Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3335203d3e203631393031.roa
File: 323830343a313337303a3a2f33322d3335203d3e203631393031.roa (raw, json)
Hash identifier: JbxJYl8qLb5LmoeHAgBH5s9GGZY1mvmyVk5tLzgQdRY=
Subject key identifier: 77:C6:8E:20:8E:38:47:CB:98:4A:E3:17:63:BF:D2:36:AB:BF:52:34
Certificate issuer: /CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Certificate serial: 725EEF4806A0FA08D48AECF2079F28E76E3421CA
Authority key identifier: 83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3335203d3e203631393031.roa
Signing time: Tue 07 Nov 2023 14:19:07 +0000
ROA not before: Tue 07 Nov 2023 14:14:07 +0000
ROA not after: Tue 05 Nov 2024 14:19:07 +0000
asID: 61901
IP address blocks: 2804:1370::/32 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:5e:ef:48:06:a0:fa:08:d4:8a:ec:f2:07:9f:28:e7:6e:34:21:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=834FD73E60D786FC8CCB3F96DB2FA9765CEC8335
Validity
Not Before: Nov 7 14:14:07 2023 GMT
Not After : Nov 5 14:19:07 2024 GMT
Subject: CN=77C68E208E3847CB984AE31763BFD236ABBF5234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bb:c7:90:dc:ed:d1:8f:32:4f:ca:ad:b6:4c:
f0:20:42:09:f6:07:48:3c:4c:9a:1c:e4:10:f7:2d:
0c:c9:f3:52:25:d3:c8:1d:3f:c8:91:79:09:10:f5:
7b:6f:d0:5a:23:f8:01:5a:32:86:48:a8:7d:54:ec:
a0:ab:4d:27:57:76:a4:69:0e:04:34:69:e4:32:45:
45:0f:8c:96:09:b4:e6:8f:00:81:0d:89:80:8d:d6:
3d:a8:1f:50:39:a4:d3:8d:93:3d:7c:8b:fd:9e:de:
f2:14:d6:97:0b:c6:4f:aa:c6:fb:79:ac:f7:36:81:
a1:80:f3:65:05:d1:8e:b5:b2:19:91:d4:77:01:11:
35:5d:59:f7:b0:c0:0f:83:84:0d:93:9d:32:ed:6d:
0b:77:75:9c:3a:2d:96:d8:06:26:74:21:00:aa:2b:
3f:8d:78:7c:de:35:4d:b1:83:b8:8a:08:28:08:51:
1b:6e:79:b3:53:8e:a1:90:e0:fc:29:8c:0a:94:b3:
60:ac:0d:c2:44:d6:d8:21:55:69:93:8e:69:4a:47:
a8:96:66:5f:c9:b9:bb:d2:8c:c7:fe:72:c9:aa:49:
d8:42:03:63:cc:f5:47:e1:c3:ac:d0:e8:75:bc:e6:
f3:e5:03:a9:04:a4:84:9a:23:43:01:68:a8:15:43:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:C6:8E:20:8E:38:47:CB:98:4A:E3:17:63:BF:D2:36:AB:BF:52:34
X509v3 Authority Key Identifier:
keyid:83:4F:D7:3E:60:D7:86:FC:8C:CB:3F:96:DB:2F:A9:76:5C:EC:83:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/834FD73E60D786FC8CCB3F96DB2FA9765CEC8335.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/0/323830343a313337303a3a2f33322d3335203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1370::/32
Signature Algorithm: sha256WithRSAEncryption
af:55:51:39:50:ea:59:a8:69:24:f3:08:9c:8b:57:4f:39:bf:
40:01:74:81:75:df:45:48:22:3b:9b:f3:a1:26:dd:97:e9:90:
8c:19:66:e0:bb:cc:93:30:49:84:95:f9:7f:ca:2e:44:68:ca:
ed:b2:2f:a7:63:17:11:49:8c:51:a3:42:8d:c5:4b:63:9c:ac:
7a:f3:28:a0:ff:94:98:b7:64:7a:b2:d6:c7:68:5e:26:a1:59:
a8:b1:ff:96:1b:f2:f3:7d:85:21:89:79:ab:b3:28:77:b8:6b:
76:23:80:03:be:58:8c:e5:7f:2e:ea:cc:7b:68:12:79:fa:11:
51:0a:c6:3b:46:90:88:45:fe:81:45:18:70:75:b8:31:4d:05:
56:31:cc:2f:ae:69:82:6a:39:1b:3b:2d:92:ab:d2:c6:40:1c:
3e:fb:74:7d:07:43:6f:c0:fb:ae:38:f2:50:d0:64:25:b0:a7:
e0:df:6f:fd:00:ad:d7:a9:35:db:de:af:a8:7b:f8:f5:7a:39:
18:4c:7a:2b:b7:fd:aa:d6:01:6d:c7:90:31:bb:79:59:c9:70:
4d:84:48:f0:1e:6f:31:e2:79:d5:aa:2b:c5:5f:7a:24:33:b3:
e3:d0:53:e0:7e:48:21:77:a7:71:af:14:dc:cd:a8:9c:30:8d:
c9:cc:17:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:22 2025 by rpki-client