Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3430203d3e203533313832.roa
File: 323830343a313138633a3a2f33322d3430203d3e203533313832.roa (raw, json)
Hash identifier: Jf6GYEXzGuf/madC/2uGkUKwSaKa0HSgw61Tdo8hgNU=
Subject key identifier: 87:D3:5B:F1:96:4D:8D:51:E8:E4:69:2A:5E:1C:0E:35:81:54:43:55
Certificate issuer: /CN=5CB9E888F81253676155F413B2AE484B47AF5245
Certificate serial: 6FB6E2E2DF401AC6133B7F790ED6E70AB9262E1D
Authority key identifier: 5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3430203d3e203533313832.roa
Signing time: Fri 22 Mar 2024 19:17:04 +0000
ROA not before: Fri 22 Mar 2024 19:12:04 +0000
ROA not after: Fri 21 Mar 2025 19:17:04 +0000
asID: 53182
IP address blocks: 2804:118c::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:b6:e2:e2:df:40:1a:c6:13:3b:7f:79:0e:d6:e7:0a:b9:26:2e:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5CB9E888F81253676155F413B2AE484B47AF5245
Validity
Not Before: Mar 22 19:12:04 2024 GMT
Not After : Mar 21 19:17:04 2025 GMT
Subject: CN=87D35BF1964D8D51E8E4692A5E1C0E3581544355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:44:c9:67:5c:e1:bd:c9:d9:31:e2:38:83:9d:
65:57:70:68:2c:4f:ce:de:3f:54:38:31:0a:e4:49:
db:3a:5d:7c:ef:84:c1:f9:a9:cd:34:3f:b7:20:39:
f2:ab:ad:10:18:56:f3:36:c5:64:01:9c:59:84:73:
31:49:7e:53:83:8c:3e:d2:4c:d7:a1:23:ed:b1:41:
9e:81:d9:d9:35:c9:e0:10:dc:8c:34:99:6d:2c:0a:
a4:02:b2:70:0b:9a:ac:5d:bf:d8:e9:d3:61:37:30:
07:98:01:9a:d5:b5:b2:08:51:ab:65:7c:d9:95:de:
9d:f1:32:ca:16:52:84:ae:9d:44:db:4d:f7:8e:4f:
9c:c3:59:eb:9c:15:b1:0b:77:df:d4:ae:a6:bb:c5:
a3:32:b3:09:af:1d:2f:59:98:ad:bc:22:7c:0c:b9:
59:8e:ec:2e:bb:87:77:35:95:db:63:39:3e:bd:32:
f3:0b:6a:8a:44:d2:cc:1c:a9:dc:02:72:7b:ee:67:
99:32:5a:3f:63:de:9b:d0:46:26:1a:21:91:d4:cc:
32:37:ec:fd:3d:dd:05:d0:a5:08:b1:4c:4f:a2:cb:
72:e1:97:fc:7f:0c:2f:5b:0d:e7:46:b3:ea:26:77:
d4:98:3f:65:82:f5:99:db:c5:dd:27:10:ce:c5:68:
46:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:D3:5B:F1:96:4D:8D:51:E8:E4:69:2A:5E:1C:0E:35:81:54:43:55
X509v3 Authority Key Identifier:
keyid:5C:B9:E8:88:F8:12:53:67:61:55:F4:13:B2:AE:48:4B:47:AF:52:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/5CB9E888F81253676155F413B2AE484B47AF5245.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CB9E888F81253676155F413B2AE484B47AF5245.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RW8WFmZc9sF7yybFLBUvroEv5N4ExUkpaeniKkubWZx/0/323830343a313138633a3a2f33322d3430203d3e203533313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:118c::/32
Signature Algorithm: sha256WithRSAEncryption
56:9b:70:9f:2b:76:5a:b6:2f:cb:ad:ae:ca:8d:cb:85:30:87:
81:d1:cd:de:94:d7:00:b5:b5:ea:ce:aa:f6:0b:c9:72:0d:b7:
ef:b3:81:65:4c:33:46:c3:8d:22:e5:ea:84:0e:df:e6:6b:ee:
54:28:66:4e:8a:cd:c4:cf:08:24:5a:fc:bb:5e:52:79:96:01:
05:b2:3f:e1:db:99:dd:9d:c1:9f:13:27:a8:f6:4e:3a:eb:71:
39:40:bf:f3:fa:c6:56:30:08:5f:fa:0b:4d:31:93:b3:aa:03:
8c:8a:41:a5:13:6d:28:59:d3:ae:74:95:3e:18:f7:61:77:0c:
24:f0:d8:05:75:6c:0c:8c:bc:3c:fe:07:38:4c:be:04:99:b1:
8b:9b:f4:4e:71:28:64:ff:c4:b1:0e:82:ed:d3:05:65:ac:b9:
45:8f:7d:05:7f:3b:df:66:67:a6:79:2a:2c:97:91:83:5c:2a:
3b:24:9e:61:95:e5:90:f2:52:01:e7:b6:6c:54:32:c9:85:1f:
1a:18:97:6b:74:a2:f3:d7:a1:42:5b:0c:cc:76:f5:b6:44:2e:
80:05:05:40:66:63:60:bc:d7:a3:3b:14:db:8c:39:3c:b4:4c:
a3:9c:3f:13:90:87:5f:af:0a:a3:73:ef:98:cb:dd:23:4f:5d:
f5:3c:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:51 2025 by rpki-client