Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
File: 323830343a333237343a3a2f33322d3438203d3e20323635303739.roa (raw, json)
Hash identifier: 2c+9pdJ6OkTxBDgFRLluZj6Y82O2j4F3GXLy8e1/3U4=
Subject key identifier: 13:99:F4:AB:A9:FE:E4:C7:6F:D0:16:11:E2:89:50:B7:4B:9A:1E:28
Certificate issuer: /CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD
Certificate serial: 3C466CF7A484A60A186B3647905A79E4DB65A4FC
Authority key identifier: 2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
Signing time: Tue 23 Jul 2024 11:42:54 +0000
ROA not before: Tue 23 Jul 2024 11:37:54 +0000
ROA not after: Tue 22 Jul 2025 11:42:54 +0000
asID: 265079
IP address blocks: 2804:3274::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:46:6c:f7:a4:84:a6:0a:18:6b:36:47:90:5a:79:e4:db:65:a4:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD
Validity
Not Before: Jul 23 11:37:54 2024 GMT
Not After : Jul 22 11:42:54 2025 GMT
Subject: CN=1399F4ABA9FEE4C76FD01611E28950B74B9A1E28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:98:e0:2d:6e:97:e4:d7:60:da:b6:cd:75:19:
5b:3c:1f:5a:fb:df:47:35:cf:2b:22:07:e1:7b:51:
68:e6:f0:0b:77:ed:9d:ea:17:2a:ea:54:5d:31:a6:
85:1a:84:d1:d8:01:29:4e:3c:49:a3:89:0e:c7:8b:
8d:f4:d5:7a:f7:66:41:b9:91:a5:38:7a:03:94:71:
4a:af:95:6c:a0:da:ba:2f:0d:ff:fa:8c:e4:de:21:
55:1d:b2:a0:7f:9c:b0:47:23:45:65:51:41:4e:9b:
a7:84:f3:7f:e5:ba:50:53:4d:2b:8a:ff:cc:38:32:
78:ec:53:05:9a:82:f1:bf:de:00:c3:a7:ad:7e:f9:
9b:3b:fe:b7:c8:67:2e:83:97:30:e8:be:bc:8f:19:
26:51:26:5b:26:74:90:61:10:67:e0:3c:57:18:4d:
40:2f:4c:21:61:ee:e6:c4:d9:3e:a6:59:d7:92:f6:
7d:0f:73:b8:38:73:28:71:ac:53:a2:f2:72:a9:4a:
04:85:59:36:aa:c7:2c:f9:0a:43:63:10:30:0f:7f:
8e:49:dd:28:63:df:4a:e5:31:2b:41:ba:cb:78:05:
fe:f4:a0:b0:02:c3:ec:2f:1b:96:61:b6:cd:04:6f:
d8:07:04:91:c7:5a:6c:26:b0:e7:fd:4a:1a:fd:8e:
e4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:F4:AB:A9:FE:E4:C7:6F:D0:16:11:E2:89:50:B7:4B:9A:1E:28
X509v3 Authority Key Identifier:
keyid:2A:31:E3:D7:06:C9:4A:A2:BE:B3:D7:49:A7:2D:01:79:3F:5D:2A:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A31E3D706C94AA2BEB3D749A72D01793F5D2AAD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nUa6hVWLvnd3YyXxW6YMePALB7Tumbg43BePFJmadd5/2/323830343a333237343a3a2f33322d3438203d3e20323635303739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3274::/32
Signature Algorithm: sha256WithRSAEncryption
77:ad:48:86:80:6b:b4:6c:76:f8:bf:ed:0b:bc:34:42:27:f5:
1b:6e:23:7f:8e:78:b0:5a:c1:ae:de:e4:0a:d4:45:b6:1a:61:
5e:78:49:fd:87:9c:4a:dc:85:51:7e:71:c2:07:e0:dc:26:b7:
39:df:25:9f:67:27:e2:a6:dd:04:00:98:d7:6f:d2:64:6c:99:
eb:44:48:55:21:28:55:fa:3c:38:55:a9:9a:f1:44:8b:86:3f:
bf:d9:06:ec:06:59:11:81:10:7e:3b:17:22:d1:1c:3d:1f:26:
5c:58:3a:36:3d:de:7f:4e:41:5d:d1:4e:9a:8d:81:a7:4f:fc:
2a:d2:64:79:1e:30:6e:e1:d2:71:9b:29:d7:c4:24:ee:80:07:
c4:76:bb:a4:c1:c5:4d:cf:e6:e2:89:12:25:ec:6e:7d:e1:eb:
76:1b:af:86:04:f4:b8:92:65:bd:25:e0:39:cd:7c:2f:20:12:
5b:3b:bb:47:86:2b:a3:37:8e:e6:7b:ff:2e:2d:02:d4:0a:17:
c9:9b:39:c4:85:60:b4:47:13:1d:ee:a4:c6:43:08:15:e7:74:
29:db:c5:95:9c:c7:e3:29:00:13:61:42:12:ff:f4:a8:c0:22:
f0:10:fb:1f:d4:4d:82:5c:95:61:30:7d:4c:54:05:a9:dc:37:
68:73:ce:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:53 2025 by rpki-client