Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e203533313831.roa
File: 323830343a323963303a3a2f33322d313238203d3e203533313831.roa (raw, json)
Hash identifier: P8bi8zJCsnLZ9NkumGKo6y1GBGRwm7/qZnPbYfu/CFw=
Subject key identifier: D4:B8:76:96:76:E7:5E:55:F0:E9:69:D4:54:A0:FE:24:24:22:50:1D
Certificate issuer: /CN=35DA915E4E399FE6438B815F4C97CEAE6DB92975
Certificate serial: 2EBA6D2DD1E091263C7CE0F54615C05FB8DCEBAB
Authority key identifier: 35:DA:91:5E:4E:39:9F:E6:43:8B:81:5F:4C:97:CE:AE:6D:B9:29:75
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e203533313831.roa
Signing time: Sat 11 Mar 2023 14:19:24 +0000
ROA not before: Sat 11 Mar 2023 14:14:24 +0000
ROA not after: Sat 09 Mar 2024 14:19:24 +0000
asID: 53181
IP address blocks: 2804:29c0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:ba:6d:2d:d1:e0:91:26:3c:7c:e0:f5:46:15:c0:5f:b8:dc:eb:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35DA915E4E399FE6438B815F4C97CEAE6DB92975
Validity
Not Before: Mar 11 14:14:24 2023 GMT
Not After : Mar 9 14:19:24 2024 GMT
Subject: CN=D4B8769676E75E55F0E969D454A0FE242422501D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:cc:bb:1d:38:21:fd:8d:b2:7a:36:80:66:
76:40:05:e1:98:ce:4f:a0:76:91:54:7d:9d:48:0d:
8b:d6:ab:da:de:77:88:55:8f:70:c3:9c:16:e4:47:
6f:1e:c2:20:62:1b:d4:28:00:99:f7:ef:8f:2a:10:
1e:eb:27:0f:ee:54:99:aa:f2:f7:e5:bd:f0:0f:91:
21:7e:99:13:a4:46:84:1e:69:1f:20:6a:23:df:18:
33:07:88:ae:c2:a8:4d:70:bf:f6:05:54:71:de:e9:
e7:8a:5d:44:a8:40:49:13:87:7d:5d:74:37:1c:77:
f2:53:93:85:74:1b:bc:28:12:d6:00:b5:a1:91:f6:
ef:ae:dc:c7:ff:61:96:e1:01:ec:32:38:f4:9d:6a:
ed:84:2d:ff:6b:e8:1c:1a:a7:d8:c2:57:d1:7d:26:
d5:6a:6a:03:7e:9b:15:fe:cc:3d:90:bc:ec:8c:1a:
ce:97:80:d9:9c:17:51:de:2c:1f:c7:10:31:99:d4:
3e:f5:12:c9:42:1e:60:2c:47:1e:4e:67:30:ed:2f:
7c:15:43:cb:ef:69:d4:97:63:76:3c:3f:cc:77:f0:
72:35:e4:01:50:52:ff:c7:97:fe:61:ba:63:35:9a:
9c:50:36:84:e4:ef:41:27:50:61:e3:a8:bd:25:63:
92:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B8:76:96:76:E7:5E:55:F0:E9:69:D4:54:A0:FE:24:24:22:50:1D
X509v3 Authority Key Identifier:
keyid:35:DA:91:5E:4E:39:9F:E6:43:8B:81:5F:4C:97:CE:AE:6D:B9:29:75
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/35DA915E4E399FE6438B815F4C97CEAE6DB92975.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKZQynmNiWqJKBPrM51UMyBfWpCz2qAAMSUmyMUqAFMc/0/323830343a323963303a3a2f33322d313238203d3e203533313831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
d0:e6:85:62:0f:fa:a4:a3:a1:3b:2d:98:28:d7:d5:2d:4e:71:
e9:de:e1:a3:fb:c7:c2:fb:24:8f:32:06:d6:5a:4a:ee:59:27:
b6:81:75:d4:53:3d:3c:38:2b:30:16:84:1e:e1:62:02:f9:4c:
cb:bc:89:c5:bc:80:2b:1a:1b:bb:bb:7c:1a:0e:f2:69:ca:5e:
e0:27:83:04:b3:1e:57:6e:35:64:bc:76:da:95:91:33:67:5c:
df:1b:e8:06:ff:39:57:bf:c9:0e:de:21:1c:92:81:92:6c:3f:
ec:01:50:db:b0:12:4e:f8:0e:66:23:24:a7:3d:e1:06:a9:6b:
61:25:af:af:b1:b4:ea:ff:6c:97:7e:30:4c:98:1b:c0:8e:55:
44:c9:ef:4a:c4:ec:d6:fe:9c:c1:00:d2:3a:b0:c9:5c:63:0f:
f6:69:06:fb:fd:20:8f:5a:18:65:cb:e4:1e:fd:f8:da:bd:bd:
62:17:88:8e:04:cb:bf:30:8a:e4:af:a9:ae:d3:ff:90:1f:02:
a3:28:ce:64:60:52:e0:16:e4:45:72:3d:42:1f:ae:ca:ce:cc:
0f:71:df:91:47:34:bc:d5:4f:86:d8:61:43:2c:32:5d:11:92:
78:2f:f6:da:ea:b6:a8:b7:a4:1b:c1:bd:28:78:d4:8b:77:17:
07:ee:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:47:30 2025 by rpki-client