Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa
File: 323830343a6339303a3a2f33322d3438203d3e203238313938.roa (raw, json)
Hash identifier: e0S0QO4GGUvwKlHQvCBDsZnR13QXRENfxIvBltJmJwQ=
Subject key identifier: 1E:66:B6:05:9A:DD:FA:07:CC:FA:15:74:65:9A:D2:87:D3:1E:E0:BE
Certificate issuer: /CN=2FEB4998BC86FAC078638F3436F1CCBF50021C7F
Certificate serial: 3E9BF6F528B880D94E3F05ED4A90AD3B65DEFE6B
Authority key identifier: 2F:EB:49:98:BC:86:FA:C0:78:63:8F:34:36:F1:CC:BF:50:02:1C:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa
Signing time: Mon 05 Sep 2022 16:47:27 +0000
ROA not before: Mon 05 Sep 2022 16:42:27 +0000
ROA not after: Mon 04 Sep 2023 16:47:27 +0000
asID: 28198
IP address blocks: 2804:c90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:9b:f6:f5:28:b8:80:d9:4e:3f:05:ed:4a:90:ad:3b:65:de:fe:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FEB4998BC86FAC078638F3436F1CCBF50021C7F
Validity
Not Before: Sep 5 16:42:27 2022 GMT
Not After : Sep 4 16:47:27 2023 GMT
Subject: CN=1E66B6059ADDFA07CCFA1574659AD287D31EE0BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:57:ca:95:92:a1:7e:90:b2:92:b5:b4:b3:
97:fa:bc:07:ee:5e:f3:d4:2c:94:09:54:d8:1f:07:
51:46:50:c4:6a:d7:4d:67:7e:51:3e:6e:ff:d7:ce:
7b:e3:7f:4f:c7:0c:e6:e2:d9:b4:33:45:f0:d9:2f:
33:6d:c0:8c:70:2a:ef:6b:d8:1f:c8:c3:3c:7f:95:
1d:fd:77:af:6d:bd:c4:aa:ea:67:15:c1:51:af:59:
47:4d:ab:11:ad:ed:02:80:62:84:41:a2:f1:7f:63:
29:62:86:1c:60:47:76:ee:44:f0:9d:21:fc:ec:47:
45:a4:4e:6e:64:45:0e:ad:38:2e:2a:81:9a:8a:6d:
e7:47:a2:59:36:da:aa:9a:9f:4b:fe:45:6f:ae:68:
23:0f:2c:58:fc:fd:11:98:d0:14:a7:77:28:4f:4a:
de:00:5f:95:ba:89:79:1a:16:3e:64:ed:52:44:2d:
dc:ec:cc:c1:d2:eb:0c:6d:74:16:12:04:3f:33:c1:
8f:72:39:38:56:e2:49:3a:68:b6:b5:21:1a:d7:1c:
53:aa:96:9f:c6:5a:82:45:6a:10:f2:15:c7:ee:71:
03:28:9b:72:fa:3c:65:7e:d1:c1:47:ff:4e:8e:b4:
ee:eb:b5:8f:98:61:a5:be:84:8e:6b:29:93:82:a5:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:66:B6:05:9A:DD:FA:07:CC:FA:15:74:65:9A:D2:87:D3:1E:E0:BE
X509v3 Authority Key Identifier:
keyid:2F:EB:49:98:BC:86:FA:C0:78:63:8F:34:36:F1:CC:BF:50:02:1C:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FEB4998BC86FAC078638F3436F1CCBF50021C7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a6339303a3a2f33322d3438203d3e203238313938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c90::/32
Signature Algorithm: sha256WithRSAEncryption
65:68:17:a5:1a:d0:48:45:44:bc:5e:3e:f0:34:b1:61:e3:a3:
4e:ba:f6:3f:02:4d:74:2a:ea:6c:7f:16:82:3a:08:c5:b2:7c:
ed:9c:46:c4:42:df:31:9b:2b:19:ab:b3:34:ce:59:be:39:bb:
71:e9:ed:fe:60:94:62:2d:3a:5e:b1:d3:8c:79:2e:b0:48:51:
fe:e5:f6:93:a8:bd:bd:69:23:f1:75:e8:d8:69:a1:e8:a6:da:
a3:f4:95:0c:7c:92:69:d1:60:78:f4:2b:a5:eb:a9:2c:8f:d5:
73:fc:b5:23:af:cc:c1:34:ce:65:b7:e8:2c:cd:57:30:98:d1:
33:fd:98:ad:b2:c2:0f:53:53:e4:d4:35:8e:5a:ef:f3:48:96:
08:20:59:07:79:e5:68:d7:5f:ff:f7:6f:53:c9:a8:34:e3:3e:
87:61:c6:e7:e2:a3:a1:79:14:d9:fc:4c:39:74:21:0b:09:20:
15:dc:10:74:ff:93:82:2d:5b:62:4f:dc:05:35:30:3c:51:c1:
f2:57:ac:b5:fb:91:44:c1:10:d9:5f:06:df:af:2c:6e:4f:ba:
c3:68:2c:03:43:e0:92:0c:9a:39:dd:44:79:98:ce:81:76:19:
3f:a1:97:3e:8b:b7:d2:51:d0:e8:cd:a6:a9:84:a7:28:e7:1e:
f9:6f:d9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:03 2025 by rpki-client