Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
File: 323830343a6431633a3a2f33322d313238203d3e203532363030.roa (raw, json)
Hash identifier: oq5z4MKGVhiWQS5ivyl7CEcLZoO/AKi/85lF+LfCckg=
Subject key identifier: 98:BD:5E:B7:2D:27:BE:19:9C:28:F0:BC:81:D7:5D:F8:33:9E:55:13
Certificate issuer: /CN=C814F3C3BD099DB3172AB8FC4E3337706D0072FE
Certificate serial: 401C8F70BDFFE497DE11CADC96620E488B350A39
Authority key identifier: C8:14:F3:C3:BD:09:9D:B3:17:2A:B8:FC:4E:33:37:70:6D:00:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
Signing time: Wed 08 Nov 2023 17:35:59 +0000
ROA not before: Wed 08 Nov 2023 17:30:59 +0000
ROA not after: Wed 06 Nov 2024 17:35:59 +0000
asID: 52600
IP address blocks: 2804:d1c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:1c:8f:70:bd:ff:e4:97:de:11:ca:dc:96:62:0e:48:8b:35:0a:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C814F3C3BD099DB3172AB8FC4E3337706D0072FE
Validity
Not Before: Nov 8 17:30:59 2023 GMT
Not After : Nov 6 17:35:59 2024 GMT
Subject: CN=98BD5EB72D27BE199C28F0BC81D75DF8339E5513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:0e:a4:c8:0c:f0:81:c5:95:07:5b:f1:43:24:
8b:70:1e:de:a5:6b:fa:59:51:47:f6:ba:7b:8d:0f:
19:32:3a:c9:36:35:f1:c8:16:09:d3:cb:fb:82:3e:
bd:b1:cc:f1:a3:98:30:f2:cf:24:d5:1a:21:45:48:
25:a6:cf:f5:2c:69:18:67:91:ab:de:dd:01:e7:b2:
35:ce:4e:64:9c:2b:e6:9a:84:9a:97:5f:56:ad:24:
50:20:ba:4d:23:20:c0:10:49:ae:0e:c8:fe:c8:2a:
eb:06:89:8e:ff:a0:ab:0a:f3:54:d4:33:93:7b:ff:
06:41:95:18:d7:a0:0d:71:4b:a3:8d:70:44:43:9d:
07:9d:20:25:13:e4:e9:3b:54:c5:6c:66:4a:65:b4:
90:d9:59:80:26:2f:d5:ae:b7:93:56:70:af:a5:c9:
39:e1:f2:47:78:88:d8:a7:6d:98:e7:d9:33:0f:dd:
ed:cf:a2:4b:2c:46:4f:ff:d5:f2:27:4c:d0:c5:b0:
53:bf:61:ff:67:3a:ce:72:6e:fe:a6:c3:4c:5c:e4:
b9:19:83:4b:11:45:de:23:f1:a5:89:4f:d0:a1:3c:
6d:c7:32:33:fd:d2:22:45:49:a1:8e:ff:32:4f:5f:
2f:af:42:42:fa:07:c0:87:fc:96:87:7a:3e:38:dc:
e6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BD:5E:B7:2D:27:BE:19:9C:28:F0:BC:81:D7:5D:F8:33:9E:55:13
X509v3 Authority Key Identifier:
keyid:C8:14:F3:C3:BD:09:9D:B3:17:2A:B8:FC:4E:33:37:70:6D:00:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C814F3C3BD099DB3172AB8FC4E3337706D0072FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xNEWjhcivr3uC54kZ5GokxiXcrWL4bw8jS9XDPGj52n/0/323830343a6431633a3a2f33322d313238203d3e203532363030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d1c::/32
Signature Algorithm: sha256WithRSAEncryption
54:53:5c:9e:28:23:90:ba:b6:d5:b5:d7:d0:be:bc:ef:98:15:
75:83:57:ef:91:8f:20:cf:a0:ab:ff:db:aa:08:83:aa:b0:40:
2b:0c:a9:aa:d1:41:03:5f:1d:73:5e:00:2c:3d:32:7a:70:36:
3b:2f:5e:f6:a4:a7:b0:e5:b9:26:1d:48:84:4d:f3:94:4e:51:
73:4d:d2:c8:8c:cf:fc:b8:31:e9:5e:b3:1c:96:ed:b1:a3:63:
54:09:94:c5:73:6a:8c:a7:7c:78:d7:e6:a1:e8:33:66:4e:32:
43:6f:4f:73:82:17:7d:32:c0:4f:c8:02:f3:8a:69:bd:e7:b8:
d7:c9:78:a5:b3:fc:22:a9:d3:8a:31:81:fe:25:87:b8:7c:1d:
a7:bf:cc:5f:a6:2c:39:74:41:35:83:8e:f5:5e:b7:6a:29:78:
51:36:d7:8f:52:40:01:84:87:e8:d5:f3:a6:42:d0:18:62:7f:
b8:74:27:4c:a0:24:b8:65:ae:14:ef:e5:82:36:38:3d:31:48:
c3:8b:f6:bc:83:6b:36:c9:a1:91:10:e4:5e:b5:f5:60:d7:5b:
5c:ee:04:0d:1a:b6:ae:fe:cb:7e:7c:ba:16:e4:cb:64:1c:fe:
2b:60:c6:04:ec:ba:b7:a8:a4:c1:f1:8e:82:0b:5f:4c:9e:9f:
fd:ca:a9:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:01 2025 by rpki-client