Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
File: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (raw, json)
Hash identifier: 1criocqu2qw36JDFWgBXTD02BgaCgVxa5N+w8UibFZQ=
Subject key identifier: 90:6A:0C:C5:0D:BF:02:E9:82:F4:9C:60:FB:01:FC:80:AC:29:68:6F
Certificate issuer: /CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Certificate serial: 12CB1FD94399F0B2CCAECCA5772A17F600D670C2
Authority key identifier: AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
Signing time: Mon 22 Jan 2024 15:28:44 +0000
ROA not before: Mon 22 Jan 2024 15:23:44 +0000
ROA not after: Mon 20 Jan 2025 15:28:44 +0000
asID: 264544
IP address blocks: 2804:213c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:cb:1f:d9:43:99:f0:b2:cc:ae:cc:a5:77:2a:17:f6:00:d6:70:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AA42DB70ADF51E1CBF7711D4B42E44050504AB8E
Validity
Not Before: Jan 22 15:23:44 2024 GMT
Not After : Jan 20 15:28:44 2025 GMT
Subject: CN=906A0CC50DBF02E982F49C60FB01FC80AC29686F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:0b:b6:b1:d4:d8:52:33:1e:fc:53:52:90:
e4:d1:8e:f5:96:09:f1:b3:4a:76:f8:60:ae:10:8a:
0d:b1:53:e0:d6:c1:28:9e:9a:35:6a:d9:c1:3a:88:
c2:ed:13:0d:e2:bc:b7:79:9d:d1:67:17:5b:66:db:
01:71:7e:a0:ce:4c:62:50:a0:bf:1f:1c:8a:b1:6a:
ce:cb:88:51:17:49:d0:96:9e:19:72:fb:94:a8:ca:
ce:02:5f:61:c3:8b:94:de:b9:67:c8:d8:5a:53:95:
af:ed:fa:af:5c:d3:10:d0:b5:10:49:67:fb:34:10:
1c:e3:dd:d9:62:11:ef:03:c4:a5:75:b5:9d:98:4b:
6c:86:86:61:7f:04:bf:ee:ec:dc:ef:25:9e:d1:01:
3f:45:d5:52:62:99:cb:8a:43:f9:7e:29:17:18:4e:
3a:ee:44:80:2d:48:1a:92:38:47:4e:59:b1:01:44:
17:13:ec:88:9f:e6:0f:7a:0a:83:3a:20:f2:f1:7a:
a5:0a:72:e0:29:d9:41:10:2c:4a:9e:49:36:9b:dc:
67:ee:57:7f:4b:d4:44:94:34:e4:ea:1a:1d:a5:a9:
46:b9:48:36:86:09:14:e0:f7:b8:3b:fe:46:a1:a1:
31:18:e6:d2:2f:53:4d:5d:e8:af:42:5c:de:e1:4f:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6A:0C:C5:0D:BF:02:E9:82:F4:9C:60:FB:01:FC:80:AC:29:68:6F
X509v3 Authority Key Identifier:
keyid:AA:42:DB:70:AD:F5:1E:1C:BF:77:11:D4:B4:2E:44:05:05:04:AB:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA42DB70ADF51E1CBF7711D4B42E44050504AB8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/1/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:213c::/32
Signature Algorithm: sha256WithRSAEncryption
9b:33:43:26:1c:2d:51:6c:df:c0:47:1d:65:62:ce:dd:e9:15:
9b:3f:7b:fd:e8:32:c3:d2:b7:75:11:33:33:20:d7:8a:cf:81:
83:ee:57:6e:04:91:bf:8f:be:4a:0f:16:8f:6a:65:fe:86:75:
ec:b5:aa:e9:65:5c:5a:68:be:98:88:dd:f3:fe:79:80:65:63:
d3:7c:ed:bb:1e:89:ee:42:e6:8e:c6:0c:ad:a1:e1:b7:5d:36:
17:3e:67:f3:18:43:8e:0d:3f:53:11:48:ca:17:d9:a6:87:85:
24:2a:f2:36:a5:ac:e3:0a:ed:3d:8d:1d:10:9a:93:fc:58:8f:
e9:c4:a6:f3:a3:8c:b2:ca:66:ee:d3:ff:00:a2:1f:24:14:60:
91:fc:ed:39:c8:66:b8:ab:49:88:cd:8a:d3:fe:e2:96:17:19:
d4:ed:3f:1f:fc:3f:2a:a2:a4:7a:c0:f4:3e:60:25:48:45:b8:
aa:b7:7f:b1:09:51:03:cd:71:e1:65:23:cb:28:e1:5b:a3:b2:
52:45:96:c7:0b:65:0f:f7:20:15:de:1f:1b:92:e3:9a:bd:36:
3e:6e:c5:b6:b4:1d:1d:7d:e8:46:b1:67:af:c4:5c:a2:37:4b:
c7:33:4c:ee:47:46:09:9a:2d:51:d9:63:cd:65:f7:48:aa:3c:
00:d8:ac:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:49 2025 by rpki-client