Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
File: 323830343a316265383a3a2f33322d313238203d3e203631373536.roa (raw, json)
Hash identifier: PufW0xKBJben2qzYA0hakesUl7GHqJx3G2enSvFF9Bg=
Subject key identifier: 8E:FA:26:79:D1:02:0E:07:19:4C:CE:35:D2:AF:02:09:36:11:34:5D
Certificate issuer: /CN=26D3F3740AF04BE00869BF680DD373FA32E2A56D
Certificate serial: 7DBEE0C265155F00EBB83A5EDBE06922B478AA9A
Authority key identifier: 26:D3:F3:74:0A:F0:4B:E0:08:69:BF:68:0D:D3:73:FA:32:E2:A5:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
Signing time: Thu 04 Apr 2024 09:11:48 +0000
ROA not before: Thu 04 Apr 2024 09:06:48 +0000
ROA not after: Thu 03 Apr 2025 09:11:48 +0000
asID: 61756
IP address blocks: 2804:1be8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:be:e0:c2:65:15:5f:00:eb:b8:3a:5e:db:e0:69:22:b4:78:aa:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26D3F3740AF04BE00869BF680DD373FA32E2A56D
Validity
Not Before: Apr 4 09:06:48 2024 GMT
Not After : Apr 3 09:11:48 2025 GMT
Subject: CN=8EFA2679D1020E07194CCE35D2AF02093611345D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:51:bb:d1:d9:e5:16:97:c7:71:de:e6:02:91:
aa:7a:bb:82:57:72:04:c0:ae:15:b9:2c:84:86:60:
4f:4b:60:29:c6:7b:82:1d:64:c6:fd:17:4d:22:dc:
7e:9a:a2:41:44:c0:90:86:95:7f:56:66:6b:8d:34:
19:ad:ee:6f:a1:8f:d9:0c:99:1f:b2:28:49:7d:8d:
28:a0:16:99:41:82:19:5e:12:6a:45:90:38:f4:3a:
45:60:b8:2b:02:8e:31:d6:c1:26:06:97:6a:05:ad:
ec:f4:28:60:79:89:2e:0c:e7:e5:cf:6f:75:09:54:
6a:e1:3f:e9:eb:ac:11:af:fb:dd:0b:50:ff:78:ad:
d0:6d:37:dc:3a:e6:fb:6c:d0:c1:5c:5c:5e:ee:a2:
6a:cf:da:55:5f:b2:4c:8b:ee:62:0f:92:fe:ff:ce:
d6:78:83:e0:7a:c3:b6:df:90:9c:c6:2e:b3:b8:38:
90:71:71:56:a0:67:8f:bf:75:36:50:47:d4:65:e0:
c3:9b:37:dc:ae:5d:ac:a4:a5:3f:7d:ff:9f:ea:af:
dc:9d:5d:6a:5c:89:98:22:6a:4f:fb:f9:1f:4c:bb:
37:99:41:91:57:78:2a:b9:0f:67:2e:38:4a:71:ed:
ce:4b:54:92:5b:3b:86:bd:1b:4b:ef:01:a6:1f:2b:
e7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FA:26:79:D1:02:0E:07:19:4C:CE:35:D2:AF:02:09:36:11:34:5D
X509v3 Authority Key Identifier:
keyid:26:D3:F3:74:0A:F0:4B:E0:08:69:BF:68:0D:D3:73:FA:32:E2:A5:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/26D3F3740AF04BE00869BF680DD373FA32E2A56D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CQXv7W3cSJS4ytd6hqm1CFHTFajjKYUHtX5YqhyxUoA9/1/323830343a316265383a3a2f33322d313238203d3e203631373536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1be8::/32
Signature Algorithm: sha256WithRSAEncryption
a3:1c:21:c1:bd:ba:4a:c9:fa:ee:e0:98:3d:46:8a:ab:eb:63:
6f:99:69:86:0a:b3:e8:f5:ad:12:0e:af:79:8e:92:54:89:b3:
93:7c:21:1d:9f:2b:b1:cf:29:57:ca:2c:64:96:bb:ff:ff:8f:
65:22:fd:ff:99:8c:0b:67:10:6a:1c:f5:9e:e8:66:58:a1:7f:
49:c9:86:c0:51:f9:56:e2:d1:c9:5e:07:30:10:96:81:b7:a1:
61:10:20:e7:41:c5:fe:32:d9:17:35:1f:0d:92:61:71:08:85:
ca:57:6c:e4:2f:c9:52:c0:e2:f1:79:28:10:dc:00:42:8b:12:
49:e5:ad:cd:ba:36:a2:c7:e3:57:fc:39:fc:39:fd:06:87:9a:
97:cc:a9:5e:1e:9f:40:af:a2:12:e7:a4:39:af:cf:12:c0:f1:
34:c3:69:b0:be:da:1b:21:12:ad:76:79:d1:43:f6:ad:13:ad:
4a:54:e7:70:0b:b2:9c:f2:b7:eb:8a:28:51:b0:4e:e1:2d:ad:
ee:0e:ae:03:1a:f2:9b:e0:aa:b4:41:63:83:a0:a9:3d:8d:18:
9b:cf:2a:9b:a3:6f:c0:f3:c4:c1:33:ba:9c:3f:26:75:fa:b6:
c6:66:ab:af:e1:d9:47:8c:45:2f:8b:52:64:40:ff:ed:13:d1:
f6:9d:67:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:09:43 2025 by rpki-client