Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623130303a3a2f34382d3438203d3e20323634333434.roa
File: 323830343a323637343a623130303a3a2f34382d3438203d3e20323634333434.roa (raw, json)
Hash identifier: kZ6yx+ybtWzRgAmh77e9ZLVNlhB5ugXcoVab/Pkt6kU=
Subject key identifier: 41:FD:D1:60:58:8B:11:37:AA:8E:5D:D5:D7:D8:2D:26:CC:54:79:CC
Certificate issuer: /CN=9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386
Certificate serial: 44BD87F8A058B287CAD0EE6A65972EF021D6F62A
Authority key identifier: 9D:AD:BE:14:DA:8A:0A:84:3E:7D:F2:28:8F:6E:A7:DD:6E:7B:83:86
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623130303a3a2f34382d3438203d3e20323634333434.roa
Signing time: Thu 18 Jan 2024 18:49:09 +0000
ROA not before: Thu 18 Jan 2024 18:44:09 +0000
ROA not after: Thu 16 Jan 2025 18:49:09 +0000
asID: 264344
IP address blocks: 2804:2674:b100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bd:87:f8:a0:58:b2:87:ca:d0:ee:6a:65:97:2e:f0:21:d6:f6:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386
Validity
Not Before: Jan 18 18:44:09 2024 GMT
Not After : Jan 16 18:49:09 2025 GMT
Subject: CN=41FDD160588B1137AA8E5DD5D7D82D26CC5479CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:5c:d8:64:f5:84:a0:70:50:d3:72:bc:09:
98:18:8a:07:80:3a:df:5b:a4:68:e9:46:ae:5b:64:
0c:eb:96:7e:58:9c:51:06:91:70:ca:b7:0a:c2:ba:
f8:35:13:1b:8a:50:05:18:87:0d:a6:ac:ef:9a:1a:
d0:e6:1c:5b:50:02:49:ef:b4:32:30:5d:a1:5c:29:
b1:4d:d6:53:6f:66:a0:87:5d:6c:b3:d4:a5:34:de:
d1:9b:94:29:fc:74:0a:86:dd:f2:bb:7c:51:d2:43:
43:a2:7e:5d:4e:70:40:3c:20:b3:b7:ed:80:b7:24:
3c:fd:dc:4d:77:25:87:3c:df:67:52:15:59:2b:dd:
4f:cb:38:97:ec:35:30:64:7b:6f:23:55:22:43:04:
a2:2c:d0:da:18:75:d3:8c:ee:52:dc:6b:76:01:0a:
51:5e:f5:b4:68:5b:6d:d4:6c:8e:70:b6:8d:e3:a1:
e0:24:7a:a9:fa:62:f2:17:10:b4:d8:77:db:11:05:
9c:d7:5f:c4:29:11:98:92:f9:fc:14:01:27:06:db:
25:a0:93:91:b9:5c:42:fa:76:33:7a:71:51:ca:fb:
0f:cc:e0:4a:82:ed:35:2c:bf:32:6e:8b:66:df:54:
db:7d:9c:b2:60:62:4a:c7:58:b6:d8:fa:27:58:55:
13:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FD:D1:60:58:8B:11:37:AA:8E:5D:D5:D7:D8:2D:26:CC:54:79:CC
X509v3 Authority Key Identifier:
keyid:9D:AD:BE:14:DA:8A:0A:84:3E:7D:F2:28:8F:6E:A7:DD:6E:7B:83:86
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9DADBE14DA8A0A843E7DF2288F6EA7DD6E7B8386.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a623130303a3a2f34382d3438203d3e20323634333434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2674:b100::/48
Signature Algorithm: sha256WithRSAEncryption
97:d2:ce:2d:4d:f7:2b:c6:67:48:71:46:c5:2a:c0:e3:43:de:
ae:0c:40:29:7b:cf:83:8e:af:70:a9:4a:7d:fb:9b:f3:af:83:
1a:92:c5:90:bd:00:18:2b:d0:91:f5:17:fb:1b:53:21:c9:fb:
31:db:75:3b:01:5d:09:87:36:a1:cc:96:2b:04:5b:b1:53:7a:
de:65:43:3a:45:d0:f8:47:3f:46:1b:7b:9b:71:7f:e0:2b:53:
23:27:81:5f:1c:48:ff:d2:92:1b:28:10:ab:83:73:f1:e2:2e:
2e:09:22:e0:d4:37:d3:bb:b3:8c:99:b2:af:b1:8e:64:22:1f:
57:57:48:a6:be:be:3c:c8:bd:9f:12:5d:b4:37:b2:bc:40:35:
1c:b7:10:10:c7:48:79:e7:a1:08:d9:c0:91:f2:19:ba:32:e1:
c1:16:c9:5c:a8:ed:2f:60:a2:2d:e6:fc:d3:bc:67:f6:77:1e:
ec:c9:b9:6a:92:8d:b7:b2:ac:b6:bd:ff:bd:a7:93:14:bf:31:
2d:7b:fa:90:67:ef:aa:08:a4:d9:6e:81:85:18:2c:48:57:96:
2e:ac:82:30:5a:ca:67:06:a5:cc:3f:32:1b:9a:f7:e6:fe:a3:
bd:f0:d8:74:15:4d:54:33:4f:eb:f4:d4:4e:ae:70:4b:bb:c2:
61:8d:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:20 2025 by rpki-client