Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3430303a3a2f34382d3438203d3e203631383332.roa
File: 323830343a316130343a3430303a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier: htA8EYVTypMfhdJl8B/LrFtL1sdnMJPffOOtY65DB7k=
Subject key identifier: 68:BF:DC:0A:03:BC:50:97:58:D2:9B:B0:4E:23:43:5C:F1:AD:11:E9
Certificate issuer: /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial: 0E14C43C1A0AA73E563A48A6A10E2B2F4A1BB595
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3430303a3a2f34382d3438203d3e203631383332.roa
Signing time: Wed 07 Jun 2023 16:37:30 +0000
ROA not before: Wed 07 Jun 2023 16:32:30 +0000
ROA not after: Wed 05 Jun 2024 16:37:30 +0000
asID: 61832
IP address blocks: 2804:1a04:400::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:14:c4:3c:1a:0a:a7:3e:56:3a:48:a6:a1:0e:2b:2f:4a:1b:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Validity
Not Before: Jun 7 16:32:30 2023 GMT
Not After : Jun 5 16:37:30 2024 GMT
Subject: CN=68BFDC0A03BC509758D29BB04E23435CF1AD11E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:14:96:92:ce:25:69:43:02:0b:fe:44:24:96:
51:21:ab:6b:f7:4c:30:2c:3e:4e:88:fc:50:f9:1d:
e5:ed:02:98:98:1c:2f:cf:c6:9e:77:bb:fd:78:11:
5d:63:4d:68:22:2c:af:81:99:2b:98:53:09:a3:f6:
98:46:28:76:60:b4:c0:52:9c:b5:64:0e:13:cc:5d:
59:9b:46:19:49:9f:63:0e:bb:49:57:c2:42:1e:c5:
6b:e5:3d:10:ed:f9:94:be:b8:72:b4:bb:75:c6:ef:
26:a6:0e:f2:bd:bb:5c:01:72:b1:ef:8c:54:17:71:
83:a5:55:93:fa:b8:15:29:db:ad:40:ca:89:49:a4:
b0:64:40:38:b6:ea:f0:84:bd:81:cb:7c:dd:97:77:
0f:81:22:c2:10:57:f4:2f:cc:eb:7b:ee:26:5a:19:
f8:85:2c:e8:b4:41:a0:72:04:51:84:6a:f7:a8:97:
ee:76:e1:5c:4a:94:fa:16:ee:c1:c5:d7:13:db:2d:
cc:35:cd:fb:2d:00:07:c0:e8:7c:2b:fe:62:35:5e:
2e:43:1f:e6:d7:95:bc:ce:9a:24:7c:8a:40:8f:18:
45:81:ff:99:c1:db:bd:38:04:27:c7:d6:67:75:45:
42:3c:0c:99:ca:81:5a:76:a5:da:e4:4b:fa:46:84:
ce:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:BF:DC:0A:03:BC:50:97:58:D2:9B:B0:4E:23:43:5C:F1:AD:11:E9
X509v3 Authority Key Identifier:
keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a3430303a3a2f34382d3438203d3e203631383332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a04:400::/48
Signature Algorithm: sha256WithRSAEncryption
17:06:91:86:5e:5c:e6:b1:3c:4d:36:55:5a:21:2f:fb:e4:ff:
87:6f:50:dd:e7:4b:7a:af:9b:cc:c1:ae:35:c1:9c:d1:5e:40:
52:6d:cf:7c:58:36:85:6b:9d:9d:9a:e9:74:71:96:32:22:d6:
7b:22:f9:5e:28:63:e1:84:9a:99:08:56:81:68:8e:13:3a:95:
1b:d6:e6:a2:c3:88:55:a1:f1:09:96:f0:01:de:1b:d2:a7:26:
30:e0:9b:ec:ff:7f:9f:94:12:a9:a9:22:9f:0c:ba:84:1b:49:
ee:78:99:48:8f:92:55:6c:c3:d7:76:55:a5:23:5f:49:5f:84:
3d:1b:7f:22:93:f8:6f:a9:2c:5d:ca:1a:09:56:f0:0c:0f:3c:
f2:5b:d1:cf:7f:76:61:79:03:ff:57:21:12:40:df:7c:ac:8d:
03:6e:8e:4c:48:bf:a4:83:1c:47:c2:0c:43:61:f9:0b:7c:b3:
e7:bf:7c:a2:a2:a3:f6:9c:13:9c:bb:5f:10:8c:51:25:c1:a7:
e8:2a:9e:4c:e5:c5:58:a5:ab:f1:cc:92:29:d3:43:42:c3:8e:
27:84:0f:ce:97:e9:be:0f:0d:a3:b6:5f:9b:d1:78:a9:ac:ff:
7f:a2:25:ae:43:70:c1:ad:8f:9e:b0:99:20:22:6b:66:cc:f1:
3a:11:7a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:36:58 2025 by rpki-client