Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa
File: 323830343a326636383a3a2f33322d3438203d3e20323634383839.roa (raw, json)
Hash identifier: JMXEkTHmHq+IYfsLnLTKs/nuQpi4bvpyXK1gN8ubxoM=
Subject key identifier: 94:FA:0F:16:88:45:40:9C:B1:25:5C:AD:73:E1:57:AC:26:9F:72:9A
Certificate issuer: /CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
Certificate serial: 3BA3D26146E02699B5A8D1DF8AC2EB7B8815245F
Authority key identifier: 11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa
Signing time: Wed 27 Sep 2023 19:31:38 +0000
ROA not before: Wed 27 Sep 2023 19:26:38 +0000
ROA not after: Wed 25 Sep 2024 19:31:38 +0000
asID: 264889
IP address blocks: 2804:2f68::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:a3:d2:61:46:e0:26:99:b5:a8:d1:df:8a:c2:eb:7b:88:15:24:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11EB5F8C0007E05E5063FA10BBBA5139D96A357F
Validity
Not Before: Sep 27 19:26:38 2023 GMT
Not After : Sep 25 19:31:38 2024 GMT
Subject: CN=94FA0F168845409CB1255CAD73E157AC269F729A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:d8:4e:6a:52:b7:76:dd:9a:6d:a3:ae:0b:
81:dd:22:8e:af:e5:7b:e4:a2:6a:4e:3f:1c:49:db:
6c:52:63:de:6b:61:93:65:d9:93:ba:3d:ec:ef:97:
2d:03:f1:99:a8:3b:b4:93:c6:07:12:8a:aa:f2:b7:
96:74:4d:fb:c6:31:3a:90:bc:38:00:a5:c7:86:53:
a8:d3:7b:3a:e9:a6:64:70:7e:f6:8c:38:8f:33:76:
4e:e1:8c:98:f6:b5:c1:56:99:39:86:de:2a:aa:92:
78:c8:82:d9:42:e8:fc:a2:aa:96:54:8e:39:fe:35:
f4:0d:99:71:4b:27:f4:6f:e2:ff:04:c2:e1:08:ca:
b1:0a:27:81:01:eb:8f:73:f7:54:4f:18:6d:6c:2a:
cb:de:c9:ca:d7:46:e5:01:e1:03:c8:ab:ce:40:73:
b8:e9:b8:b7:05:6d:42:81:62:0b:e1:af:c0:c2:99:
36:8b:5e:5c:84:a5:88:f0:c4:3d:c6:71:15:0e:bd:
85:4f:c7:6b:b4:75:06:83:e0:0d:a2:34:d5:92:22:
14:d2:39:da:99:d1:c5:11:c2:d9:a0:90:43:88:33:
67:6d:21:8d:44:cc:07:a4:16:fd:ef:b8:7c:3d:2c:
be:58:7a:79:f8:36:be:a5:59:1a:d3:e8:be:2b:c1:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:FA:0F:16:88:45:40:9C:B1:25:5C:AD:73:E1:57:AC:26:9F:72:9A
X509v3 Authority Key Identifier:
keyid:11:EB:5F:8C:00:07:E0:5E:50:63:FA:10:BB:BA:51:39:D9:6A:35:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11EB5F8C0007E05E5063FA10BBBA5139D96A357F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3438203d3e20323634383839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f68::/32
Signature Algorithm: sha256WithRSAEncryption
88:29:1c:73:54:cd:ea:df:05:88:c6:b3:2b:33:31:ae:bc:51:
b1:ce:c4:08:a7:30:20:1e:32:4f:4f:21:79:04:93:6b:da:d9:
b5:9d:c9:37:88:1c:73:3c:5b:05:6b:ed:cf:a4:aa:4c:db:c5:
84:1a:01:e3:aa:01:90:04:2b:d2:79:7c:f3:80:68:11:f0:3f:
c2:41:27:b1:22:1a:7c:07:ab:4c:bf:6e:8a:53:73:37:48:9a:
05:f8:85:fc:14:dc:10:d0:d5:32:87:cb:b0:94:f0:50:f7:ae:
31:bd:6c:4b:e5:a9:47:dd:be:e5:a4:8c:ec:a2:fb:e6:42:44:
e3:1a:28:da:5f:aa:59:59:4b:0a:4a:f0:a9:25:8b:80:1e:de:
c0:d8:b8:80:cf:13:35:4d:12:25:97:d9:55:4b:63:66:31:67:
6c:74:c2:d0:52:8d:9a:2a:d6:2b:05:dc:08:26:1d:4a:fa:e8:
5e:7c:5f:9a:63:96:a5:91:1c:1b:45:4c:d2:2d:37:fb:1c:a2:
e1:15:d0:f0:b8:a7:64:ea:68:ff:49:7a:e8:0f:ca:47:53:fc:
36:af:63:0c:30:ef:66:67:99:48:8d:42:c3:ea:3b:e9:5f:a5:
a5:67:e3:8e:bf:6d:d5:bd:e9:29:dc:9d:3b:03:45:c2:2b:79:
c7:8d:a7:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:55 2025 by rpki-client