Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33342d3334203d3e20323637333733.roa
File: 323830343a346337633a3a2f33342d3334203d3e20323637333733.roa (raw, json)
Hash identifier: I1yXzrRFm/3gzC/H4REGKJ4APn52zn1ynprtVg8OXEo=
Subject key identifier: 18:A6:EB:B0:5D:35:34:03:23:8D:A9:23:9F:E9:55:2C:B3:7F:FE:26
Certificate issuer: /CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Certificate serial: 5B2197B6B05BBEF097A981DE9D15F44A6A90A762
Authority key identifier: 98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33342d3334203d3e20323637333733.roa
Signing time: Tue 25 Apr 2023 21:32:17 +0000
ROA not before: Tue 25 Apr 2023 21:27:17 +0000
ROA not after: Tue 23 Apr 2024 21:32:17 +0000
asID: 267373
IP address blocks: 2804:4c7c::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:21:97:b6:b0:5b:be:f0:97:a9:81:de:9d:15:f4:4a:6a:90:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98C8564D2D23C0B3238882D116CD64384F680CDC
Validity
Not Before: Apr 25 21:27:17 2023 GMT
Not After : Apr 23 21:32:17 2024 GMT
Subject: CN=18A6EBB05D353403238DA9239FE9552CB37FFE26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:fc:cc:94:a2:f2:e4:80:41:4c:83:f6:9e:
d3:9d:2f:e0:3d:ca:65:cc:15:64:ef:de:f7:c2:e7:
b7:e1:27:2f:cd:8d:12:c9:de:79:f5:e1:1c:b3:2b:
41:94:33:85:a3:17:1e:1f:33:3b:07:f6:cc:07:18:
97:1f:3e:06:86:1f:de:c9:1b:5c:53:59:8a:79:f7:
c6:35:ce:02:fc:a0:01:53:23:16:b2:72:6c:d9:a1:
54:fe:90:20:95:b6:24:6d:50:0a:fa:c1:37:d3:a0:
c9:23:78:f7:9d:9b:f9:41:7a:ab:c4:0b:82:cd:8f:
36:60:b4:d6:00:7f:ed:72:6e:4c:89:24:b9:dc:41:
59:1f:1b:9d:5f:f9:ee:3d:7a:ac:82:93:ce:6e:8a:
5f:bd:07:3c:e6:b4:c2:b0:eb:d2:0f:43:72:ba:df:
cf:df:ef:d9:02:21:1b:c7:2b:97:c3:8a:63:ad:7e:
c4:48:ff:43:44:40:1d:7f:74:81:e3:4e:59:78:d2:
f7:3f:d9:b4:72:8c:c1:b3:e1:1c:7d:b3:94:db:d7:
03:09:de:90:23:27:30:2d:1f:03:93:19:0e:f2:44:
f3:17:35:b3:1e:bc:46:9d:83:fa:78:69:5c:2d:a4:
e5:39:35:26:be:b7:a3:97:f3:6d:a8:90:56:36:ea:
4f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A6:EB:B0:5D:35:34:03:23:8D:A9:23:9F:E9:55:2C:B3:7F:FE:26
X509v3 Authority Key Identifier:
keyid:98:C8:56:4D:2D:23:C0:B3:23:88:82:D1:16:CD:64:38:4F:68:0C:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/98C8564D2D23C0B3238882D116CD64384F680CDC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98C8564D2D23C0B3238882D116CD64384F680CDC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DKaqfEUGfzBSU7bSCvtKnqQp4b5hQXxz16gHaHQpjLzb/0/323830343a346337633a3a2f33342d3334203d3e20323637333733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c7c::/34
Signature Algorithm: sha256WithRSAEncryption
26:66:92:53:11:39:d1:f3:e9:4b:db:1e:ca:67:49:71:3c:aa:
e4:47:84:e7:75:16:e8:b2:1c:bc:78:4d:f3:b8:e3:c6:c7:1f:
32:d1:6d:cf:ff:39:3c:36:6c:7f:be:a6:f9:0a:7c:5e:5b:a8:
72:31:22:4e:50:32:18:5c:0f:33:e8:19:07:25:1e:73:88:6f:
82:a0:5f:7c:00:9d:75:fc:c0:24:79:91:db:8f:8d:e7:f2:90:
b0:8f:5b:9e:52:cc:d6:b9:4b:10:75:9a:5b:ed:cc:ff:1b:d9:
e6:9a:b4:25:86:3d:61:f1:26:96:8f:70:22:5d:92:bc:42:dd:
4f:f3:93:93:82:1f:d3:70:80:e6:21:54:ef:ac:5f:21:05:9c:
b2:74:92:f7:ed:9d:34:73:e2:e7:9c:2e:cf:66:f8:bd:12:78:
06:b2:1d:d3:a7:81:a3:83:4f:11:10:3e:1d:cf:a6:f5:eb:c7:
b0:c7:cc:22:04:e3:9d:d9:b2:90:12:35:c4:e3:4c:b3:80:15:
89:66:a4:6e:99:ed:53:d7:64:f1:7e:70:0f:d6:c8:2c:b2:a2:
95:54:fc:18:51:fb:79:22:07:b4:7e:63:3c:fe:02:4b:a4:d8:
87:1c:1b:b4:5a:9b:65:92:5c:a0:18:10:fa:e4:1f:c8:8f:b4:
87:31:f3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:06 2025 by rpki-client