Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa
File: 323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa (raw, json)
Hash identifier: sLQoA0ACefJ0gZGmzb+2S8z8Zvm0oLht31ZB/OM9ygY=
Subject key identifier: F4:0D:E4:3B:02:20:E8:85:E8:4F:B5:7A:F2:E9:B1:2E:2C:80:87:00
Certificate issuer: /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial: 041739CF54B0882E88F82EBA1E31DEEE50A33811
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa
Signing time: Mon 14 Aug 2023 15:58:37 +0000
ROA not before: Mon 14 Aug 2023 15:53:37 +0000
ROA not after: Mon 12 Aug 2024 15:58:37 +0000
asID: 268192
IP address blocks: 2804:4d5c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:17:39:cf:54:b0:88:2e:88:f8:2e:ba:1e:31:de:ee:50:a3:38:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Validity
Not Before: Aug 14 15:53:37 2023 GMT
Not After : Aug 12 15:58:37 2024 GMT
Subject: CN=F40DE43B0220E885E84FB57AF2E9B12E2C808700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:fe:34:f4:a8:11:7e:ea:48:ba:b4:57:99:
84:97:cd:c1:fa:8c:4b:f6:70:92:f6:0a:d8:1c:04:
a1:5a:ea:a0:f4:b3:96:70:fe:4a:19:2a:e4:c5:cd:
da:40:e3:16:a0:90:b5:89:33:9b:49:e0:a2:d4:df:
fa:08:c8:c4:1b:b9:da:cf:66:69:ca:3c:dd:7d:84:
da:2e:72:e8:1c:d2:2b:65:d1:aa:0b:08:e6:68:e5:
85:8e:90:ee:ee:41:d7:ae:0c:2f:36:db:cb:a0:84:
ab:fe:86:3a:1f:30:d1:e6:a1:e4:70:0d:bf:b1:c5:
70:4a:2b:ba:c9:73:8d:d4:9c:c1:41:41:19:5f:cf:
3b:d1:0f:1d:7e:12:dd:50:2b:22:54:1e:81:3a:f4:
f8:71:3c:63:5b:62:64:82:b3:93:65:94:7e:63:b7:
dc:ae:ba:a0:5c:28:b2:f8:5b:e4:c0:40:48:4f:70:
1d:55:9e:04:f4:b6:34:5e:37:37:6f:3e:a2:51:b7:
73:27:71:17:dc:65:85:5a:9e:ce:e6:52:e2:67:bb:
59:6e:e4:e7:fd:09:cc:51:f8:a1:26:2d:a1:8a:53:
4f:42:93:53:cb:54:e9:16:f2:18:bf:e1:da:a6:57:
17:2a:1a:41:61:27:1a:3c:e6:30:ec:6d:06:a0:cd:
8d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0D:E4:3B:02:20:E8:85:E8:4F:B5:7A:F2:E9:B1:2E:2C:80:87:00
X509v3 Authority Key Identifier:
keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a383030303a3a2f33332d3333203d3e20323638313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d5c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
8c:a3:74:f8:aa:d3:ef:27:35:69:02:82:28:78:60:52:c0:12:
7e:5a:83:82:85:1d:d8:5e:8e:c2:c6:96:ae:df:b8:af:7b:ab:
5c:cc:2b:1f:c4:5c:47:f9:7b:77:b6:db:62:52:68:f6:d4:8e:
fd:89:e1:d9:40:bb:8b:db:6a:27:70:a8:d1:96:9f:42:72:8c:
f8:f0:11:af:ee:63:1f:69:f6:67:fc:f8:7a:0c:e2:b9:05:26:
cd:bd:44:80:79:d0:b2:75:cf:09:e9:14:e7:13:f7:34:bc:a1:
3e:97:a4:33:26:dc:0a:d8:0d:e7:33:0e:d8:6c:a5:27:7c:a9:
c8:c6:65:e8:ad:87:d0:c8:14:bb:52:83:08:f5:73:ef:29:98:
55:7a:41:1b:bf:11:20:59:c2:02:e5:f4:8b:49:3e:a0:cc:d1:
20:d1:99:39:c3:ae:31:a1:72:3f:82:e5:b0:61:22:4c:31:d8:
98:f1:95:f4:96:10:75:76:58:0d:e6:68:86:26:cc:a7:66:1a:
1e:d6:26:af:55:7d:47:e4:80:c3:4f:65:a4:21:79:18:b9:4e:
75:2a:92:1d:fa:ea:10:f1:0f:52:8a:48:5c:31:60:f4:59:51:
32:41:72:c1:6c:e4:a4:ed:19:72:0f:7f:cf:35:60:d6:63:a4:
a4:46:9e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:38:52 2025 by rpki-client