Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa
File: 323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa (raw, json)
Hash identifier: my+BNnbzfl4s+3ZPnanvfgvlGktB8j3DS/W0yTYtlt0=
Subject key identifier: D0:DF:EB:57:10:30:4C:91:62:09:A2:69:0E:D4:D7:1E:35:C9:AB:AB
Certificate issuer: /CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
Certificate serial: 0921A7414820F2C853E58C4B971931B23DC6AB34
Authority key identifier: 52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa
Signing time: Wed 24 Jan 2024 12:17:22 +0000
ROA not before: Wed 24 Jan 2024 12:12:22 +0000
ROA not after: Wed 22 Jan 2025 12:17:22 +0000
asID: 267158
IP address blocks: 2804:4900:8000::/33 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:21:a7:41:48:20:f2:c8:53:e5:8c:4b:97:19:31:b2:3d:c6:ab:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52451CBA75931AC98AB5376E8F45C16C90C08B18
Validity
Not Before: Jan 24 12:12:22 2024 GMT
Not After : Jan 22 12:17:22 2025 GMT
Subject: CN=D0DFEB5710304C916209A2690ED4D71E35C9ABAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:db:c6:a7:7f:ec:80:8c:78:69:4f:2a:e6:c1:
b3:73:ee:79:e6:bf:83:25:b7:10:09:7e:c0:5c:ee:
d7:5e:6d:01:ee:08:fd:d0:d8:0d:a1:ad:4b:90:c0:
ae:63:2e:d0:57:ec:6f:90:c2:27:3c:e8:de:c9:43:
1d:4f:69:51:fd:6a:95:ba:05:df:c8:81:1d:58:03:
a9:00:e6:be:a2:26:11:da:e9:16:26:6e:b8:ed:23:
9c:7d:43:7c:16:4f:8a:0c:1e:f6:1b:23:af:ab:ee:
9c:d7:68:71:ee:3f:a1:2c:0e:28:78:d9:27:0d:cf:
7b:c0:9f:f7:8d:26:58:08:55:e6:77:8c:2b:5c:cd:
0a:c5:76:d1:c7:2e:0e:35:99:c4:36:c1:af:06:de:
43:62:34:98:f5:a0:dc:3c:81:91:15:41:57:e1:00:
ee:06:08:d6:e3:de:0e:3c:a2:88:67:09:4b:d3:1d:
7e:af:b5:95:b8:15:c7:fc:56:ce:2a:13:16:e3:98:
eb:5c:ab:39:b4:bc:68:a6:19:3a:33:0d:fb:82:55:
93:57:df:5d:68:0a:45:16:08:5a:86:db:bc:6a:1e:
27:2f:d0:a1:5e:81:72:e6:42:cd:e0:35:67:fa:56:
6f:6d:7c:0b:c3:b1:19:d5:71:4a:be:ec:99:2f:c5:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:EB:57:10:30:4C:91:62:09:A2:69:0E:D4:D7:1E:35:C9:AB:AB
X509v3 Authority Key Identifier:
keyid:52:45:1C:BA:75:93:1A:C9:8A:B5:37:6E:8F:45:C1:6C:90:C0:8B:18
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52451CBA75931AC98AB5376E8F45C16C90C08B18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G2NE8j18y7aCi38U8GtMweraX7SqUgCqUaNU6kgdjmQT/0/323830343a343930303a383030303a3a2f33332d3335203d3e20323637313538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4900:8000::/33
Signature Algorithm: sha256WithRSAEncryption
93:35:73:d3:ef:db:fb:f1:09:df:67:d1:12:75:f5:8b:ca:08:
7f:c8:bb:88:4e:d1:f6:21:36:d6:7c:8a:b3:57:26:cb:54:e5:
fe:d3:8e:0d:91:0e:57:10:e1:ae:69:21:dc:7a:ec:36:19:c7:
c4:69:82:0b:eb:13:5d:f6:b1:2b:b6:8a:80:a3:3b:5c:f9:7d:
7d:e3:57:99:c4:57:da:f5:c9:ad:98:67:3c:2b:6e:20:6b:37:
51:22:e1:cd:3a:c7:ea:68:69:7d:3a:ac:00:68:62:9f:85:1e:
bc:55:2a:c1:70:41:a9:76:cb:b5:84:15:92:a8:4b:c0:f4:0c:
fc:82:95:4d:91:15:ef:b3:fc:82:f7:dc:bf:82:40:e8:8a:0f:
97:83:4a:c7:57:59:6d:e5:55:27:d8:b2:7c:b0:47:91:a2:1e:
ca:39:3b:69:90:d3:09:66:59:af:a1:25:33:8f:5a:30:8e:00:
f6:f6:c9:67:0d:ff:a7:eb:43:c4:db:49:00:dd:de:a1:3f:c6:
05:01:3b:5c:38:37:cc:c5:7e:36:da:16:cb:a3:18:12:41:f8:
f7:59:dd:00:11:74:80:5c:cc:95:02:9b:c2:13:e6:1f:3f:9c:
8d:5e:98:b0:46:50:3b:d3:60:79:91:ce:4f:1e:c1:cf:72:a3:
1b:57:c9:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:57:58 2025 by rpki-client