Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
File: 323830343a373762303a3a2f33322d3634203d3e203532363339.roa (raw, json)
Hash identifier: pOPd1Rmb4rbgBJkhVkPzW64RxtksNjuVbJK3DuUdam8=
Subject key identifier: 2D:83:68:E5:56:74:B5:CB:FC:6A:C9:A9:58:C3:5D:30:08:B2:23:7D
Certificate issuer: /CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Certificate serial: 1C789E838AEC3DADF8552DD2FEA8BE9BB83529BD
Authority key identifier: F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
Signing time: Thu 23 Nov 2023 18:10:18 +0000
ROA not before: Thu 23 Nov 2023 18:05:18 +0000
ROA not after: Thu 21 Nov 2024 18:10:18 +0000
asID: 52639
IP address blocks: 2804:77b0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:78:9e:83:8a:ec:3d:ad:f8:55:2d:d2:fe:a8:be:9b:b8:35:29:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21FFE74423AD60B71B14CBC9CD2B803E926BB0F
Validity
Not Before: Nov 23 18:05:18 2023 GMT
Not After : Nov 21 18:10:18 2024 GMT
Subject: CN=2D8368E55674B5CBFC6AC9A958C35D3008B2237D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:28:b0:96:5d:0b:46:51:68:38:99:af:de:
2c:fb:07:bc:9f:16:0c:9b:e8:75:c0:c0:0c:c3:56:
b9:1e:bf:73:ca:42:57:97:84:78:d0:30:27:98:f9:
ca:3a:89:7d:96:ed:1f:44:b1:26:cf:0d:7e:aa:75:
16:c4:5d:43:9a:8d:0d:92:4c:ba:12:f2:91:75:27:
be:b5:14:76:49:56:e6:89:c1:ef:97:e9:52:4e:04:
bd:4c:db:73:23:fe:09:eb:03:d6:ab:8a:e9:3a:c4:
5b:a8:46:7b:00:6d:46:a2:d8:a3:92:f2:12:ad:50:
55:9e:68:d3:1c:66:e9:fb:4c:9b:e5:bc:4c:58:8e:
a7:6e:34:16:4f:66:df:a3:52:c6:d9:b7:0d:d2:87:
9a:95:78:39:4a:d2:66:59:ba:1c:66:dd:d4:f5:70:
cb:d7:22:bb:da:e5:c1:a7:0f:13:b6:ae:c3:9b:1c:
c4:03:88:96:97:55:49:5f:b4:1a:4b:82:f3:c4:6e:
20:3a:0d:f6:49:a8:3b:a3:48:01:6b:6c:cb:15:e5:
43:98:a1:46:98:2a:49:01:aa:69:47:76:d5:40:eb:
d6:0d:3c:51:4d:bd:be:7d:3e:86:b7:74:e3:eb:fe:
d2:a3:61:fa:63:be:b5:17:3f:9d:0b:34:e0:22:5a:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:83:68:E5:56:74:B5:CB:FC:6A:C9:A9:58:C3:5D:30:08:B2:23:7D
X509v3 Authority Key Identifier:
keyid:F2:1F:FE:74:42:3A:D6:0B:71:B1:4C:BC:9C:D2:B8:03:E9:26:BB:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F21FFE74423AD60B71B14CBC9CD2B803E926BB0F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/0/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77b0::/32
Signature Algorithm: sha256WithRSAEncryption
5f:b0:89:ab:36:43:cc:5a:be:0e:5f:1b:1e:7e:e8:8e:7f:51:
bd:31:5c:e4:cb:19:25:54:0e:76:3d:11:fb:61:d8:5f:4f:01:
41:37:d8:19:b9:24:2e:50:c3:8f:d7:cf:93:08:36:13:f6:5a:
8e:4b:ec:99:96:02:28:96:85:10:64:12:2d:7b:17:a2:16:58:
7a:48:01:7e:ff:6b:1f:20:01:8a:94:ea:6c:2f:1d:1b:ef:a4:
7a:8b:29:7d:7a:87:5f:eb:41:48:d6:08:90:dd:2b:06:52:8f:
da:63:fe:8b:d3:4c:8e:16:d4:a0:bd:47:82:2e:6e:30:f4:10:
b8:c2:9a:c2:b8:51:db:6c:95:dc:3f:39:da:ee:6b:f2:31:bc:
0c:b6:b8:42:d7:08:b9:05:f3:e9:41:47:9b:64:f9:ba:7c:d2:
52:bc:83:01:f3:0f:54:62:1c:a4:ad:70:6f:ab:08:91:2c:5c:
5d:db:23:bf:48:6b:2d:3c:8d:db:61:58:3e:3a:44:31:a5:71:
0d:f3:b8:2b:c6:c3:33:3f:b6:fe:e5:02:99:00:37:60:eb:60:
40:f6:e4:9d:10:a7:cd:f3:06:71:40:ac:b2:2d:c3:9a:4d:1b:
25:4d:c7:37:14:5c:22:0b:eb:6f:26:f7:3c:a4:ea:13:6c:29:
c2:e3:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:46 2025 by rpki-client