Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa
File: 323830343a3634383a3a2f33322d3332203d3e203533303338.roa (raw, json)
Hash identifier: YBEXT+AIxdYH0XKtwFhxC3LCzmuBAqhmsel1K3xllGc=
Subject key identifier: 90:99:2F:F7:7D:BD:91:63:6F:7F:84:5F:FC:1D:88:97:F2:61:58:74
Certificate issuer: /CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Certificate serial: 749F78961E59A40674D29B7786893828633B5361
Authority key identifier: 47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa
Signing time: Mon 02 Dec 2024 04:42:34 +0000
ROA not before: Mon 02 Dec 2024 04:37:34 +0000
ROA not after: Mon 01 Dec 2025 04:42:34 +0000
asID: 53038
IP address blocks: 2804:648::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:9f:78:96:1e:59:a4:06:74:d2:9b:77:86:89:38:28:63:3b:53:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832
Validity
Not Before: Dec 2 04:37:34 2024 GMT
Not After : Dec 1 04:42:34 2025 GMT
Subject: CN=90992FF77DBD91636F7F845FFC1D8897F2615874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:71:61:89:91:d7:00:cc:e5:40:cd:e5:1c:3c:
54:44:2b:5a:be:71:b6:39:ae:0f:49:de:e8:0d:ae:
6c:b0:1d:4c:36:8f:5c:74:c5:2f:e1:ae:74:32:01:
30:f3:3a:88:54:7e:c1:c4:7c:11:5f:bc:53:70:0a:
db:2d:0f:4d:d1:bb:85:f7:d3:c2:6e:91:0e:e0:da:
1e:0a:39:0d:38:fe:38:25:cf:45:4c:89:ad:51:3a:
43:6d:ae:7e:c9:92:9d:4b:56:85:2f:be:4f:7d:3d:
82:38:2a:40:f6:bc:8e:5f:5c:3e:45:22:77:9b:4b:
5e:20:5f:79:1d:bf:75:47:39:f9:eb:fa:10:8e:ba:
76:5e:e2:57:38:56:0d:42:1f:e0:24:a4:ab:98:de:
45:39:66:5b:66:ae:d8:8e:93:5c:ad:cd:94:69:e5:
56:89:ae:41:4b:be:60:a2:aa:1f:a9:3e:47:04:cd:
ff:a0:42:88:1a:d7:54:52:c5:ce:dd:0a:61:de:05:
b4:f9:b5:ce:35:83:db:24:2e:0c:79:c2:bb:56:8e:
a3:03:8e:8a:c8:63:33:fd:51:21:d3:66:ec:e1:3d:
75:08:94:b3:50:96:38:0b:cb:b6:5c:ea:af:87:a0:
bd:98:80:04:79:f0:19:e4:77:c6:bd:b3:f0:d1:d7:
a0:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:99:2F:F7:7D:BD:91:63:6F:7F:84:5F:FC:1D:88:97:F2:61:58:74
X509v3 Authority Key Identifier:
keyid:47:F5:D4:FF:59:FF:38:92:F3:D2:3C:49:FF:06:28:BA:F6:AC:18:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/47F5D4FF59FF3892F3D23C49FF0628BAF6AC1832.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fXHYcqmrT5a1henJAtDiGBCnAa4jXTvjDiKzB1cq7jU/0/323830343a3634383a3a2f33322d3332203d3e203533303338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:648::/32
Signature Algorithm: sha256WithRSAEncryption
37:d3:05:1b:0e:c9:bb:60:db:a1:06:7f:d4:b0:e3:b8:42:83:
8b:17:f2:c7:ca:f9:8b:c4:e0:38:fa:bf:4d:ad:58:a1:3c:5c:
12:06:23:13:7b:55:a9:53:b8:e3:c7:b3:4d:e5:72:b2:45:88:
bf:14:47:94:db:3c:c9:90:25:80:1f:dd:73:9c:d7:8f:ee:03:
97:e0:2a:6e:5c:db:61:5d:b6:fe:ab:31:73:c9:ea:bd:69:04:
2b:b5:07:b3:f3:d7:8d:0a:db:6d:06:05:33:af:24:a0:31:f5:
ea:0f:0a:6d:09:de:92:97:0d:26:5e:70:ee:8e:5b:54:2f:5a:
8a:c7:f9:f6:b4:1b:86:e7:f7:90:ee:53:5f:2a:63:f2:3d:2a:
00:6e:2a:16:8a:01:bf:76:10:22:67:a3:f7:dd:c8:ba:7c:25:
7e:81:de:db:a9:43:d5:82:27:3a:86:a8:54:7a:53:66:4d:be:
ea:f3:0b:e0:0b:04:c7:eb:34:ba:8b:28:98:62:66:64:b2:09:
c0:50:35:61:80:df:f5:8a:26:4c:df:75:78:16:59:85:5b:ca:
fa:d1:8c:9b:af:f3:64:e8:5c:15:0e:13:c0:bf:77:73:d1:05:
4b:8a:cc:99:43:be:25:2c:c7:1d:21:d9:35:34:60:9b:fc:96:
b4:f9:65:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:20:45 2025 by rpki-client