Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa
File: 323830343a323465343a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier: alouRryF8rxCxTMV27jNqZFJC5pzlHun4D/QTmwHSAo=
Subject key identifier: 04:0E:35:FF:90:D3:2E:D1:B2:70:CC:89:71:22:85:E2:26:C2:E3:CF
Certificate issuer: /CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Certificate serial: 17967E70E69AE24BB76D8BA8A68B0BB4912C6B6F
Authority key identifier: 2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa
Signing time: Sat 04 Nov 2023 21:00:03 +0000
ROA not before: Sat 04 Nov 2023 20:55:03 +0000
ROA not after: Sat 02 Nov 2024 21:00:03 +0000
asID: 264247
IP address blocks: 2804:24e4::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:96:7e:70:e6:9a:e2:4b:b7:6d:8b:a8:a6:8b:0b:b4:91:2c:6b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1C295B2062CF7172C7106A53B761E70AAE02EB
Validity
Not Before: Nov 4 20:55:03 2023 GMT
Not After : Nov 2 21:00:03 2024 GMT
Subject: CN=040E35FF90D32ED1B270CC89712285E226C2E3CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3a:87:17:ac:35:ab:fb:a7:21:61:33:30:c9:
b3:6d:4b:a0:b8:6a:44:dc:b1:99:44:35:ba:13:d5:
29:1a:79:54:6d:1b:d6:f9:24:71:9a:4d:60:ab:c4:
6a:d8:4e:71:36:d6:d4:8a:80:7e:72:d8:2d:ee:21:
d9:0e:75:4f:54:7d:47:49:71:ea:ae:13:9f:58:63:
c8:05:74:f1:9e:6e:b1:16:37:bb:f1:9a:be:59:7e:
36:ef:67:84:c2:25:63:ba:96:84:61:f0:04:08:b6:
c7:78:3e:55:71:1c:b9:3d:ed:a3:71:81:fd:16:7b:
fe:2f:d4:b1:78:44:f6:f9:25:20:55:56:08:d3:05:
d8:91:5d:81:93:9c:f2:43:35:9c:30:cd:8f:84:b7:
25:6a:23:6e:1e:56:e7:39:56:74:a7:db:4b:af:de:
b6:7c:e5:29:8e:f0:dd:e0:7a:13:cd:cf:2f:10:d1:
b3:68:ac:57:18:55:57:0c:9c:d6:1a:be:e1:fc:7f:
31:c8:77:09:d1:3f:0b:21:c2:c3:d8:15:0f:9f:b5:
bf:e4:76:58:c2:b5:00:86:b6:ea:cd:7d:ff:b6:30:
d2:26:8a:af:1f:6d:94:c8:8a:b6:19:96:09:ca:c3:
de:50:19:74:39:1e:31:97:d9:93:06:0e:31:3f:67:
0c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:0E:35:FF:90:D3:2E:D1:B2:70:CC:89:71:22:85:E2:26:C2:E3:CF
X509v3 Authority Key Identifier:
keyid:2D:1C:29:5B:20:62:CF:71:72:C7:10:6A:53:B7:61:E7:0A:AE:02:EB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D1C295B2062CF7172C7106A53B761E70AAE02EB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/0/323830343a323465343a3a2f33362d3336203d3e20323634323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:24e4::/36
Signature Algorithm: sha256WithRSAEncryption
25:b7:d6:7b:ae:ad:87:82:53:cc:58:2c:3f:68:f4:44:5a:7d:
6f:c9:b0:d5:2a:6a:b2:e5:aa:bb:a3:7b:43:ba:66:1c:cc:71:
de:c6:a2:d2:36:e1:1e:75:c7:3b:e5:6a:ff:da:62:d2:01:6d:
e4:41:00:10:cd:7a:57:ae:06:af:76:cc:32:00:4b:7e:0c:55:
a4:e2:2e:c4:93:e4:ce:2c:ba:2d:f7:8a:17:22:74:a2:af:50:
25:b7:db:7d:d8:f6:25:b2:65:f6:6d:c7:2b:8b:8d:76:4b:de:
ae:5a:37:e5:2a:53:b7:42:bf:99:43:34:2e:0b:8a:91:59:fe:
08:b2:ff:bb:bf:9d:d3:40:06:c3:1d:23:39:3f:23:a3:4e:64:
fc:31:e9:d3:57:a7:3c:de:a7:95:a0:2c:52:99:04:7c:11:e7:
35:4b:c4:c7:64:cb:d4:5c:31:ef:30:af:d4:1d:ef:80:37:30:
f1:e2:51:4c:af:72:e5:3d:17:d2:3f:ec:ed:f3:5b:29:50:cd:
8b:46:2e:4a:cd:89:a2:f3:3e:5a:83:20:a0:d9:ce:a8:52:a4:
67:bc:e5:83:9c:77:e8:27:af:1d:08:cb:3b:ab:95:29:d5:bf:
a5:3e:d1:8f:75:8c:a3:60:f5:5c:d6:84:13:a0:f0:2d:c1:00:
22:b1:4d:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:49 2025 by rpki-client