Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa
File: 323830343a356438343a3a2f33322d3332203d3e20323638393737.roa (raw, json)
Hash identifier: ThvyXXihIO/4Tfjni0c8OP+L22tYvvQipb6NQjV27t8=
Subject key identifier: 53:2F:71:05:8C:91:36:E7:74:13:AB:87:49:BB:E3:99:51:F6:D8:21
Certificate issuer: /CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
Certificate serial: 5736BA53E50FA15AA6414837F8FEA1B457EEF70B
Authority key identifier: 60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa
Signing time: Sat 22 Jul 2023 14:58:50 +0000
ROA not before: Sat 22 Jul 2023 14:53:50 +0000
ROA not after: Sat 20 Jul 2024 14:58:50 +0000
asID: 268977
IP address blocks: 2804:5d84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:36:ba:53:e5:0f:a1:5a:a6:41:48:37:f8:fe:a1:b4:57:ee:f7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60BF19636304497B9AF26C48A5DC1EB337D25A44
Validity
Not Before: Jul 22 14:53:50 2023 GMT
Not After : Jul 20 14:58:50 2024 GMT
Subject: CN=532F71058C9136E77413AB8749BBE39951F6D821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:a4:a4:29:1d:e8:2f:9a:9b:5f:ba:00:91:
04:15:a5:e6:e2:b9:47:72:bf:c6:f9:eb:fe:17:3d:
08:c8:7c:9a:c2:ae:19:42:9b:83:e3:f0:9a:05:8e:
c1:55:ad:ff:bc:db:fe:fe:37:0e:0b:b8:a1:47:fb:
a2:7b:81:2b:03:1b:de:bc:62:42:82:66:5d:87:06:
09:3b:2f:4d:ff:23:4a:4e:46:22:2c:15:5c:20:a0:
9c:a7:e6:eb:61:fc:3d:07:1f:8f:aa:8f:b6:07:f0:
56:a4:a4:85:75:e2:30:34:08:df:b2:05:ec:50:fa:
fb:e5:59:e0:86:13:f9:76:4a:be:86:07:42:fd:88:
2c:a2:2c:19:1d:3e:f6:1a:d5:e1:ce:a6:63:46:aa:
64:ce:25:1c:87:ab:7d:bb:a6:30:81:2c:12:41:fa:
44:8c:3e:5f:ae:cc:94:95:34:5a:94:10:12:0e:a9:
ae:d6:03:75:21:1d:e6:26:46:5d:b4:dc:1d:e7:ea:
a7:e3:8c:7b:3d:92:e9:94:6f:ab:9d:5b:1c:2c:d4:
28:20:be:dd:c1:06:30:69:a0:31:88:c1:d3:db:56:
29:65:98:3b:98:9a:3b:16:38:8d:5d:f4:a6:bd:bf:
60:3d:86:98:fa:65:04:94:39:74:06:1b:df:58:41:
76:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:2F:71:05:8C:91:36:E7:74:13:AB:87:49:BB:E3:99:51:F6:D8:21
X509v3 Authority Key Identifier:
keyid:60:BF:19:63:63:04:49:7B:9A:F2:6C:48:A5:DC:1E:B3:37:D2:5A:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60BF19636304497B9AF26C48A5DC1EB337D25A44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3TMr8wJwXPAvRxqzmNeEddgNgJvAhmevr7N4w93sF8/0/323830343a356438343a3a2f33322d3332203d3e20323638393737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5d84::/32
Signature Algorithm: sha256WithRSAEncryption
7c:22:4b:6a:4c:23:5e:ba:f6:4e:92:b8:f8:8d:0b:3e:f5:17:
28:c2:51:67:13:52:df:c4:b3:c4:62:df:80:1c:85:db:72:30:
6b:a1:1a:04:c2:2e:67:66:74:2b:54:df:bb:1d:4f:24:c1:af:
8d:97:8b:bd:0e:aa:f8:7c:24:4f:fb:07:42:63:fb:78:58:6b:
fd:60:2f:11:75:da:d1:22:6a:93:f6:83:0c:d1:0e:41:a5:d3:
e0:ef:59:bb:57:32:6d:ac:42:0c:d7:8e:61:db:f5:da:6c:c6:
f0:6b:42:42:56:c5:fb:14:1d:6a:b2:f4:44:ef:d8:17:73:97:
ed:70:7c:96:01:8b:8e:9b:9d:13:3c:69:2c:55:b9:8b:b1:36:
98:6e:8e:cc:15:15:72:9d:fa:ec:c2:4e:01:05:59:aa:81:84:
8d:f3:86:96:d9:c1:aa:6f:34:b5:97:d9:9d:c9:ed:48:5c:df:
00:9e:c9:e0:83:34:2d:e1:9b:24:84:7f:7f:fc:d5:b8:03:96:
9a:f7:32:0f:3c:ec:d5:c6:78:d8:13:93:bb:b0:6d:de:dd:cf:
b5:34:81:ec:3d:6d:ce:67:35:a1:5f:7f:af:75:74:bf:67:0f:
7c:e5:f8:43:f1:cf:5b:5f:ce:e0:11:6e:e4:8b:8b:ba:ce:09:
19:8e:25:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:00:28 2025 by rpki-client