Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3332203d3e203532363535.roa
File: 323830343a6330303a3a2f33322d3332203d3e203532363535.roa (raw, json)
Hash identifier: WSbgaaliGu9fClLPPb+IpZYrifYKEJR7y1kmYVLzhbw=
Subject key identifier: 38:52:30:90:2F:50:1A:68:9C:3F:FA:DF:C8:3B:F2:03:B8:D1:3C:D5
Certificate issuer: /CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Certificate serial: 49553F153300220C9D22CBA9071D347ED93534FC
Authority key identifier: 55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3332203d3e203532363535.roa
Signing time: Fri 23 Aug 2024 20:11:14 +0000
ROA not before: Fri 23 Aug 2024 20:06:14 +0000
ROA not after: Fri 22 Aug 2025 20:11:14 +0000
asID: 52655
IP address blocks: 2804:c00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:55:3f:15:33:00:22:0c:9d:22:cb:a9:07:1d:34:7e:d9:35:34:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552F7488ADA4685AF1FF21758FA2AE8DE225C52C
Validity
Not Before: Aug 23 20:06:14 2024 GMT
Not After : Aug 22 20:11:14 2025 GMT
Subject: CN=385230902F501A689C3FFADFC83BF203B8D13CD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a8:1b:39:0e:9e:b3:18:33:41:ee:b3:1c:ff:
d7:8a:7c:78:4e:bd:0e:5d:39:f1:0d:a2:90:b5:2e:
85:a3:35:af:68:3f:0e:ee:eb:92:17:73:fc:0e:78:
44:f1:d7:33:d9:ae:e3:58:2c:f1:eb:c8:8a:ba:3f:
34:13:09:ce:56:45:9c:09:24:ec:5e:c8:eb:2c:63:
c8:36:c7:c0:41:4b:13:97:94:ec:8c:2a:dc:44:4f:
e8:4f:85:e6:b1:cc:61:90:9f:91:51:ed:e9:cd:fb:
ee:b2:a0:45:f2:de:10:82:83:30:ce:f4:8e:c2:cb:
bc:f3:fe:75:2a:6d:89:2f:5a:a7:72:4e:2f:73:07:
a0:4e:7a:43:b5:5b:4d:44:fa:e6:72:2e:ca:42:de:
45:0b:33:51:7a:1e:a8:12:70:49:fa:b6:09:51:46:
10:1c:f5:fb:04:9e:39:9d:8f:b0:5d:0f:c0:5b:56:
c2:8e:20:6a:25:fb:5c:32:02:7e:ad:18:eb:f7:21:
f5:27:d9:1a:c3:6e:ba:91:41:4f:d1:cf:a7:a5:7b:
0c:bd:7a:a1:a9:9b:2a:c4:b6:23:65:df:25:a9:70:
79:26:96:74:b0:bd:c4:53:51:45:e2:e0:bb:2f:d3:
14:6c:6f:c2:bc:43:6f:b6:60:3e:4d:1c:21:46:1a:
c2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:52:30:90:2F:50:1A:68:9C:3F:FA:DF:C8:3B:F2:03:B8:D1:3C:D5
X509v3 Authority Key Identifier:
keyid:55:2F:74:88:AD:A4:68:5A:F1:FF:21:75:8F:A2:AE:8D:E2:25:C5:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/552F7488ADA4685AF1FF21758FA2AE8DE225C52C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DZhH1Ni4uPwG2rXzKzGiGmVxHCYRUkyM7yine1dMmp8/0/323830343a6330303a3a2f33322d3332203d3e203532363535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c00::/32
Signature Algorithm: sha256WithRSAEncryption
85:a6:ac:28:b4:97:dc:6e:b3:43:bd:07:21:3f:79:6d:02:e8:
45:cd:17:24:e2:12:84:5a:c2:bd:72:f1:e3:49:d9:5e:f5:24:
0b:61:76:94:b5:a5:00:95:ab:95:96:1f:d2:19:68:4f:91:0f:
23:be:8f:35:4e:b7:5e:85:18:7f:73:6d:67:40:93:68:d8:12:
d5:34:e3:80:66:e5:09:46:e6:2b:56:59:d7:f9:95:28:cd:de:
0a:a6:d9:ea:86:1a:23:da:e7:57:6c:56:00:0f:90:a3:22:95:
37:6f:fb:38:31:e2:ad:2f:c3:53:e1:87:7a:eb:bc:5f:98:c1:
5b:af:ea:26:06:5a:39:cd:2b:15:e9:55:1c:8d:19:28:7c:f1:
02:c7:ac:04:69:3b:b4:66:8b:bc:12:0b:05:87:9f:37:40:1c:
e4:ed:b2:d5:75:3b:d2:b0:96:54:1a:05:99:80:68:2f:e9:2e:
15:09:32:4b:58:8c:44:50:df:a8:c4:b2:cb:c0:6e:23:96:bd:
3c:4b:c2:9d:65:50:7c:e0:fe:72:b4:7b:2b:b9:be:b9:98:f6:
38:eb:d5:50:81:c4:69:d5:a3:a5:d5:36:8b:ee:8b:b8:dc:4e:
d8:e8:26:c5:3f:6e:6f:44:0f:ff:13:2d:5f:03:ce:eb:36:e0:
02:71:95:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:29 2025 by rpki-client