Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/323830343a34343a3a2f33322d3332203d3e203238363036.roa
File: 323830343a34343a3a2f33322d3332203d3e203238363036.roa (raw, json)
Hash identifier: Scm43xNUQs1Rm1tmgi7F/geo33aqgk1K06H+tAkCLTI=
Subject key identifier: A1:87:EA:31:6F:F7:1F:CE:58:39:FB:FD:51:44:C9:26:2F:28:2F:91
Certificate issuer: /CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Certificate serial: 14A2B86373B69393FBB250167089458863772A84
Authority key identifier: D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/323830343a34343a3a2f33322d3332203d3e203238363036.roa
Signing time: Wed 06 Mar 2024 21:10:33 +0000
ROA not before: Wed 06 Mar 2024 21:05:33 +0000
ROA not after: Wed 05 Mar 2025 21:10:33 +0000
asID: 28606
IP address blocks: 2804:44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a2:b8:63:73:b6:93:93:fb:b2:50:16:70:89:45:88:63:77:2a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D59863A437B6DADA51B3A9C31D5AAC9D81478ABF
Validity
Not Before: Mar 6 21:05:33 2024 GMT
Not After : Mar 5 21:10:33 2025 GMT
Subject: CN=A187EA316FF71FCE5839FBFD5144C9262F282F91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:fd:ff:63:29:ce:15:ed:e8:57:90:3e:1a:8c:
77:23:0e:c2:f7:2f:0f:93:a7:04:16:a2:cb:cf:f3:
ff:40:fc:8b:4d:7d:b1:9d:e3:c2:a1:96:d7:11:75:
5c:24:53:c9:42:02:68:1a:1d:66:72:81:86:7f:81:
f7:a6:7d:2a:80:59:ae:5c:9c:dd:08:51:f0:39:53:
d9:16:0a:85:eb:0e:6a:a1:40:b3:11:49:82:1a:8e:
74:dd:c5:77:43:cc:69:b3:01:e0:fa:ad:b8:83:16:
54:9b:4c:45:f4:8c:5f:33:fd:03:c3:91:f7:0e:bf:
ec:b1:e6:ea:b0:b8:07:53:77:61:24:28:ef:e8:2b:
12:82:70:d3:bf:c0:33:f6:4b:62:79:e0:f9:f3:fa:
27:be:b7:1a:08:14:d0:69:42:6f:f3:6d:a2:d6:dc:
bb:6c:3a:a9:0e:63:78:1d:8c:a6:22:1a:52:8c:d2:
11:8f:52:bc:aa:12:85:8a:38:06:77:6a:2f:3d:51:
45:d9:48:a7:58:cc:f9:92:ce:d4:c4:e7:12:b8:33:
06:5f:d3:d7:f7:d8:08:9b:79:e8:a8:e8:7d:5f:80:
ee:6e:b9:2f:91:e0:6d:58:f3:6f:c9:c7:73:a4:24:
39:8f:63:d2:ff:af:b0:78:b0:31:2a:a9:81:38:52:
2f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:87:EA:31:6F:F7:1F:CE:58:39:FB:FD:51:44:C9:26:2F:28:2F:91
X509v3 Authority Key Identifier:
keyid:D5:98:63:A4:37:B6:DA:DA:51:B3:A9:C3:1D:5A:AC:9D:81:47:8A:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D59863A437B6DADA51B3A9C31D5AAC9D81478ABF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CHoxjdgzo9miFakW8wP8uvcZ1FnpG85pUNhyNoQGHn2U/0/323830343a34343a3a2f33322d3332203d3e203238363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:44::/32
Signature Algorithm: sha256WithRSAEncryption
ed:1c:f5:9b:ee:52:fb:d1:bb:6e:0b:0d:e7:c4:d5:31:c2:49:
a8:d0:4d:a3:32:58:4e:3d:2b:45:e4:08:ce:8c:d6:ee:8d:82:
33:2b:19:2e:8a:f2:67:c6:b8:1f:f8:39:d5:41:f9:4c:b7:e1:
ff:63:3a:04:52:60:95:4c:52:c1:3c:06:5a:ca:a7:d1:9a:f8:
63:ea:64:67:ca:87:35:ac:cf:af:3b:d1:5b:f5:8d:bd:d9:f7:
ad:3e:48:22:6e:49:4b:cc:bb:6e:b3:a7:f3:e2:9d:0c:5f:6e:
4c:0c:3c:28:eb:0a:13:1d:fa:e7:b6:92:37:e8:dd:87:c6:27:
4d:0b:1e:1e:40:04:7e:25:49:0a:a2:3f:90:d5:d5:1f:a5:4c:
c8:df:c2:21:64:f7:a7:4f:3b:09:88:3c:03:b3:05:69:a3:30:
3d:fe:be:a2:f3:ed:4b:79:75:fc:8f:58:14:70:9d:17:a2:7a:
93:2b:5a:08:74:a2:f9:70:7e:93:90:4d:18:38:64:1d:fc:aa:
b5:00:a4:4b:08:15:6e:2a:63:0d:a9:30:ce:f3:52:34:e9:91:
4a:e8:c2:d8:00:3d:8b:43:d4:c2:c6:25:fb:0d:f6:5e:b1:95:
c7:86:b3:9f:b0:af:cf:03:01:a1:d1:52:ea:14:ef:1b:64:d0:
3a:2b:7b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:57 2025 by rpki-client