Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa
File: 323830343a386532633a3a2f33322d3332203d3e203230343733.roa (raw, json)
Hash identifier: hOzIcJdNd/RxgEaXvXyg9e9Qetc0Ol9pDgV2OH3wozI=
Subject key identifier: 2D:3B:93:7B:2B:E1:BA:84:F2:D8:1C:EE:9A:84:0F:5E:76:A0:72:2A
Certificate issuer: /CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Certificate serial: 53AB36985225AEA2C49B9363D857E09F1D5E526D
Authority key identifier: 10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa
Signing time: Fri 27 Dec 2024 19:22:11 +0000
ROA not before: Fri 27 Dec 2024 19:17:11 +0000
ROA not after: Fri 26 Dec 2025 19:22:11 +0000
asID: 20473
IP address blocks: 2804:8e2c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ab:36:98:52:25:ae:a2:c4:9b:93:63:d8:57:e0:9f:1d:5e:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA
Validity
Not Before: Dec 27 19:17:11 2024 GMT
Not After : Dec 26 19:22:11 2025 GMT
Subject: CN=2D3B937B2BE1BA84F2D81CEE9A840F5E76A0722A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:d0:6a:17:91:3b:80:d6:c9:d6:08:d6:36:
4d:ad:27:5d:90:82:59:5c:b2:a3:fa:94:71:a4:7e:
f9:e2:3e:af:6f:9b:b6:bb:e8:46:fb:a7:d0:09:80:
d9:cc:b1:32:a9:f5:fc:c4:25:c1:21:c4:c5:9f:d6:
b6:27:bb:d9:ea:69:70:f2:56:8c:b4:cf:65:91:6b:
78:09:3c:b4:cd:d0:be:a7:95:a8:2c:02:da:71:1c:
96:f9:d7:c0:51:a9:32:9c:50:c8:8d:c3:86:16:06:
ce:a7:d0:5b:a7:6d:89:45:5f:82:20:ef:7b:98:a7:
34:46:e7:39:08:35:8b:8d:cb:13:98:4e:18:89:45:
90:55:1c:4e:ca:88:44:b6:59:0c:6b:bd:6f:8c:80:
a5:85:07:b7:73:7b:33:08:2f:37:02:f8:21:26:9b:
0a:25:44:9c:b7:65:f5:1b:9c:22:32:92:a2:7d:f7:
fd:95:43:ac:dd:bd:3e:f7:11:b1:93:33:11:8b:97:
49:15:af:34:83:50:f5:79:28:24:1c:2f:73:0f:ae:
1a:f5:f3:ad:7b:e5:52:6c:34:4f:32:2d:87:18:43:
85:95:03:8f:f3:67:8c:3d:8a:ac:2f:dc:72:7e:55:
17:87:76:56:54:60:1a:82:9e:f0:bc:95:8a:c7:00:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:3B:93:7B:2B:E1:BA:84:F2:D8:1C:EE:9A:84:0F:5E:76:A0:72:2A
X509v3 Authority Key Identifier:
keyid:10:33:FD:76:52:BC:4E:50:27:EF:F9:C0:EA:46:34:A9:7B:32:A7:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1033FD7652BC4E5027EFF9C0EA4634A97B32A7CA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CTRvSZPTpy3fheWpmcPmyUFabCnfWogRMfpVLhYchtJZ/0/323830343a386532633a3a2f33322d3332203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e2c::/32
Signature Algorithm: sha256WithRSAEncryption
bf:f8:57:54:af:0a:bf:3e:99:70:d8:8f:d5:3c:05:19:49:b0:
b5:23:26:76:b9:ab:6a:a9:58:fd:2a:a9:e2:7a:1e:a3:c3:44:
b0:e3:ec:fb:5a:d0:d1:cd:f9:06:59:de:c7:8c:5b:00:3d:15:
92:87:22:3c:a5:f5:78:44:5f:50:1d:32:33:7b:28:2b:05:ff:
32:95:33:24:8f:f0:32:ae:b7:c0:82:b0:95:bd:62:02:e8:0c:
2e:94:e4:2b:6d:ae:ea:e9:d5:fd:e5:e1:65:f0:02:21:f8:18:
30:e1:e6:97:d7:c6:dd:79:76:92:41:0a:2f:0b:a2:18:b4:d1:
a1:c3:f2:dd:c4:9f:46:d5:6c:1c:5d:dd:b8:65:c8:c6:ac:ca:
91:ac:67:1b:e4:7f:7f:b4:fd:d4:de:d5:46:aa:80:a3:76:c0:
5c:50:4d:ab:34:2f:e7:fd:fe:b4:59:9b:be:d7:c1:56:16:c9:
7e:01:bf:b0:21:fc:79:42:35:89:1c:e6:18:a4:27:70:dc:e2:
e3:68:dc:0c:62:c6:8e:e2:95:78:cb:a7:2e:3c:ed:95:7c:a9:
60:6d:48:ea:b4:8a:c4:a6:ff:f5:0e:55:00:a6:96:41:e6:e2:
70:09:c9:2a:dd:d3:aa:2d:81:a8:7a:b1:20:54:39:94:4a:7b:
c2:ed:07:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:58:36 2025 by rpki-client