Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa
File: 323830343a376133303a3a2f33322d313238203d3e20323639333938.roa (raw, json)
Hash identifier: iDvxgpMJlH3JM2+Quo7dE4Zx5jlgYLozLxhzd2CE53A=
Subject key identifier: 07:D7:84:AB:7F:5F:7A:9B:8A:6D:82:0B:76:34:25:0E:93:1F:3F:3B
Certificate issuer: /CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Certificate serial: 161352D7CFF389C0DA5D39D61694D5EDE3F6CAD1
Authority key identifier: DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa
Signing time: Tue 28 Feb 2023 13:48:39 +0000
ROA not before: Tue 28 Feb 2023 13:43:39 +0000
ROA not after: Tue 27 Feb 2024 13:48:39 +0000
asID: 269398
IP address blocks: 2804:7a30::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:13:52:d7:cf:f3:89:c0:da:5d:39:d6:16:94:d5:ed:e3:f6:ca:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7
Validity
Not Before: Feb 28 13:43:39 2023 GMT
Not After : Feb 27 13:48:39 2024 GMT
Subject: CN=07D784AB7F5F7A9B8A6D820B7634250E931F3F3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:a1:a2:47:f3:8f:36:28:bd:4d:f9:fc:4b:
1a:e0:5a:3a:24:51:cb:3a:bc:f4:4b:59:0a:5c:c9:
af:22:7a:05:83:44:e1:3c:85:b7:90:c7:9a:f8:44:
0e:1d:3c:03:b1:dd:0b:3e:a1:1c:cb:1d:ef:4b:2d:
77:e2:d5:e9:e1:ae:ab:c4:6b:0e:19:47:ea:6e:d1:
e7:36:bd:23:d4:a2:54:b6:65:2c:97:43:5f:02:dc:
b3:45:2f:49:3f:a7:90:f0:d2:d6:d5:75:b5:97:2b:
aa:7e:26:30:02:cd:33:7a:a4:44:68:89:2c:f6:53:
60:9e:15:5f:88:9e:0e:e9:c8:09:01:a8:6e:dc:02:
08:ca:56:3b:94:48:90:31:2b:dd:d3:a2:5d:0b:64:
ce:01:70:ed:13:0c:7f:c9:6a:29:80:5a:1a:73:74:
00:a0:96:6b:53:8d:7a:96:d5:9b:fb:43:5d:e5:59:
ef:df:d9:51:3b:b7:e2:c4:47:4e:76:f0:cc:60:20:
85:3d:e5:b1:99:24:b7:31:a9:33:3d:81:c4:8b:e2:
5a:c5:a2:6c:06:78:01:78:c2:7a:38:8f:c9:d2:17:
4c:8b:5a:c7:c6:31:eb:a6:fc:15:d3:05:a7:2a:9f:
56:65:17:ed:62:97:29:2c:78:04:41:f9:f2:d6:cd:
ba:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D7:84:AB:7F:5F:7A:9B:8A:6D:82:0B:76:34:25:0E:93:1F:3F:3B
X509v3 Authority Key Identifier:
keyid:DB:80:9A:DF:AE:28:05:64:AF:8F:7B:4B:35:7D:1A:B3:AE:52:F1:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB809ADFAE280564AF8F7B4B357D1AB3AE52F1F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3cbu1FtcMCjHBuo5hCo9DPCaHXdX1WcR1XWzVpunRV3/0/323830343a376133303a3a2f33322d313238203d3e20323639333938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a30::/32
Signature Algorithm: sha256WithRSAEncryption
8f:96:e9:83:4e:d6:88:e5:6b:3c:65:a6:be:55:c7:c5:da:1e:
84:39:3f:66:f1:20:d4:dc:8c:52:64:02:b5:16:68:4f:fe:5f:
bc:70:d7:69:37:58:12:b8:83:dc:6b:2b:6e:79:e3:f4:1e:4f:
05:3f:a8:fa:6f:8f:cb:7a:80:b2:9e:76:92:0c:b8:74:c7:1b:
7f:16:c9:cf:3e:b7:5e:f7:14:13:ab:07:e4:00:e2:67:a6:cd:
e7:a3:41:44:90:56:66:bb:80:58:95:83:07:e9:08:4c:24:bb:
d9:25:84:73:22:9c:69:3b:a8:35:8d:a5:98:c6:71:a1:2e:8b:
b1:0d:8e:60:0c:92:cc:32:76:c0:5c:cc:8a:6e:d1:55:75:15:
9b:f7:7a:99:b1:30:ba:76:84:64:03:0d:1d:56:32:4d:08:a5:
d7:71:34:98:6e:fa:c8:c3:81:8c:a6:2a:11:f5:e1:b8:ec:0f:
6f:1c:c4:3b:90:83:cc:49:7c:85:30:f1:d8:1f:54:92:5c:b1:
bd:15:7a:0f:35:a1:29:a3:79:ef:22:c3:55:50:67:d8:03:61:
7f:e1:f9:04:af:cc:2e:c7:4a:47:8d:8e:8d:6a:bb:9b:66:bf:
c8:56:bf:20:a0:08:cb:2d:0f:29:ab:5e:4f:63:ee:75:12:c6:
9a:b9:b4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:35:39 2025 by rpki-client