fc:0b:bb:df:f8:0b:a3:e6:37:9f:b5:29:65:c9:e3:c4:f0:
a9:a9:61:40:fb:3a:21:40:d2:bc:40:d7:4e:37:9c:03:a0:d2:
9a:0f:87:53:b4:d6:d0:8d:12:0a:2a:3d:2e:83:bc:31:5d:fd:
c2:db:f7:2e:5d:3b:2a:98:1f:b6:87:49:48:10:03:0e:b3:80:
25:28:ce:b9:4c:d6:85:66:61:2d:cf:52:b4:4f:6f:b0:f1:95:
a2:87:a2:ba:9c:4a:ca:20:95:8d:2a:56:e2:db:9a:74:7f:1b:
ba:4b:d8:55:97:3f:c6:51:83:a5:ba:e1:fa:cb:3c:c5:b5:2e:
95:aa:32:6e:f4:ac:67:35:45:f4:fe:98:f5:71:26:11:d5:2d:
0f:f2:cf:1c:b9:df:7d:4c:f4:bd:4c:e3:0b:30:58:f9:6d:db:
03:1e:37:9c:28:cb:6f:72:0e:76:9a:33:11:3f:07:38:59:3f:
7d:bc:1a:67:b4:51:bf:67:fb:e3:5c:07:d0:90:e1:87:0c:d2:
c2:78:12:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:44:30 2025 by rpki-client