Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33332d3333203d3e20323635333238.roa
File: 323830343a326532383a3a2f33332d3333203d3e20323635333238.roa (raw, json)
Hash identifier: Br2NChy4wmsbwllqr5+VPI6oO84zmWxC645ywuhswNo=
Subject key identifier: D6:4F:E2:78:A4:03:FE:F6:CC:5D:23:89:90:B9:D4:C1:F2:BF:55:8C
Certificate issuer: /CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Certificate serial: 251DF6D9FA2CA15589EF7531B95844DC40102393
Authority key identifier: A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33332d3333203d3e20323635333238.roa
Signing time: Thu 28 Nov 2024 12:43:19 +0000
ROA not before: Thu 28 Nov 2024 12:38:19 +0000
ROA not after: Thu 27 Nov 2025 12:43:19 +0000
asID: 265328
IP address blocks: 2804:2e28::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:1d:f6:d9:fa:2c:a1:55:89:ef:75:31:b9:58:44:dc:40:10:23:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF
Validity
Not Before: Nov 28 12:38:19 2024 GMT
Not After : Nov 27 12:43:19 2025 GMT
Subject: CN=D64FE278A403FEF6CC5D238990B9D4C1F2BF558C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5e:29:a4:2b:7b:9a:c9:72:79:3a:c8:c6:30:
b8:75:c5:9d:20:10:07:29:0c:d9:a9:9d:be:7d:93:
9b:7b:76:57:fb:5e:41:db:81:51:47:01:c9:2b:ec:
3f:8e:95:35:0a:f2:ce:1e:21:5b:eb:11:b4:62:88:
a5:a1:4c:10:32:34:ef:29:ca:3d:99:46:0b:7c:6c:
86:06:5a:26:c8:e8:54:a5:b4:aa:c1:34:a5:11:76:
b3:71:62:40:fd:60:66:64:16:03:b6:8d:0f:61:90:
b3:68:40:4d:32:a2:19:65:22:c7:01:c8:11:f5:4e:
47:39:f0:05:92:e0:4d:76:48:7a:5d:85:89:9c:f0:
dc:a2:ab:98:6a:53:75:cc:89:99:f1:f2:b9:ed:d7:
d8:ec:72:73:75:9d:c2:50:e6:60:ca:af:ce:ea:50:
c8:ec:ef:d9:08:77:74:bf:59:ce:70:a4:27:9d:f0:
79:e7:09:86:87:5b:e1:cf:62:45:5d:49:77:94:71:
8c:11:21:e5:b4:e4:06:c2:71:c6:77:13:98:c7:85:
2e:c6:2f:85:38:eb:99:e0:01:e6:17:64:de:16:1d:
fc:33:eb:08:a1:68:14:17:e3:7b:80:2a:a8:cf:a4:
94:7c:4a:88:05:fe:b1:e0:c5:30:b2:c0:6d:b6:18:
39:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:4F:E2:78:A4:03:FE:F6:CC:5D:23:89:90:B9:D4:C1:F2:BF:55:8C
X509v3 Authority Key Identifier:
keyid:A5:ED:93:21:67:5D:2D:CF:B9:6C:68:BC:0A:CB:F4:22:5D:53:6C:CF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A5ED9321675D2DCFB96C68BC0ACBF4225D536CCF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/0/323830343a326532383a3a2f33332d3333203d3e20323635333238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e28::/33
Signature Algorithm: sha256WithRSAEncryption
da:a7:a2:35:81:46:f0:1d:4c:2b:3b:e4:37:d5:4d:a6:14:b9:
fc:34:41:03:42:13:78:97:52:98:d3:5d:ba:b8:c5:54:e0:bf:
53:5a:1a:73:10:6b:57:79:bc:92:22:23:ad:13:69:b5:94:89:
f7:3d:4a:da:b1:03:2a:96:9d:0a:c9:02:d5:da:4c:ec:de:0e:
aa:79:5d:af:53:6a:23:15:f1:a2:7c:ad:71:c8:57:5b:2a:63:
28:cf:bf:5e:0b:39:70:7c:32:b4:0a:56:48:17:e4:47:11:33:
90:8a:16:94:48:69:16:e4:36:7e:08:9a:5d:0e:35:0c:41:ca:
20:90:b3:cf:dc:34:ad:f3:d5:17:db:9e:65:6b:45:dd:8a:d7:
e9:59:5c:bc:a9:d1:77:70:93:1d:9c:c1:c5:9e:da:4f:45:97:
ba:64:31:ed:3e:d1:74:20:11:96:fe:fb:26:2a:c7:1f:24:bb:
1e:02:ef:bd:9a:ff:84:e3:6d:6a:55:eb:20:63:4c:fa:18:6e:
1e:5b:b9:4a:19:22:a8:3c:49:d4:96:a4:f8:74:cc:c8:a1:d9:
73:bc:02:cc:32:bb:9f:42:06:19:6d:32:63:b9:d4:54:b2:4e:
bf:4d:1a:fc:08:e6:05:b1:79:6a:0d:41:fa:f4:34:d1:f5:c2:
43:ee:d8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:55 2025 by rpki-client