Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa
File: 323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa (raw, json)
Hash identifier: 6iOVmd8YArgX0bCVDspDrIRibUgqHhRnwnDviH5gaas=
Subject key identifier: 3E:00:67:A4:20:B1:6D:C7:8B:2C:FA:6E:FB:F8:00:51:C3:A6:5F:98
Certificate issuer: /CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Certificate serial: 08DDC2C999CC2BA9438B54FB65B3AFA44C457F67
Authority key identifier: DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa
Signing time: Wed 28 Feb 2024 14:03:20 +0000
ROA not before: Wed 28 Feb 2024 13:58:20 +0000
ROA not after: Wed 26 Feb 2025 14:03:20 +0000
asID: 28210
IP address blocks: 2804:56c:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:dd:c2:c9:99:cc:2b:a9:43:8b:54:fb:65:b3:af:a4:4c:45:7f:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DBC33C659667AA92A6A0F25AEFB62A60338F5A4B
Validity
Not Before: Feb 28 13:58:20 2024 GMT
Not After : Feb 26 14:03:20 2025 GMT
Subject: CN=3E0067A420B16DC78B2CFA6EFBF80051C3A65F98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:77:17:8b:7d:a3:cf:34:18:07:ce:fb:9b:32:
b1:7a:e2:09:74:7f:4b:a5:ab:38:c4:f1:78:99:31:
87:cb:97:07:d2:11:b8:91:51:70:44:28:42:ef:23:
14:13:3e:b2:bb:b3:25:5d:ad:29:05:70:af:0e:73:
e3:fe:f6:fb:0d:fc:43:cb:0a:0a:8c:bf:cf:61:e5:
a1:53:ce:7a:8d:1a:73:ae:37:00:db:12:29:a4:1c:
aa:c2:28:e5:38:3b:89:b2:13:87:b2:86:76:c6:37:
2a:91:3e:29:ce:58:71:cd:92:c3:f2:2b:4f:d4:e3:
c5:c2:ca:e7:d0:e9:36:ea:66:06:b8:b6:00:55:7b:
b4:fc:f5:30:40:24:8c:fc:59:ea:42:48:a7:9d:3f:
04:5d:0d:e9:9a:44:60:6c:37:f7:9e:c4:ea:47:29:
af:67:1a:07:58:07:fb:81:7c:b7:a7:04:e1:89:07:
e9:d1:22:5d:59:e3:fc:0c:88:37:63:5c:15:d3:30:
a4:53:a7:bf:68:0e:fa:97:5d:af:ae:36:08:d4:b9:
18:56:2f:23:35:c1:fd:42:8b:07:f9:20:5d:e9:23:
1e:ab:81:74:40:fe:04:86:ea:bc:2d:11:84:d3:53:
00:0f:43:63:b2:9a:df:61:28:49:0b:7c:c7:8f:dd:
cd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:00:67:A4:20:B1:6D:C7:8B:2C:FA:6E:FB:F8:00:51:C3:A6:5F:98
X509v3 Authority Key Identifier:
keyid:DB:C3:3C:65:96:67:AA:92:A6:A0:F2:5A:EF:B6:2A:60:33:8F:5A:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBC33C659667AA92A6A0F25AEFB62A60338F5A4B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3130303a3a2f34302d3430203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:56c:100::/40
Signature Algorithm: sha256WithRSAEncryption
99:01:ec:99:e8:99:a1:0f:cd:98:9e:6f:51:51:77:21:06:75:
71:b8:16:ff:44:a3:54:c1:ad:80:78:45:9a:e1:f8:c8:69:25:
21:2e:03:07:f7:d4:90:f4:85:ea:76:3f:6a:43:e8:4c:2e:0b:
8a:3c:e5:bd:37:a4:2b:87:64:c1:5a:97:49:f9:67:f6:f8:24:
13:53:7a:2f:e4:53:41:9f:88:0a:55:b0:2f:8d:7b:f1:b6:cc:
7f:35:9b:95:a5:a0:ae:9b:e8:b4:63:cb:94:ea:e9:5d:e2:30:
88:26:5b:15:94:4c:8d:c8:11:91:ee:d4:ac:38:eb:bb:2a:bc:
1d:7e:71:25:04:f2:8f:1d:38:9b:ca:6e:39:18:5d:82:03:cf:
d4:64:06:64:04:f7:90:10:58:2b:29:d7:20:13:9e:ff:ba:10:
68:76:c0:e1:19:8d:25:0d:3d:52:3f:df:e2:df:33:81:52:84:
28:12:a2:68:02:9a:4a:e3:cc:d9:7f:a5:a3:b7:b7:01:83:0c:
0b:e3:c1:71:48:4c:ef:06:fe:ac:77:3a:c0:52:42:1c:cf:e9:
20:b6:0d:9d:ff:81:fd:35:20:fa:c4:63:d6:17:f4:b9:fd:49:
a7:f8:2e:75:9a:e3:2f:e6:b3:48:15:2f:bc:85:11:7f:e3:f4:
03:71:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:17 2025 by rpki-client