Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33342d3334203d3e203532393434.roa
File: 323830343a6232383a3a2f33342d3334203d3e203532393434.roa (raw, json)
Hash identifier: LvajpZip9hYe5nRWh5GOa25llzZ3HrbX35ZD2aRN3zo=
Subject key identifier: 31:51:D1:71:15:29:D5:BB:19:5B:63:25:ED:52:3B:52:5C:15:C9:86
Certificate issuer: /CN=1733084816F181DADE66CFF006E96DDF853D8218
Certificate serial: 4A927A5FB4DFEBA90542209E762D4EC7513F2EED
Authority key identifier: 17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33342d3334203d3e203532393434.roa
Signing time: Wed 04 Sep 2024 22:45:52 +0000
ROA not before: Wed 04 Sep 2024 22:40:52 +0000
ROA not after: Wed 03 Sep 2025 22:45:52 +0000
asID: 52944
IP address blocks: 2804:b28::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:92:7a:5f:b4:df:eb:a9:05:42:20:9e:76:2d:4e:c7:51:3f:2e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1733084816F181DADE66CFF006E96DDF853D8218
Validity
Not Before: Sep 4 22:40:52 2024 GMT
Not After : Sep 3 22:45:52 2025 GMT
Subject: CN=3151D1711529D5BB195B6325ED523B525C15C986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:15:97:c3:7c:be:52:39:8f:27:b1:f0:5d:
bc:7e:a8:7a:44:14:b6:e7:c7:c8:46:57:02:db:80:
a3:2e:89:12:00:88:60:a5:4e:a0:80:a0:bc:aa:f5:
49:dc:db:f6:3a:3a:3a:0b:3e:9a:63:05:d5:cc:b6:
dd:31:83:e2:9e:90:8e:97:93:1b:bb:4d:92:9b:87:
25:7c:60:4c:6b:ab:4c:09:a2:b0:42:6c:22:fc:b7:
bd:98:7c:7b:bd:c8:b6:8a:de:de:de:9b:e1:e2:5b:
21:12:2e:bd:a1:57:32:47:e7:d3:ab:e2:ba:fe:60:
f8:72:c2:1b:85:d1:a9:77:81:3c:bf:6f:51:4d:50:
3f:70:99:31:5b:3b:6f:da:7c:e5:81:81:b0:7e:bc:
bc:3d:1b:f7:83:dd:52:57:fb:47:f1:70:fc:33:e8:
56:a8:6a:71:03:ea:cd:ca:63:fc:e2:bd:f2:f8:7a:
dc:f3:c2:bc:a2:ae:2a:40:dd:1a:3b:63:2d:03:de:
9a:20:b6:8d:aa:bf:1d:1e:24:ce:df:7c:51:60:b8:
9a:96:ca:9c:9d:e2:16:d3:dd:8c:2a:33:57:55:63:
55:53:e8:8f:0a:e5:53:c3:a1:58:cc:13:52:22:c2:
5a:95:9f:d9:5f:37:04:92:93:50:1f:22:4d:3b:7e:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:D1:71:15:29:D5:BB:19:5B:63:25:ED:52:3B:52:5C:15:C9:86
X509v3 Authority Key Identifier:
keyid:17:33:08:48:16:F1:81:DA:DE:66:CF:F0:06:E9:6D:DF:85:3D:82:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/1733084816F181DADE66CFF006E96DDF853D8218.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1733084816F181DADE66CFF006E96DDF853D8218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33342d3334203d3e203532393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b28::/34
Signature Algorithm: sha256WithRSAEncryption
53:2f:67:a6:8e:97:a9:5b:fc:af:f1:38:40:8d:58:39:f2:c2:
43:3e:8e:5a:93:06:82:3a:4a:23:07:22:5b:55:c0:f2:57:d2:
00:2a:d8:63:26:4d:46:d4:0c:7f:61:c4:c4:fa:b6:f0:7c:a8:
43:91:19:25:a2:d3:8b:17:c7:63:4c:f1:42:78:01:b6:81:e3:
fc:6f:66:32:10:89:bc:92:4e:dd:1b:9e:43:33:ce:7b:db:33:
45:03:21:c8:41:6c:82:9b:5f:42:17:e6:6b:ee:3b:f9:75:c1:
96:e7:45:02:fa:1d:6d:ae:8c:71:c2:24:59:12:18:bf:77:9b:
05:dd:f5:21:e6:f8:14:2c:c8:a0:d9:68:c4:7d:45:6c:dd:a7:
6e:65:a4:ec:ac:31:e6:8d:9d:b9:3f:b8:4b:86:70:d5:31:34:
7a:f8:ac:81:08:7d:bc:d1:e5:ab:82:e7:81:8b:e5:56:9d:3e:
d6:f6:93:d7:82:19:bd:38:5f:8d:bb:af:8f:28:ae:50:d1:c6:
d6:78:24:a7:c1:5c:87:7d:c3:ac:15:f4:fb:b0:4b:92:04:1d:
cf:10:8b:04:af:8d:c9:4b:1d:c7:d1:d9:60:dc:85:fe:20:ef:
59:03:65:cb:83:84:c9:43:21:3d:e2:b2:b7:10:64:c2:de:01:
15:3e:a3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:11:55 2025 by rpki-client