Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
File: 323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (raw, json)
Hash identifier: CUilTrR7uVm3/FT2d9TmHoP7/0T2naB0xN5yfrhZt7c=
Subject key identifier: DE:B4:7D:EE:DF:D2:F4:30:CD:F7:14:24:C4:57:50:59:2E:EA:76:C4
Certificate issuer: /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial: 2FBA30CC56A872F7713BF613318C473B16F15AD9
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
Signing time: Thu 16 Nov 2023 17:54:17 +0000
ROA not before: Thu 16 Nov 2023 17:49:17 +0000
ROA not after: Thu 14 Nov 2024 17:54:17 +0000
asID: 271001
IP address blocks: 2804:74c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:ba:30:cc:56:a8:72:f7:71:3b:f6:13:31:8c:47:3b:16:f1:5a:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Validity
Not Before: Nov 16 17:49:17 2023 GMT
Not After : Nov 14 17:54:17 2024 GMT
Subject: CN=DEB47DEEDFD2F430CDF71424C45750592EEA76C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:9c:c5:78:2d:dd:72:a0:ed:f1:fc:b5:60:
06:81:b2:e8:50:96:b9:35:d4:5d:1c:27:d0:9e:45:
1d:7b:81:df:4f:44:2e:92:84:41:91:47:aa:09:d6:
76:c8:bb:f0:1e:66:7f:13:f1:70:26:a9:e4:b7:6f:
e2:63:12:ed:1e:56:e6:4c:a3:95:7d:d0:94:e9:5e:
c8:ef:5f:75:b5:d4:9d:4d:3b:9c:11:43:42:09:0a:
69:23:f3:b9:5d:5d:71:e1:48:d3:ae:82:39:1c:1e:
ac:a6:b1:4a:bc:10:da:06:d4:fa:7d:15:c4:2d:28:
40:72:1e:38:51:b8:e1:05:04:94:24:14:d1:11:31:
ad:17:7b:69:8e:11:22:b9:a9:d1:e9:af:08:0f:a1:
30:1c:77:98:22:67:66:94:74:60:ff:18:c8:f0:1b:
d6:af:98:ae:40:29:86:33:74:20:71:34:2e:30:52:
ea:cc:55:e4:b4:3f:10:19:a2:c0:f0:1f:59:31:fc:
03:43:9f:c8:5d:46:0e:db:c0:af:91:54:78:d7:7a:
46:5b:f8:71:f3:b1:4f:ff:2d:16:a7:63:d2:0e:a5:
0e:cf:51:01:fe:b4:63:70:64:f4:9a:f0:5f:75:98:
25:f7:d0:5a:08:84:f4:f6:76:56:eb:3e:45:6c:b3:
c2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:B4:7D:EE:DF:D2:F4:30:CD:F7:14:24:C4:57:50:59:2E:EA:76:C4
X509v3 Authority Key Identifier:
keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:74c0::/32
Signature Algorithm: sha256WithRSAEncryption
a5:68:d7:bb:c7:70:9d:ed:88:24:ab:4e:95:0a:9f:60:43:6b:
da:7d:a6:8b:b7:39:cc:11:0c:16:d6:b1:1e:b9:80:11:b4:08:
79:66:2e:91:7b:2c:e8:08:66:ce:56:10:b9:f7:3c:ed:2f:e3:
b4:05:70:1a:df:13:c1:7b:b6:bb:d5:00:35:37:43:69:74:0c:
de:c0:e7:6a:8a:13:93:71:19:e6:de:4e:a7:1c:ab:f3:bf:ed:
3d:1a:55:05:f8:75:d9:f1:c1:e3:b3:28:54:8d:7e:77:a7:c7:
31:d8:5f:31:4c:1f:ad:ac:6c:ea:61:3d:1d:33:4a:e3:2b:30:
b8:e0:4a:aa:0b:8a:5b:fd:68:32:c6:9f:2d:35:31:e5:a7:09:
40:d1:62:45:12:51:bf:0b:69:f0:91:63:a9:1c:2b:ab:c8:fa:
ad:1c:d2:53:a2:e9:03:93:7d:cc:f5:bd:34:08:dd:28:08:2e:
60:bf:7c:dd:a0:d3:30:fe:fb:65:f1:93:a6:7b:7c:46:4e:76:
e5:b4:10:3e:f7:be:22:4f:12:9d:ae:0c:38:96:eb:16:c1:83:
c6:ab:dc:a7:60:2c:25:aa:a9:6b:b3:3f:3a:30:7d:a0:46:94:
85:e9:61:62:a2:cc:09:03:29:25:44:12:2e:1e:d6:12:34:6d:
bb:92:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:43:18 2025 by rpki-client