Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa
File: 323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa (raw, json)
Hash identifier: dAVObc53toZrzdrammQT2pHwvORG7/ptMJJCp+GDEsY=
Subject key identifier: 00:5F:43:04:C9:B5:2C:5A:F6:DD:31:BC:C4:DE:B3:35:61:0B:13:6E
Certificate issuer: /CN=5FA8216D171B8FFC224F7EAE229DFCF3872E2EEF
Certificate serial: 6AF86178597906FCE7C84E63D29DCF0D06187235
Authority key identifier: 5F:A8:21:6D:17:1B:8F:FC:22:4F:7E:AE:22:9D:FC:F3:87:2E:2E:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA8216D171B8FFC224F7EAE229DFCF3872E2EEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa
Signing time: Tue 05 Nov 2024 01:37:03 +0000
ROA not before: Tue 05 Nov 2024 01:32:03 +0000
ROA not after: Tue 04 Nov 2025 01:37:03 +0000
asID: 61608
IP address blocks: 2804:8270:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:f8:61:78:59:79:06:fc:e7:c8:4e:63:d2:9d:cf:0d:06:18:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5FA8216D171B8FFC224F7EAE229DFCF3872E2EEF
Validity
Not Before: Nov 5 01:32:03 2024 GMT
Not After : Nov 4 01:37:03 2025 GMT
Subject: CN=005F4304C9B52C5AF6DD31BCC4DEB335610B136E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9a:04:52:e0:97:37:0f:6d:29:c6:21:0c:2b:
f0:fc:0d:21:11:de:8a:38:d3:43:c0:4e:98:32:2d:
ef:49:ef:51:b8:fc:98:b4:79:9e:11:24:9e:2c:90:
be:a0:f4:81:2a:0a:6c:a8:7c:4a:53:70:b0:dd:e5:
05:30:5b:f4:6c:da:de:65:0a:24:ff:c0:e8:86:e6:
8e:d0:1f:4c:59:1e:78:04:2a:82:15:54:9c:27:35:
dc:76:3a:3c:52:39:21:c6:29:83:e2:15:4c:b0:48:
d6:4f:c8:e7:cf:5c:20:be:19:29:d4:33:32:04:8d:
17:bc:9b:16:bc:25:41:e0:08:e2:83:6f:82:21:75:
d9:f7:7b:5b:3e:f9:bf:ee:88:84:ac:67:ec:17:8a:
6f:cd:00:42:04:7b:83:e6:32:ff:df:15:dc:96:09:
40:f1:ca:26:bc:94:b0:2e:96:14:35:e6:7e:a4:a0:
c6:9f:a2:37:42:b1:15:e3:4f:8a:ba:2c:4b:49:2e:
ce:86:be:4f:88:4c:71:ce:3a:22:04:9b:5e:d2:c7:
18:0d:de:ef:88:98:62:e7:83:70:ba:67:50:4c:da:
ba:48:e1:d5:21:66:b5:ab:84:4d:96:51:df:29:79:
53:94:5d:2c:49:1c:84:75:13:19:16:c6:db:dc:ed:
cb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5F:43:04:C9:B5:2C:5A:F6:DD:31:BC:C4:DE:B3:35:61:0B:13:6E
X509v3 Authority Key Identifier:
keyid:5F:A8:21:6D:17:1B:8F:FC:22:4F:7E:AE:22:9D:FC:F3:87:2E:2E:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/5FA8216D171B8FFC224F7EAE229DFCF3872E2EEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA8216D171B8FFC224F7EAE229DFCF3872E2EEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CNpBkius7r6N5WS1XXbUVMdyBxkVcja1Hz6nBjMJnGbM/0/323830343a383237303a383030303a3a2f33332d3333203d3e203631363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8270:8000::/33
Signature Algorithm: sha256WithRSAEncryption
49:de:e9:f8:73:1e:66:e3:f0:75:5e:73:c0:a5:57:b9:e0:0c:
62:2d:eb:56:75:94:ea:13:b7:ce:f2:31:72:73:f0:16:e3:36:
0f:77:66:fc:c9:ef:e0:eb:1c:1e:1c:60:31:c2:39:68:1b:3f:
4b:50:7f:95:44:7c:14:82:f0:c9:7b:f6:94:7f:21:97:5a:70:
79:73:cd:34:1b:0b:14:ec:46:fc:2f:8b:10:ff:ad:c7:ce:e9:
61:75:58:5c:93:66:3f:14:1d:9b:97:81:1c:9e:96:a8:73:a8:
dc:50:49:7a:ed:ed:ea:4a:0f:35:04:39:c7:80:2f:bc:f8:db:
05:01:b5:6f:1e:1d:fa:cc:1c:d5:31:84:62:80:96:d3:cf:54:
7a:26:4c:74:39:71:5a:bd:5a:93:e4:05:41:e4:f3:d8:75:91:
60:3f:cf:10:3a:e5:8a:3b:53:18:64:f3:40:a3:f2:c2:6f:1d:
1b:b5:be:b8:c4:05:03:93:2d:76:30:ae:08:25:c4:83:b7:f7:
63:1d:6d:c6:03:ec:d6:78:6a:a8:e4:00:b3:0c:30:a5:7d:55:
bb:06:c0:0a:0c:b3:6c:d8:48:70:7a:dd:04:7d:14:d9:65:c5:
22:01:8b:93:8f:27:9e:c1:5d:18:10:bb:90:a4:12:80:e2:df:
f7:cd:29:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:45 2025 by rpki-client