Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa
File: 323830343a316263343a3a2f33332d3336203d3e203631373438.roa (raw, json)
Hash identifier: R9Ypkor/WoHs60LGm1RBpGk2/E0qx6LSSMm085WqZk4=
Subject key identifier: D2:60:9F:58:45:A6:E0:5F:A6:50:E6:00:EC:56:75:CF:74:A5:30:02
Certificate issuer: /CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Certificate serial: 76BF9976B230F8CFECC95FC7BCCFAA76FBD22F17
Authority key identifier: 55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa
Signing time: Mon 25 Nov 2024 14:43:19 +0000
ROA not before: Mon 25 Nov 2024 14:38:19 +0000
ROA not after: Mon 24 Nov 2025 14:43:19 +0000
asID: 61748
IP address blocks: 2804:1bc4::/33 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:bf:99:76:b2:30:f8:cf:ec:c9:5f:c7:bc:cf:aa:76:fb:d2:2f:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553A87CDE2E92ADFD4442328CE2DB7349CECEA42
Validity
Not Before: Nov 25 14:38:19 2024 GMT
Not After : Nov 24 14:43:19 2025 GMT
Subject: CN=D2609F5845A6E05FA650E600EC5675CF74A53002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:aa:5b:58:ca:ff:02:c7:51:ce:72:cb:43:4b:
fe:a0:d6:57:0c:d4:0a:a1:a2:a9:dc:9b:ea:8e:07:
ab:4b:44:52:c4:6c:10:3a:14:92:dc:95:b6:25:cd:
95:63:d6:57:f1:67:13:58:3a:8e:38:89:a3:6b:c8:
4a:cb:6b:d4:7f:d9:ca:0e:57:04:6e:8a:53:5a:3e:
33:da:83:24:30:9d:70:cd:c0:ac:96:b9:64:8d:c6:
52:7b:1a:10:e0:72:dc:5c:a6:ac:be:6e:2f:22:56:
cd:e3:6c:48:2a:a6:88:02:cf:39:45:9c:6f:5e:d9:
87:a3:a6:c5:99:f8:0b:4d:70:f1:4d:a2:a3:ee:6d:
dc:e1:b0:b9:49:ef:3e:13:10:99:a5:36:8e:75:d1:
5f:cb:d4:97:63:2e:d7:72:0e:78:55:ab:65:03:b1:
49:3e:3d:f1:2b:b6:84:87:3e:d4:75:b7:62:b8:6b:
6f:bb:a2:c4:a0:0b:b4:86:d7:34:08:7c:c1:5b:29:
4a:9a:6c:51:db:ca:db:30:90:88:bf:d2:fa:03:bd:
a7:ff:11:3a:3c:96:78:ad:af:bb:4e:9f:d9:93:6d:
0f:4b:4e:db:fe:35:d9:1f:d5:6f:38:84:50:55:a9:
32:c6:d0:ae:7d:9f:1d:83:fa:65:7d:e5:3c:a5:69:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:60:9F:58:45:A6:E0:5F:A6:50:E6:00:EC:56:75:CF:74:A5:30:02
X509v3 Authority Key Identifier:
keyid:55:3A:87:CD:E2:E9:2A:DF:D4:44:23:28:CE:2D:B7:34:9C:EC:EA:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/553A87CDE2E92ADFD4442328CE2DB7349CECEA42.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fj1CpBxLer2FxphJFAB96dB4Goa1MyXQyfGanGkQtahC/0/323830343a316263343a3a2f33332d3336203d3e203631373438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1bc4::/33
Signature Algorithm: sha256WithRSAEncryption
b0:52:f9:5d:bd:24:1c:1d:1c:dd:27:53:11:b1:29:bd:45:8f:
cc:08:59:a8:49:40:62:59:b5:c1:5b:ab:7e:09:55:0a:a0:25:
47:9a:55:51:40:1b:45:5c:e7:67:16:27:46:15:27:1d:a9:01:
b7:7f:21:ff:e3:e2:ba:dc:9c:ff:cb:4d:d0:93:cb:c5:bd:ac:
70:83:f5:d7:85:f4:c5:ce:a0:9a:d3:2c:a7:f5:61:cf:f7:66:
62:0e:22:3f:dd:7f:e6:49:b9:9e:9d:9e:5e:d9:31:cf:49:90:
77:77:6b:db:5d:08:8b:33:51:09:49:6b:5f:9f:34:ad:74:06:
e3:f3:87:27:fa:e3:5b:18:0a:63:bf:62:33:83:b0:aa:42:83:
a4:cd:65:6f:d5:0f:80:04:66:21:e2:71:55:7e:dd:e1:93:43:
74:fd:e2:c5:cf:33:45:70:d9:a3:b2:27:31:28:6f:43:99:b0:
45:e2:03:07:ac:01:1e:36:0c:04:6a:aa:d8:9b:b2:4f:09:3b:
ef:c7:ce:9a:20:04:3b:6c:05:11:f9:db:9c:80:be:c1:75:03:
3f:4c:9f:4b:6f:c1:95:37:16:fc:0f:a3:87:55:00:7d:ff:03:
ba:67:dd:9f:8f:77:73:04:0b:35:66:f8:79:99:68:de:3c:c5:
46:20:c8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:07 2025 by rpki-client