Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/323830343a326137343a3a2f33322d3438203d3e203532393438.roa
File: 323830343a326137343a3a2f33322d3438203d3e203532393438.roa (raw, json)
Hash identifier: cao1yGlY3OOpLFRaB06aJDnNgYA2bp+Tb/X0AebOIAA=
Subject key identifier: 8A:32:43:74:CE:C1:26:9A:6A:1E:B8:D1:9F:87:13:06:8D:B6:D0:B4
Certificate issuer: /CN=8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7
Certificate serial: 5E11A867C1DF26B8A0C6C1673051F26C67FC509E
Authority key identifier: 85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/323830343a326137343a3a2f33322d3438203d3e203532393438.roa
Signing time: Fri 14 Oct 2022 17:06:13 +0000
ROA not before: Fri 14 Oct 2022 17:01:13 +0000
ROA not after: Fri 13 Oct 2023 17:06:13 +0000
asID: 52948
IP address blocks: 2804:2a74::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:11:a8:67:c1:df:26:b8:a0:c6:c1:67:30:51:f2:6c:67:fc:50:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7
Validity
Not Before: Oct 14 17:01:13 2022 GMT
Not After : Oct 13 17:06:13 2023 GMT
Subject: CN=8A324374CEC1269A6A1EB8D19F8713068DB6D0B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d7:c2:cc:e0:d4:e3:0f:83:7c:91:9d:5c:7c:
e9:8f:35:55:05:89:91:a4:87:e4:36:36:91:c9:c6:
c7:f9:b1:22:99:05:75:fb:b3:94:e5:ca:41:1b:dd:
fa:c2:5d:0f:e3:58:af:ae:5a:ba:fb:b3:d8:6c:7f:
1e:97:2a:fb:a2:7e:6d:ec:87:92:bb:3a:09:98:7a:
1e:5b:15:65:eb:c9:ae:74:3b:6b:22:32:cb:65:a0:
cd:00:cc:db:26:7d:b5:6c:50:34:f5:21:f0:34:ef:
ee:2d:97:a5:32:62:3f:c0:e4:f8:f5:01:55:13:57:
fc:a6:84:c6:8c:40:bb:2a:03:3f:c9:c6:5e:20:00:
75:a6:dc:53:fc:45:a1:1b:18:2b:92:76:9c:b6:81:
bf:6f:40:e0:78:13:54:9b:4f:1e:43:f5:a3:de:4d:
c7:35:84:d8:27:e1:68:d3:e3:b6:02:8a:61:2a:8b:
df:10:74:88:5c:54:8a:1c:d5:4a:b9:86:18:53:72:
71:f7:ba:92:24:c7:ef:ae:aa:0e:f0:00:4f:35:bc:
f4:77:d4:88:b0:7d:f3:a1:2b:a3:ec:6c:bb:c0:b7:
5c:a8:42:f4:af:2a:f6:62:39:15:62:c9:d4:57:86:
6f:27:68:c2:8e:92:4c:97:ce:17:6d:51:99:86:df:
af:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:32:43:74:CE:C1:26:9A:6A:1E:B8:D1:9F:87:13:06:8D:B6:D0:B4
X509v3 Authority Key Identifier:
keyid:85:68:BD:50:CD:17:BE:A4:DC:DF:07:B7:C0:77:C2:C6:F9:54:C8:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8568BD50CD17BEA4DCDF07B7C077C2C6F954C8D7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdGZrmXGqDjiK5hvTVZ4qEaarri2QMK8hL8vFy74KSZP/0/323830343a326137343a3a2f33322d3438203d3e203532393438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2a74::/32
Signature Algorithm: sha256WithRSAEncryption
82:db:10:19:85:12:dd:b9:6d:dd:20:36:96:ec:e2:63:d2:72:
53:88:bd:9c:23:b2:fa:b9:20:55:c9:19:9c:c2:61:ca:04:4a:
c1:8b:52:f9:ba:f6:0c:af:1e:c7:2f:01:42:86:2a:18:1f:ba:
73:f0:13:68:04:60:07:71:20:93:0c:f1:6f:75:f2:fb:9d:19:
64:19:e3:9a:6d:79:6c:cf:36:c7:88:17:f4:1a:5a:10:bc:04:
61:08:d9:1c:f0:f0:5d:1c:bf:a0:62:8f:8a:33:16:78:e5:6d:
0f:a9:ef:8d:2e:f7:63:b8:9c:43:d4:5a:87:32:3d:85:b2:75:
11:fb:e8:9d:58:fc:ae:4e:da:76:bf:bb:5c:33:74:3d:b6:7e:
f3:a1:fe:e5:cc:9b:56:30:10:b8:1e:fa:49:b0:d5:b7:c5:f3:
4d:06:e3:92:1a:d8:1d:bd:dd:35:f8:97:50:70:48:87:b1:96:
df:c4:5b:ac:9d:98:65:ab:34:44:5d:7f:14:41:08:14:77:83:
3e:de:ac:77:ab:95:b3:73:2b:54:de:8a:ae:d0:e0:85:1d:19:
48:93:f5:f4:a9:43:38:36:3c:22:67:b3:51:92:27:fb:8e:af:
83:ab:f5:14:bb:cf:74:73:4d:cd:8f:0c:52:5a:8b:78:41:7c:
d9:25:da:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:38:58 2025 by rpki-client