Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
File: 323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa (raw, json)
Hash identifier: cbSrCJnFhYwOk8zmVZB3ydB5Nu8xijIfMwsdGNCWglQ=
Subject key identifier: D7:86:08:CE:E5:CD:A1:6E:E0:97:7F:D1:D5:95:AA:CD:6B:E1:2C:2F
Certificate issuer: /CN=574748D8BF31C17F406ADCFABD98395668029B7F
Certificate serial: 2251377D792AD1FBCF6269919045D489D456BA68
Authority key identifier: 57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
Signing time: Mon 01 Apr 2024 14:40:13 +0000
ROA not before: Mon 01 Apr 2024 14:35:13 +0000
ROA not after: Mon 31 Mar 2025 14:40:13 +0000
asID: 264595
IP address blocks: 2804:2228:7f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:51:37:7d:79:2a:d1:fb:cf:62:69:91:90:45:d4:89:d4:56:ba:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=574748D8BF31C17F406ADCFABD98395668029B7F
Validity
Not Before: Apr 1 14:35:13 2024 GMT
Not After : Mar 31 14:40:13 2025 GMT
Subject: CN=D78608CEE5CDA16EE0977FD1D595AACD6BE12C2F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8c:c3:a5:b7:41:ac:63:e5:a4:90:9e:ff:90:
ff:7f:cc:bf:87:a4:5d:a2:2b:e2:37:d0:6e:87:a9:
0e:10:7c:fa:1a:1d:45:cc:f9:40:48:31:38:37:08:
d1:59:c7:dc:a4:84:14:69:91:0b:74:f9:70:ce:ba:
7b:76:19:27:20:eb:55:b8:76:48:f0:18:6b:58:c0:
f9:47:c0:9e:c0:de:65:29:ae:c1:c9:0f:0e:0b:21:
c7:2b:bb:06:b0:3a:96:e4:aa:f1:3f:e1:93:47:35:
0f:3a:42:c7:19:ce:69:62:0c:df:1b:cc:1c:23:23:
40:6f:9c:53:3e:91:2a:a6:9d:4e:3b:d9:84:30:dc:
51:0b:3b:b5:c9:7b:c3:63:99:30:a4:24:ac:b7:76:
20:64:37:e9:d8:21:eb:3a:2c:17:56:36:1f:57:35:
7a:a8:d8:9e:b1:16:fb:05:4b:1c:f4:d1:b4:80:71:
57:8c:3a:a5:6c:45:4f:1f:dd:cc:3c:57:0a:85:bb:
45:6b:a1:34:f5:73:35:a3:8c:fb:c0:21:61:7b:f7:
7a:19:30:8c:f4:97:8c:9f:7c:e8:8d:e9:fa:e2:e5:
73:dd:e2:e6:5f:2b:8f:e5:4b:96:60:3d:ad:b0:37:
bb:55:ca:ea:ed:09:08:f8:ff:1e:cf:df:fe:c0:f1:
d7:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:86:08:CE:E5:CD:A1:6E:E0:97:7F:D1:D5:95:AA:CD:6B:E1:2C:2F
X509v3 Authority Key Identifier:
keyid:57:47:48:D8:BF:31:C1:7F:40:6A:DC:FA:BD:98:39:56:68:02:9B:7F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/574748D8BF31C17F406ADCFABD98395668029B7F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/574748D8BF31C17F406ADCFABD98395668029B7F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ET39NSWiZg3eArKG7XYKApQTWa6BgL5DojdybajGtFUy/0/323830343a323232383a376630303a3a2f34302d3430203d3e20323634353935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2228:7f00::/40
Signature Algorithm: sha256WithRSAEncryption
93:8b:2f:a7:4c:9e:b8:48:03:91:3e:23:fc:14:1b:a4:59:90:
3e:46:56:46:46:7b:44:46:d3:44:a0:23:6d:b1:c9:45:82:45:
1d:78:01:8a:3f:b5:ca:65:ac:95:13:07:8f:54:23:ee:da:b5:
d5:a0:f2:fe:f6:45:53:5c:0b:df:32:46:df:71:c2:39:68:b0:
27:e9:0c:27:81:c7:78:76:ac:67:d6:33:1f:c3:b9:d9:0f:c7:
e3:76:25:d0:35:57:e3:b7:5a:e6:33:d2:70:88:cd:6a:34:71:
ec:ca:2e:85:e2:3c:c4:d0:c9:07:b9:7f:e3:92:c4:ce:10:30:
25:86:7a:d0:4f:fa:23:ee:34:d6:94:02:39:8b:8a:30:4c:bd:
46:79:75:00:9c:13:6f:a6:85:25:34:0c:40:97:f4:73:a5:b1:
56:39:77:cb:14:90:c3:79:05:93:3b:10:55:68:41:34:b2:2e:
d1:38:eb:67:18:fa:e3:eb:90:c8:a5:c9:99:7e:31:c2:9a:1f:
7c:05:47:b8:91:e5:ba:56:b9:fa:f9:95:8e:03:0d:63:ed:28:
f1:81:f3:51:c3:c2:af:d3:5e:05:74:fb:e5:48:6e:91:ba:8b:
08:ec:c5:7d:38:25:e4:e2:fb:18:0a:46:9c:51:2f:cd:71:2e:
c1:aa:14:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:41 2025 by rpki-client