Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa
File: 323830343a373362343a3a2f33322d3332203d3e20323730393332.roa (raw, json)
Hash identifier: a9ykZmOTBzPTkILL9ZASaDAyahaqwY1qhoiB+mjJ2Q8=
Subject key identifier: 04:D3:04:17:26:78:42:95:4B:A4:F8:17:DE:31:A4:2E:55:2F:86:E0
Certificate issuer: /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial: 7D6DA2B98B09B449FDB5FD213CAFC1C6CBE8117A
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa
Signing time: Wed 13 Mar 2024 12:03:14 +0000
ROA not before: Wed 13 Mar 2024 11:58:14 +0000
ROA not after: Wed 12 Mar 2025 12:03:14 +0000
asID: 270932
IP address blocks: 2804:73b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:6d:a2:b9:8b:09:b4:49:fd:b5:fd:21:3c:af:c1:c6:cb:e8:11:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Validity
Not Before: Mar 13 11:58:14 2024 GMT
Not After : Mar 12 12:03:14 2025 GMT
Subject: CN=04D30417267842954BA4F817DE31A42E552F86E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b5:7d:38:7b:6d:7f:f8:3a:db:f4:5c:cc:b8:
c2:88:80:25:87:05:51:8c:ed:de:5c:44:6c:26:b5:
81:4c:41:d9:18:f6:15:3e:05:ac:14:d2:6d:5d:85:
8d:0b:a3:4d:66:a2:60:34:a9:97:f0:33:2f:7f:4d:
fb:e4:59:06:d5:57:be:18:24:10:b8:23:5e:7d:0d:
8d:cf:6e:7f:a4:1e:88:d4:4a:6b:fe:c7:51:75:19:
bd:80:71:d1:4d:46:2e:55:20:ad:10:35:f5:a1:72:
df:f4:99:22:a9:57:1d:e6:0d:54:1a:07:52:a0:36:
d7:e8:64:a9:90:2d:94:42:0e:e9:71:e8:a5:f0:15:
a3:60:fa:fd:b7:e3:cb:8f:a7:88:47:3b:e8:c9:9e:
eb:01:72:0f:ef:7f:c1:7a:48:5c:f2:8d:12:7d:90:
4e:cf:25:77:a2:ef:e6:b3:b7:e9:47:a7:28:7e:3c:
bc:ae:9a:01:db:46:e5:ec:11:82:19:56:0f:b3:e8:
6c:3b:30:31:05:5d:ef:1e:71:d6:f0:59:73:c6:aa:
8e:9a:89:20:98:05:cb:a4:93:57:81:89:fc:70:76:
4a:a7:df:2a:19:a6:b7:8d:36:fd:d5:95:05:4a:2e:
db:11:dd:8a:b1:24:cd:c5:64:70:36:79:1c:e8:48:
c7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:D3:04:17:26:78:42:95:4B:A4:F8:17:DE:31:A4:2E:55:2F:86:E0
X509v3 Authority Key Identifier:
keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:73b4::/32
Signature Algorithm: sha256WithRSAEncryption
aa:ba:29:0a:f2:cb:25:b6:8c:d7:ac:d8:51:37:f4:f6:6d:4f:
c7:61:4d:69:b1:92:9b:07:8b:b5:ce:ed:b5:29:49:b8:80:fc:
a3:0e:3e:5b:5b:d9:42:1f:0d:01:68:b3:77:dc:01:70:67:59:
6b:4c:e0:25:e5:e8:86:9e:ec:fa:2b:cd:59:be:08:84:61:1e:
f6:f9:96:68:75:54:ab:f5:df:d9:3f:03:1e:60:ea:55:ff:72:
64:72:0f:4c:10:ce:fa:6e:c0:e6:b8:fd:c3:34:c8:97:15:18:
4c:8b:ed:a0:c2:18:c9:d6:06:b0:a3:af:e4:53:f8:70:65:6b:
7a:68:b3:59:90:3e:8a:6c:16:95:3d:d8:a8:e2:85:8e:d1:7a:
5d:83:be:92:ce:90:de:73:e6:88:b3:ce:ad:18:a4:30:82:3a:
72:35:d5:8d:c7:36:43:9a:09:61:13:ff:78:47:fa:76:3c:b3:
89:68:12:06:4b:b7:6e:5d:af:0a:50:d5:82:79:01:b2:2a:20:
d3:39:02:2c:e5:b1:94:99:ef:62:4d:d7:b2:cc:89:a3:52:4d:
f4:54:e1:a2:a1:6e:c8:a7:2a:a2:30:03:6f:b5:e9:9b:7b:a6:
ed:46:09:50:62:fd:ed:f9:a1:e9:55:9a:c1:61:fd:a2:53:8b:
43:49:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:17 2025 by rpki-client