Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa
File: 323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa (raw, json)
Hash identifier: +Gs9hLnyMxHBIqdkQRppms3DyICEc1jDdi56+tUfvIY=
Subject key identifier: 76:8F:A8:13:D7:47:D0:D1:9D:CF:2F:87:26:F3:B1:ED:13:B0:B3:CE
Certificate issuer: /CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Certificate serial: 6C1A852A9E85CA42475658474D5F25515B949C95
Authority key identifier: 8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa
Signing time: Thu 04 Jan 2024 22:00:01 +0000
ROA not before: Thu 04 Jan 2024 21:55:01 +0000
ROA not after: Thu 02 Jan 2025 22:00:01 +0000
asID: 263512
IP address blocks: 2804:130c:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1a:85:2a:9e:85:ca:42:47:56:58:47:4d:5f:25:51:5b:94:9c:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A5F6680E29DC886B52ADBE393C0313E3C310D32
Validity
Not Before: Jan 4 21:55:01 2024 GMT
Not After : Jan 2 22:00:01 2025 GMT
Subject: CN=768FA813D747D0D19DCF2F8726F3B1ED13B0B3CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:ee:93:76:74:33:48:46:ab:db:51:17:25:
ff:d6:25:af:87:f1:2f:25:4c:d7:ff:2d:4c:e1:23:
69:53:60:73:9e:e3:ab:45:ca:31:fe:7b:ab:63:54:
98:f4:94:df:be:9b:9c:a6:92:b2:45:9b:2e:d9:1a:
31:c4:d1:04:90:d5:6e:14:ee:23:4d:0d:e5:15:be:
e6:77:ca:f3:10:26:ea:34:a2:23:83:7e:66:db:4c:
4b:12:0e:fc:80:98:e3:c1:f2:7a:a4:c1:e3:1a:28:
4c:55:ad:5e:f9:72:09:82:67:07:0f:28:e5:e3:85:
45:81:d6:37:8c:16:57:44:b1:cd:d8:25:46:73:06:
25:b4:5b:19:12:bd:41:3e:bd:d8:6f:44:24:04:6b:
07:b6:90:f7:da:af:b7:fc:3c:69:60:4b:61:79:08:
23:76:1b:8a:f3:15:91:33:0a:8f:b0:e6:f3:a7:7a:
04:db:26:7d:cb:da:30:79:86:fc:8b:b0:5d:00:9b:
d1:59:50:20:48:e9:10:7c:1e:da:43:ba:1e:92:e7:
90:75:8f:bd:59:f7:26:f2:0b:3f:f7:05:4e:7e:d9:
43:01:76:52:6a:e7:0d:6f:3e:ff:51:69:f7:ce:47:
e7:68:be:6b:a7:40:10:fe:2a:a0:21:8a:39:05:14:
cc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8F:A8:13:D7:47:D0:D1:9D:CF:2F:87:26:F3:B1:ED:13:B0:B3:CE
X509v3 Authority Key Identifier:
keyid:8A:5F:66:80:E2:9D:C8:86:B5:2A:DB:E3:93:C0:31:3E:3C:31:0D:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A5F6680E29DC886B52ADBE393C0313E3C310D32.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9fqBdnWTUUP1rZpxpvnmbTsKBPEUNjz1fSMwVU98frNd/0/323830343a313330633a3130303a3a2f34302d3430203d3e20323633353132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:130c:100::/40
Signature Algorithm: sha256WithRSAEncryption
2a:4c:5f:05:6c:36:53:ac:03:9f:34:b5:c3:33:46:38:34:b4:
3a:74:fe:a5:59:93:ec:13:de:13:9b:2e:aa:9b:3e:ea:f0:0b:
2f:af:20:cf:58:64:33:bd:5d:89:f1:43:74:d3:dd:7f:80:e7:
5a:8a:de:42:dd:fb:8d:96:5b:b5:fb:21:c9:03:f1:fc:a1:a9:
28:d1:a3:fe:27:43:c4:d1:c9:6a:77:18:f2:ea:a3:bf:db:92:
f6:29:2a:dc:ef:70:f9:3a:b9:80:89:ba:ce:7c:53:ed:6e:2d:
ce:9f:67:9c:d2:65:92:f3:b2:a4:a0:7c:ff:da:e2:3f:c7:ec:
b0:61:da:f4:4f:6b:e0:17:34:cc:4b:4d:33:37:51:c8:0a:f6:
b7:ab:d5:c8:1d:2e:bd:09:1c:5e:f7:8e:3c:3a:fd:f5:2e:6d:
00:db:d0:19:79:df:1e:6f:b4:c6:0e:94:e1:ab:3d:ec:c9:34:
db:d0:2c:03:af:46:00:f5:0c:c2:96:8f:06:a4:25:f7:09:c7:
d5:fe:7a:37:a3:4d:14:98:06:ed:22:70:e9:41:b4:81:ce:80:
be:a2:65:38:55:4d:06:13:68:9e:d6:ac:1e:02:70:78:c3:14:
76:1b:ba:a9:bc:e1:6f:67:3a:0f:ec:14:99:63:55:b1:fa:77:
b5:b1:1c:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:25 2025 by rpki-client