Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
File: 323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa (raw, json)
Hash identifier: 3edWrWoLXmHTctFpmm0FhojsKGWUwSV+IKHuPRFvAEI=
Subject key identifier: A7:5D:0E:92:57:C4:B6:8C:73:CC:AB:7F:98:88:4E:67:C8:2E:45:1F
Certificate issuer: /CN=4C90344E384710E55DBA9D811B8DB9699219721E
Certificate serial: 6D9113972EAD2F35E7AA4D68885D53D5D78C98D0
Authority key identifier: 4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
Signing time: Wed 06 Dec 2023 21:00:00 +0000
ROA not before: Wed 06 Dec 2023 20:55:00 +0000
ROA not after: Wed 04 Dec 2024 21:00:00 +0000
asID: 267290
IP address blocks: 2804:4b34:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:91:13:97:2e:ad:2f:35:e7:aa:4d:68:88:5d:53:d5:d7:8c:98:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C90344E384710E55DBA9D811B8DB9699219721E
Validity
Not Before: Dec 6 20:55:00 2023 GMT
Not After : Dec 4 21:00:00 2024 GMT
Subject: CN=A75D0E9257C4B68C73CCAB7F98884E67C82E451F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:e4:d4:86:56:98:93:ca:94:7c:8e:9c:44:
2e:97:4b:41:23:8c:44:77:d5:0e:42:4a:06:09:b5:
09:69:a3:9e:03:e1:8f:6f:a7:37:62:4c:a1:9e:c9:
81:42:98:7d:0a:3c:9c:92:9c:5f:66:40:c9:58:90:
5e:26:07:1b:9b:0a:d9:2f:97:f7:66:6b:ea:59:d5:
6e:10:e4:b3:35:f9:bd:18:16:23:28:4d:14:db:a3:
ce:a3:6b:9b:2f:4f:3c:b1:d8:17:55:c9:b9:bf:35:
aa:2f:e9:30:45:4a:9a:41:02:28:7d:ad:d5:06:d1:
a9:31:a0:18:64:7c:8b:61:f9:60:22:34:7c:77:f4:
39:82:cf:60:c7:92:aa:e0:81:a1:71:9f:fe:eb:f3:
28:9b:cb:0d:df:cb:ad:34:54:48:d0:56:12:e3:ff:
1c:da:54:10:6f:45:7e:7d:06:1a:da:62:60:74:40:
5b:97:3c:c0:e7:1b:86:dc:da:91:c1:4f:e0:92:cd:
2f:75:26:bf:e8:ad:8f:0f:a2:4f:57:23:99:9f:33:
a5:35:24:e1:10:7c:26:78:b3:b1:f6:43:65:ad:a0:
e7:42:1f:3c:1b:b3:17:b8:b2:f6:2c:a5:a5:aa:8f:
41:44:46:6d:59:30:25:16:12:02:97:e5:28:87:e6:
96:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:0E:92:57:C4:B6:8C:73:CC:AB:7F:98:88:4E:67:C8:2E:45:1F
X509v3 Authority Key Identifier:
keyid:4C:90:34:4E:38:47:10:E5:5D:BA:9D:81:1B:8D:B9:69:92:19:72:1E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/4C90344E384710E55DBA9D811B8DB9699219721E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C90344E384710E55DBA9D811B8DB9699219721E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a383030303a3a2f33332d3333203d3e20323637323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b34:8000::/33
Signature Algorithm: sha256WithRSAEncryption
23:8b:6f:5c:de:2e:02:92:c5:ee:1b:22:83:e4:c3:9c:f2:cb:
e6:b0:ec:df:e9:dd:ad:9f:fc:e8:34:a1:d7:f5:25:47:4b:76:
18:c4:83:ba:85:ca:d1:e2:1d:ff:67:e9:2a:ba:17:7d:df:aa:
00:8b:d3:77:3d:bc:e4:af:09:c6:8c:b3:f9:74:d8:c6:49:47:
a8:9f:2b:d5:6a:8d:ca:be:1a:46:08:ee:21:ae:64:50:6d:1f:
6a:9c:8b:cc:a6:25:27:6f:15:cd:20:6c:6c:d5:d4:3a:95:59:
99:49:ff:44:99:5b:fa:1b:9b:69:16:11:d8:0f:d9:48:cc:7d:
db:f4:ee:1e:ca:87:3c:ac:51:72:76:80:ff:69:1c:3d:24:69:
84:f7:a8:f7:6e:26:ef:39:64:97:30:eb:81:1b:76:f4:f8:d6:
e8:72:4a:45:a3:45:65:6b:16:9f:24:a5:2b:1c:73:41:82:b3:
c6:47:0c:55:ad:9b:de:46:9a:61:0f:6d:55:40:a5:2c:2a:56:
63:b0:eb:90:99:b1:c0:bd:f3:7c:6c:b7:e4:a1:b6:29:8b:96:
fa:6c:4b:f4:cc:7f:65:68:fe:39:67:46:02:3a:71:93:be:63:
7e:6d:08:dd:34:73:2b:69:8d:a7:01:5d:c0:2b:54:a2:27:95:
f7:bf:99:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:23 2025 by rpki-client