Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa
File: 323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa (raw, json)
Hash identifier: hUDB+a3fgptMxeUZLnyH1AUMsKoMC+9RalF8iNE+SA8=
Subject key identifier: 15:B2:CA:BB:25:CD:76:BE:F5:BB:9E:CE:8A:83:27:AC:91:04:1F:FD
Certificate issuer: /CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Certificate serial: 2C2C6F7284813A9D569A134340B35B37D9852D5C
Authority key identifier: 55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa
Signing time: Wed 03 Apr 2024 20:33:49 +0000
ROA not before: Wed 03 Apr 2024 20:28:49 +0000
ROA not after: Wed 02 Apr 2025 20:33:49 +0000
asID: 270406
IP address blocks: 2804:6b88:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:2c:6f:72:84:81:3a:9d:56:9a:13:43:40:b3:5b:37:d9:85:2d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=558F5EA6605670CFCCE5E212457DC4ABF929F3DB
Validity
Not Before: Apr 3 20:28:49 2024 GMT
Not After : Apr 2 20:33:49 2025 GMT
Subject: CN=15B2CABB25CD76BEF5BB9ECE8A8327AC91041FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:85:d5:b9:81:54:e3:3d:f1:dc:29:cd:04:
eb:06:28:b9:3b:f3:56:d6:e7:8a:aa:69:73:56:0f:
1a:42:30:de:c1:e2:22:13:13:4e:08:bd:38:80:ca:
53:1c:a3:83:12:c7:5e:6d:a2:10:94:73:a7:fd:67:
2a:45:bc:d6:87:7e:d7:43:f6:ab:23:c7:01:37:f3:
1f:a0:e1:8c:af:23:c8:44:2f:4c:43:9b:30:22:7c:
39:3b:6b:07:2c:4c:b1:bf:0c:a7:2b:70:27:0d:33:
65:3e:2e:46:08:c7:35:e9:6f:55:b6:22:e3:6a:f0:
c6:a1:2c:97:b3:04:76:3c:f4:eb:68:06:54:d1:a4:
9e:8e:b7:a7:66:e8:5e:f2:d3:0a:ba:80:4f:a9:e5:
73:7d:01:d0:d7:14:b8:01:18:52:ab:d0:dd:80:2b:
ea:53:fd:87:f5:9c:7d:a8:07:b9:e2:f1:ea:31:49:
5a:c2:51:1c:ba:e9:ee:6c:59:8d:25:1a:9d:9c:ca:
45:ed:b7:a5:85:5a:ae:83:99:7a:35:5e:56:7f:53:
4d:1d:7a:b8:78:a9:b4:25:61:bf:26:86:04:b7:45:
de:97:95:87:15:ad:6e:e1:7f:f3:cc:c0:c9:d1:c7:
62:1d:8c:5e:b4:72:f8:25:8b:7a:9e:c9:c7:b9:69:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B2:CA:BB:25:CD:76:BE:F5:BB:9E:CE:8A:83:27:AC:91:04:1F:FD
X509v3 Authority Key Identifier:
keyid:55:8F:5E:A6:60:56:70:CF:CC:E5:E2:12:45:7D:C4:AB:F9:29:F3:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/558F5EA6605670CFCCE5E212457DC4ABF929F3DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CGsE8iiP83jzdhF36RTg5a2dYmJFwY9NbnSJz5m8LgQT/1/323830343a366238383a383030303a3a2f33342d3334203d3e20323730343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6b88:8000::/34
Signature Algorithm: sha256WithRSAEncryption
6b:9a:f2:b7:4c:2e:89:ab:3a:52:1f:5e:3b:5a:b0:fb:74:5a:
68:66:b6:be:0a:4e:b0:ca:a9:31:a3:d1:22:61:eb:1f:e5:62:
d6:61:8e:bd:65:e3:11:90:cf:b1:60:c5:7b:c7:5c:96:69:85:
05:33:80:97:25:2a:a1:9a:d7:20:57:cb:7d:8f:8f:9a:aa:b3:
52:8b:0b:83:e0:fe:cb:74:05:72:5f:90:39:b1:8d:30:ca:e5:
60:7e:1f:87:ac:e3:4c:e2:f1:09:7d:74:c7:85:b5:9b:81:76:
35:58:98:98:6b:db:b9:e5:08:ef:59:e8:94:83:9b:b7:eb:ff:
2d:39:5c:4f:2e:a4:cc:f4:1f:13:13:07:19:5c:f6:f7:db:7f:
5d:43:d4:df:7f:de:93:ed:47:7a:ba:6d:81:f6:6a:3e:46:d6:
0c:0a:b6:22:20:6c:63:51:f7:4d:96:38:b4:71:2f:09:ff:9f:
c4:be:1c:94:f1:da:5d:1e:1a:17:b2:18:5f:6e:5f:61:a9:bf:
44:1d:28:39:9c:2b:d9:d6:aa:e5:0d:c2:20:b0:19:a3:b6:f2:
d8:91:92:48:cc:44:3e:f7:7d:ad:03:82:81:1c:ad:69:38:cb:
4d:af:44:75:6b:46:f9:85:b8:48:59:f4:8b:1e:5a:13:43:b5:
24:6b:b9:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:35 2025 by rpki-client