Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa
File: 323830343a356639303a3a2f33322d313238203d3e20323639313039.roa (raw, json)
Hash identifier: hs8DoEmgShjKPe+w3EPSE6ZVH3XX9naM608ccuzyNOw=
Subject key identifier: B6:62:96:10:C7:D9:3F:11:12:03:0A:D1:45:F7:CE:9D:0C:00:EA:09
Certificate issuer: /CN=731E05587A515DC8E182AA61A430D26BD051E940
Certificate serial: 5181BF88AFAD7A2331236672A3EC99CBA550D931
Authority key identifier: 73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa
Signing time: Tue 16 Jul 2024 17:05:08 +0000
ROA not before: Tue 16 Jul 2024 17:00:08 +0000
ROA not after: Tue 15 Jul 2025 17:05:08 +0000
asID: 269109
IP address blocks: 2804:5f90::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:81:bf:88:af:ad:7a:23:31:23:66:72:a3:ec:99:cb:a5:50:d9:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=731E05587A515DC8E182AA61A430D26BD051E940
Validity
Not Before: Jul 16 17:00:08 2024 GMT
Not After : Jul 15 17:05:08 2025 GMT
Subject: CN=B6629610C7D93F1112030AD145F7CE9D0C00EA09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:82:a5:9c:6e:cd:6e:7a:9e:ea:9f:cf:ba:59:
88:3e:29:c4:c3:94:96:6d:4f:3a:5e:99:f7:94:a6:
97:45:79:68:fd:d0:f7:4a:30:f3:49:2f:57:a0:09:
83:6e:d2:0a:93:ee:c7:0b:31:98:ff:fc:f7:18:1d:
e4:39:f1:a1:7c:7d:ef:4d:f2:ca:05:6d:b6:f8:b9:
72:80:75:80:bf:c6:43:43:e1:0e:f1:7a:5e:38:73:
00:00:bd:59:cd:7c:be:9b:2e:b3:cf:0c:f6:08:05:
aa:5d:d2:e4:e8:91:a9:52:2f:58:f6:5c:cf:35:54:
ab:51:23:1b:ef:e6:d7:9d:3f:b5:77:56:85:d1:11:
d5:2a:db:58:86:25:75:fc:58:51:ef:31:b3:32:b5:
73:09:b8:64:2d:db:83:75:b8:25:57:a1:04:62:de:
15:63:17:d6:ea:ff:4e:43:c8:c9:21:ea:fd:b2:35:
9c:d2:2b:f4:4c:37:f3:9e:b0:2e:c3:7b:e5:ba:8f:
e4:7e:df:97:d4:2a:20:1b:99:09:64:e3:e9:ae:91:
59:e3:fc:a6:28:eb:ac:48:f7:1a:b3:22:e8:6e:f7:
0a:e3:ca:dc:86:0b:f7:cf:64:66:c8:64:ce:7c:d6:
23:39:47:99:3f:af:58:7b:9b:c5:5f:cc:e5:a4:3b:
3f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:62:96:10:C7:D9:3F:11:12:03:0A:D1:45:F7:CE:9D:0C:00:EA:09
X509v3 Authority Key Identifier:
keyid:73:1E:05:58:7A:51:5D:C8:E1:82:AA:61:A4:30:D2:6B:D0:51:E9:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/731E05587A515DC8E182AA61A430D26BD051E940.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/731E05587A515DC8E182AA61A430D26BD051E940.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAXKWh5muzVCfAqPTsbtCLjXbiYfe981YUEVz17Fz1dT/0/323830343a356639303a3a2f33322d313238203d3e20323639313039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5f90::/32
Signature Algorithm: sha256WithRSAEncryption
16:4e:a9:64:d2:be:03:cb:6e:4a:5b:3a:85:28:61:45:80:1b:
b8:6b:90:8f:7c:74:81:a1:49:82:2c:b2:92:9b:b3:28:6e:ad:
ee:77:d6:ca:d8:2f:5a:fc:b4:3e:a9:09:b2:d9:7d:ec:52:99:
30:78:8b:05:dc:c6:74:78:23:09:5d:0d:e4:ef:11:f8:45:0e:
89:ec:6b:fc:02:8e:ae:18:c5:1a:be:16:e2:4e:f3:67:94:1d:
2f:2e:d8:c8:71:9c:2d:71:98:7b:42:81:cc:5a:35:7f:a9:80:
e2:fa:94:e0:57:70:54:fd:16:18:ed:0e:65:a2:c3:38:73:6f:
88:ea:85:ef:33:35:2d:72:76:a1:af:83:61:de:5c:e5:0b:ad:
26:74:1d:50:a4:c6:6f:35:14:d2:5e:4d:91:81:af:f7:20:fc:
4d:91:3b:a5:c9:d5:af:b1:ee:b8:27:91:15:2b:2d:b8:31:ec:
f0:30:7f:f5:9c:5c:7b:c5:d7:56:93:db:b0:61:cc:c3:14:f4:
b8:c0:3c:e4:be:5b:86:94:a6:f5:52:96:25:a5:4c:50:01:bb:
21:42:1a:0e:33:2e:75:72:39:96:e2:2d:13:e4:47:59:e6:f9:
81:5d:39:7f:56:5d:f4:f6:ec:99:2e:4d:07:5b:e3:8f:e9:38:
4e:24:5f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:49:32 2025 by rpki-client