Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33342d3334203d3e20323637333935.roa
File: 323830343a346364343a3a2f33342d3334203d3e20323637333935.roa (raw, json)
Hash identifier: JGRplrk4DLBM4w7GNqHcdqabH0h2Uvy78pwztS6c1Yc=
Subject key identifier: 5B:35:93:EE:53:46:F5:2E:FC:6A:9C:B6:91:6B:35:FA:3F:46:35:9B
Certificate issuer: /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial: 5AB7764FEBB149EC552CD80A622EFBA3FB6F1ABE
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33342d3334203d3e20323637333935.roa
Signing time: Fri 23 Aug 2024 19:56:52 +0000
ROA not before: Fri 23 Aug 2024 19:51:52 +0000
ROA not after: Fri 22 Aug 2025 19:56:52 +0000
asID: 267395
IP address blocks: 2804:4cd4::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:b7:76:4f:eb:b1:49:ec:55:2c:d8:0a:62:2e:fb:a3:fb:6f:1a:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Validity
Not Before: Aug 23 19:51:52 2024 GMT
Not After : Aug 22 19:56:52 2025 GMT
Subject: CN=5B3593EE5346F52EFC6A9CB6916B35FA3F46359B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:1a:5a:1d:57:5d:0d:cf:94:86:16:81:d9:77:
5f:ef:65:04:4a:d9:31:bd:c2:0b:0a:58:cb:48:88:
d0:77:11:b5:5f:d5:6b:ee:85:e3:95:0a:60:d5:0c:
dc:90:a4:40:87:28:52:fa:5e:51:30:8a:60:46:bf:
65:1b:18:26:60:85:87:36:ef:21:fa:6e:0a:e0:62:
08:0a:4e:2f:29:bc:ce:02:44:af:29:3e:80:59:b4:
43:9f:e2:00:86:5c:59:ed:aa:ee:6a:d8:d4:0a:f8:
4e:38:2a:c8:80:cd:02:64:42:73:8f:4e:cf:2b:1a:
de:17:d6:55:03:b9:48:72:f2:bb:10:c4:74:ca:d7:
9a:c3:34:3e:8d:61:e2:16:d7:41:f1:a0:63:54:e0:
d8:92:b5:f8:96:6f:a9:38:35:2c:b3:e3:41:4a:02:
f1:45:a2:04:90:86:0c:f8:9d:f7:cb:18:85:d2:80:
d6:0b:61:ec:7f:1f:de:ba:c8:27:b4:9a:de:e8:f7:
bd:12:45:ac:7b:a1:14:52:23:a5:f3:2d:5f:20:6d:
82:00:2e:01:0a:20:ee:07:5d:75:22:89:a5:f6:43:
a8:d3:85:68:0e:ad:60:79:17:72:a8:f7:ce:f6:a0:
ed:d5:84:43:63:a7:0f:72:cf:28:98:5b:8e:48:7f:
10:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:93:EE:53:46:F5:2E:FC:6A:9C:B6:91:6B:35:FA:3F:46:35:9B
X509v3 Authority Key Identifier:
keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a3a2f33342d3334203d3e20323637333935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4cd4::/34
Signature Algorithm: sha256WithRSAEncryption
bf:52:a3:ce:e1:f4:41:16:90:f7:29:92:b1:3b:35:ed:fd:a1:
fa:7a:8d:3c:91:8d:2a:0a:3d:30:22:87:54:8d:e3:16:24:0c:
6d:00:ab:8c:3e:b5:2e:7c:28:a3:58:4b:39:5a:c1:71:43:ba:
c8:6e:ab:58:77:b4:7a:71:f5:ed:5b:32:44:06:72:e7:5d:cb:
cc:9f:53:55:f9:93:92:b3:bd:78:dc:a0:c3:f2:7f:42:3a:ae:
f5:d2:5b:79:c6:2b:d8:f7:92:56:b3:a1:ea:6f:99:37:49:c5:
13:42:61:c8:6c:0a:12:c9:f9:6e:24:3b:f4:c4:95:e6:74:39:
19:04:37:4e:0c:f6:20:6b:02:38:89:ab:f8:52:de:f2:37:20:
e6:2c:a1:0d:e0:a5:22:7a:0f:4b:7d:d3:7e:e7:9c:6e:5c:42:
9e:8e:6e:a5:48:f5:0d:b4:2c:10:fa:93:cb:31:99:ca:6a:b3:
2d:c9:32:a2:3a:fe:be:bb:bf:84:eb:d4:91:cf:87:b7:e3:1e:
58:ff:28:a9:d8:88:25:3b:fc:06:a4:64:a6:09:ad:13:ec:93:
2a:43:ca:4e:3e:15:b6:dc:be:52:66:17:19:a5:b6:79:6b:09:
a9:46:f1:9c:f7:31:24:22:08:f5:50:51:d7:35:e6:f1:8c:39:
f5:51:44:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:28:28 2025 by rpki-client