Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
File: 323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier: ejGoT6IM7MoMOegt2ng3xGOuVv2x6DMpLObZLSGRBE0=
Subject key identifier: 5F:B0:7F:9D:D0:E4:31:B6:EC:D2:83:B4:A7:4D:1E:91:E7:80:78:1A
Certificate issuer: /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial: 709B9C35D429FC81C6F5F303130ACBD43446C285
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
Signing time: Sat 24 Feb 2024 03:41:55 +0000
ROA not before: Sat 24 Feb 2024 03:36:55 +0000
ROA not after: Sat 22 Feb 2025 03:41:55 +0000
asID: 273606
IP address blocks: 2804:8978:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9b:9c:35:d4:29:fc:81:c6:f5:f3:03:13:0a:cb:d4:34:46:c2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Validity
Not Before: Feb 24 03:36:55 2024 GMT
Not After : Feb 22 03:41:55 2025 GMT
Subject: CN=5FB07F9DD0E431B6ECD283B4A74D1E91E780781A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:46:fa:0c:d0:ad:22:49:f7:cb:31:4b:81:
b0:32:3f:a2:0c:0a:8e:23:36:88:b2:91:76:f1:dd:
04:3e:c0:49:56:43:08:b1:57:8e:83:3a:58:54:96:
6d:8c:5d:b6:96:0f:21:73:6a:14:b0:fc:dc:fe:29:
b5:cd:40:14:bf:c5:15:c4:db:a1:de:fc:37:4c:8c:
22:e7:77:9e:e8:be:15:0f:6b:80:3c:c4:1c:43:dc:
42:98:9a:30:b1:c3:c7:65:69:41:d2:e4:a2:ba:35:
e2:d3:65:e9:a6:31:bb:60:4a:00:cd:0e:5c:ce:21:
f2:ea:be:da:e5:3d:83:77:b5:fa:9c:33:36:1f:98:
e7:26:09:ed:03:f4:b9:cc:b8:a3:f4:f1:92:cd:a2:
2c:e4:44:ac:7b:81:a2:a5:67:79:6c:f2:6a:0b:0d:
33:ac:48:4a:e5:1f:1c:84:16:e2:38:36:6f:25:ad:
62:96:10:78:91:d2:4a:5d:ed:75:df:36:18:59:6a:
fd:c6:c8:b0:ca:1c:90:f3:2c:d7:38:d4:40:22:93:
40:5c:6f:3d:26:cc:e9:cb:08:f5:fa:0c:96:df:6c:
41:77:d9:1b:1a:11:03:fc:eb:1b:68:05:01:c2:53:
a1:ea:c4:c7:0d:d1:62:f7:40:f6:fd:27:64:83:22:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:B0:7F:9D:D0:E4:31:B6:EC:D2:83:B4:A7:4D:1E:91:E7:80:78:1A
X509v3 Authority Key Identifier:
keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a343030303a3a2f33352d3335203d3e20323733363036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8978:4000::/35
Signature Algorithm: sha256WithRSAEncryption
85:d9:48:d5:49:db:0b:ed:85:ba:5c:b8:e2:c3:fb:bc:64:55:
d0:55:d1:02:4e:6a:fc:5b:d1:52:0c:76:f9:73:c3:9b:4f:05:
c9:0a:bb:c8:78:91:9d:7d:df:f2:01:97:a0:08:6e:04:d6:27:
24:a3:df:ac:a7:14:2c:97:a4:75:95:72:69:70:98:9e:1d:dd:
6e:fc:37:b5:e6:50:df:c7:c0:be:a8:5a:78:b0:b4:4d:08:ad:
dc:b6:14:7b:2b:c4:76:1b:3c:2d:b0:a5:56:98:2a:74:00:01:
c0:a8:78:6a:78:38:f3:fb:e1:ee:50:25:e8:84:ea:dd:7a:12:
70:6f:03:30:46:e8:19:a6:c7:8a:ae:29:6d:d5:fe:e9:b4:02:
0f:a6:a4:3a:b8:f2:fd:da:01:da:a2:a5:c4:e5:05:94:92:fc:
4a:e1:68:be:89:1f:53:54:69:a7:8a:10:a4:ae:79:4a:c3:19:
fe:e1:e1:40:3a:e8:42:5d:12:bb:08:54:66:e8:89:09:32:44:
78:10:56:75:f6:e9:b3:0b:17:57:b8:1c:39:e8:eb:1e:e6:24:
0e:6d:3a:7e:c7:fe:2d:20:fd:3e:d0:8e:3b:66:14:72:fb:a0:
23:06:ba:ff:9e:09:48:17:bf:0e:99:c1:02:ec:70:3f:22:b8:
c6:0e:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:52 2025 by rpki-client