Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3334203d3e20323632333031.roa
File: 323830343a313832343a3a2f33322d3334203d3e20323632333031.roa (raw, json)
Hash identifier: xkokR9AGY7VWpsdlzKlHRlvHxSLoXuu671Re51p1JkY=
Subject key identifier: AF:E5:A8:CC:97:87:11:B4:D2:EB:E7:43:AD:79:35:6C:51:26:77:D7
Certificate issuer: /CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Certificate serial: 3972224D47659175378B5E43F84A354A5F864AA2
Authority key identifier: 20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3334203d3e20323632333031.roa
Signing time: Tue 12 Mar 2024 12:56:13 +0000
ROA not before: Tue 12 Mar 2024 12:51:13 +0000
ROA not after: Tue 11 Mar 2025 12:56:13 +0000
asID: 262301
IP address blocks: 2804:1824::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:72:22:4d:47:65:91:75:37:8b:5e:43:f8:4a:35:4a:5f:86:4a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20D0C50C62128FF4D2F9FF85B6A5784BF430123F
Validity
Not Before: Mar 12 12:51:13 2024 GMT
Not After : Mar 11 12:56:13 2025 GMT
Subject: CN=AFE5A8CC978711B4D2EBE743AD79356C512677D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3c:1a:3a:92:bc:1e:54:21:89:61:32:e1:3f:
95:1a:8a:b2:a5:c7:fb:d2:df:a1:77:38:b5:80:36:
5a:e4:a3:52:d5:e1:e0:6c:de:3f:61:9f:61:bb:ab:
01:4b:58:1b:e5:9d:0e:19:d5:95:16:eb:71:43:a2:
b3:0a:2e:0d:d9:f9:55:ef:0c:30:c6:0f:4c:21:23:
ca:70:d1:3b:53:bd:0b:a3:5d:d6:d1:27:6e:3d:a0:
60:de:5e:3b:a2:af:01:65:e2:bd:67:72:ab:a9:4e:
bc:49:65:3a:3d:cf:94:4e:ea:96:b4:58:1b:7f:9f:
1a:b7:c4:5b:7c:d0:1b:64:e0:cd:f9:0b:c0:e8:34:
b4:03:76:ec:d1:e8:d0:f3:87:56:ed:57:94:93:27:
8d:6d:14:34:1f:95:11:32:b3:2e:08:8d:02:21:9a:
07:37:fe:59:54:3f:37:c7:0f:62:fb:97:e0:f9:c0:
ad:5a:06:f9:e3:bc:04:fb:9b:22:21:39:1e:1f:3a:
1b:30:d5:ac:44:26:3b:88:fa:cf:6d:13:d7:b9:23:
b9:1f:48:5e:0f:e3:ac:bb:8e:c1:7f:49:11:a3:b8:
ec:49:d4:b7:e2:8d:56:92:73:10:f5:04:41:3e:a3:
91:6f:81:03:9c:9a:3e:32:c0:27:22:68:75:0b:29:
28:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E5:A8:CC:97:87:11:B4:D2:EB:E7:43:AD:79:35:6C:51:26:77:D7
X509v3 Authority Key Identifier:
keyid:20:D0:C5:0C:62:12:8F:F4:D2:F9:FF:85:B6:A5:78:4B:F4:30:12:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20D0C50C62128FF4D2F9FF85B6A5784BF430123F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EXcS71TKZ22dzyMQNuvHakc9PbABCrDqqfjBNoFyaHyH/0/323830343a313832343a3a2f33322d3334203d3e20323632333031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1824::/32
Signature Algorithm: sha256WithRSAEncryption
03:32:25:1c:cc:4a:63:1d:c2:55:86:f5:67:4e:b5:0c:ee:17:
b3:c6:38:51:b9:fa:a6:db:ee:da:8e:1b:90:8f:56:53:0c:c3:
8f:dc:ec:c8:00:88:d3:08:44:6e:73:79:48:c5:25:8b:b0:7f:
99:26:04:e0:ca:e9:71:d4:f1:e7:67:5c:b5:ad:87:b3:00:9e:
ac:87:ad:56:89:ae:f1:0f:fc:70:3a:f8:9c:fb:b3:b3:94:32:
23:4b:66:20:3c:4a:e4:c9:aa:3b:1a:d5:1c:da:07:16:32:44:
85:86:22:ba:02:cf:60:d6:ce:5d:de:e4:b0:89:aa:a3:5b:e6:
89:a8:dc:bf:b5:04:7f:ff:cd:25:32:3c:2e:e9:d6:44:de:41:
71:4b:08:65:d0:24:d0:78:6a:d2:ef:6c:5b:6b:82:cf:6c:0e:
92:5f:02:ad:fb:58:9b:28:c7:bf:0e:44:fb:17:96:7f:17:bd:
6a:59:d0:55:9c:52:01:6b:89:05:ed:9f:e0:92:c7:78:ea:ac:
3b:1b:e2:7d:75:bd:9a:a1:83:05:55:7a:65:72:11:04:4c:70:
38:f5:1c:bf:01:ca:6e:ab:58:5f:c0:a0:32:96:b8:cc:5c:ba:
97:da:70:43:60:99:40:e0:d6:ff:88:d2:7e:0c:09:50:77:70:
f9:8b:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:14 2025 by rpki-client