Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a3a2f33322d313238203d3e20323731323930.roa
File: 323830343a373933303a3a2f33322d313238203d3e20323731323930.roa (raw, json)
Hash identifier: qf/Oo+LRIBHti0lX8DwR6Jg2leihvj22xIR6tcRMm5Q=
Subject key identifier: 86:17:B1:DA:CE:21:04:03:17:3A:E2:DF:EF:7E:57:AC:B8:CA:E7:86
Certificate issuer: /CN=37B8A9720C647536D52213E76F8A399EB36DE1DE
Certificate serial: 09FAE247EFB15EA9E57E708B662D79B76E284A61
Authority key identifier: 37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a3a2f33322d313238203d3e20323731323930.roa
Signing time: Wed 04 Jan 2023 14:04:42 +0000
ROA not before: Wed 04 Jan 2023 13:59:42 +0000
ROA not after: Wed 03 Jan 2024 14:04:42 +0000
asID: 271290
IP address blocks: 2804:7930::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fa:e2:47:ef:b1:5e:a9:e5:7e:70:8b:66:2d:79:b7:6e:28:4a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37B8A9720C647536D52213E76F8A399EB36DE1DE
Validity
Not Before: Jan 4 13:59:42 2023 GMT
Not After : Jan 3 14:04:42 2024 GMT
Subject: CN=8617B1DACE210403173AE2DFEF7E57ACB8CAE786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a2:e7:2e:0d:96:ca:8e:2f:90:78:7f:55:79:
48:79:6d:9d:9c:20:13:1c:00:a6:84:4f:90:ed:9e:
b3:ed:98:c0:68:c2:3b:fb:cc:2e:ee:7b:66:56:3d:
4e:b0:8d:cd:06:07:1d:f7:c9:c9:47:d9:e6:4a:60:
b1:3a:76:cb:aa:50:cd:db:59:c1:5f:25:cf:7b:1e:
81:4e:07:f7:9c:f6:99:8e:53:49:b9:f2:f7:75:39:
0c:d8:93:8c:39:70:52:57:3c:90:f2:e6:70:b3:d4:
c1:b9:b0:f8:fc:ca:e0:87:17:60:5c:5f:31:93:4a:
fa:dc:ef:5e:01:fc:32:95:2d:83:cf:38:f3:00:0a:
38:4b:c3:22:15:0b:8b:2a:79:e9:7d:3c:17:38:f1:
56:d0:dd:e2:9f:fd:e2:b9:8e:6b:cf:fe:db:12:94:
56:a2:8f:d4:46:90:e1:37:85:8f:f9:05:ae:1d:11:
8d:2f:a3:52:46:fe:df:35:20:28:ab:1b:c3:19:9d:
6e:32:27:c1:69:1f:fd:d9:01:75:cf:b9:94:66:7b:
59:26:6e:46:2d:41:39:88:5f:c9:5f:be:05:7b:8e:
b6:18:2c:2b:bc:71:a1:31:b2:f5:98:da:8f:89:85:
43:25:c6:48:55:76:ce:c8:d5:a5:f4:00:4b:a8:d5:
b8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:17:B1:DA:CE:21:04:03:17:3A:E2:DF:EF:7E:57:AC:B8:CA:E7:86
X509v3 Authority Key Identifier:
keyid:37:B8:A9:72:0C:64:75:36:D5:22:13:E7:6F:8A:39:9E:B3:6D:E1:DE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37B8A9720C647536D52213E76F8A399EB36DE1DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a3a2f33322d313238203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930::/32
Signature Algorithm: sha256WithRSAEncryption
b4:7d:3e:e8:c7:e6:20:89:c2:cf:98:b1:03:6a:18:4e:a4:e7:
61:8d:0c:76:69:44:60:94:12:a1:3e:2f:83:a7:01:10:cb:f3:
04:50:63:d6:41:b0:51:19:f2:d2:ac:99:d8:7a:49:45:7c:85:
90:e7:b0:b1:be:4e:92:47:46:48:91:b8:b0:e0:c4:41:66:12:
5b:ba:61:39:48:68:d6:e2:b0:49:74:86:62:ad:cf:af:02:a4:
cb:9a:68:b9:5b:45:b8:24:7d:f2:10:28:13:13:c5:e4:58:6c:
f1:de:31:b3:2a:e0:48:9c:5a:a9:76:38:0a:b9:a3:27:8f:66:
c6:dc:96:0c:19:63:3b:34:1b:f3:ad:09:35:26:2d:c4:85:d8:
03:38:8f:da:03:13:31:72:5b:ea:e5:be:80:47:99:ca:4f:b5:
a1:8a:e3:db:a9:7a:ff:66:26:32:53:f2:20:af:45:da:24:b1:
28:62:d3:c2:fe:7e:f4:a3:78:8c:f2:d3:fa:e4:e0:78:f8:aa:
f3:f1:56:5e:24:96:f5:0d:3a:82:3b:46:f0:4b:45:8d:c9:65:
c6:6c:c8:7e:01:06:64:81:92:52:b6:ce:4a:91:7d:5e:91:82:
f2:31:80:58:9b:e4:55:6b:24:e1:bb:21:73:8f:2b:bd:28:d6:
60:52:81:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 02:08:33 2025 by rpki-client