Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a323030303a3a2f33362d3336203d3e20323633303533.roa
File: 323830343a3932303a323030303a3a2f33362d3336203d3e20323633303533.roa (raw, json)
Hash identifier: Lih5LXTYF62gHSGG0FwCZGUk+Yqqp9eZYvbekLmymEc=
Subject key identifier: D4:B0:C2:A0:C3:A6:7C:70:E0:89:79:FE:EC:90:C0:08:E6:4B:BF:2B
Certificate issuer: /CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Certificate serial: 55849AE24F3724373D26FFF37647CAC916C12908
Authority key identifier: F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a323030303a3a2f33362d3336203d3e20323633303533.roa
Signing time: Fri 06 Jan 2023 22:00:00 +0000
ROA not before: Fri 06 Jan 2023 21:55:00 +0000
ROA not after: Fri 05 Jan 2024 22:00:00 +0000
asID: 263053
IP address blocks: 2804:920:2000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:84:9a:e2:4f:37:24:37:3d:26:ff:f3:76:47:ca:c9:16:c1:29:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F5CC91578811FE29790C7F0F0104ECAB1D0975A3
Validity
Not Before: Jan 6 21:55:00 2023 GMT
Not After : Jan 5 22:00:00 2024 GMT
Subject: CN=D4B0C2A0C3A67C70E08979FEEC90C008E64BBF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:dc:8f:d6:c3:d7:f3:42:b8:ec:bc:db:95:fa:
55:38:00:fe:0b:24:23:84:8e:55:4b:50:be:40:80:
0c:e6:55:90:60:eb:71:16:5a:dc:57:b0:ff:ca:b6:
a9:85:e3:81:72:c2:49:90:44:8f:21:de:b8:ed:00:
94:a3:ef:1d:ae:79:4f:16:ef:c0:92:e1:23:c5:a1:
2e:0d:db:2b:2b:05:da:8b:22:58:ee:04:1c:41:26:
d6:37:69:4a:87:5a:24:90:25:3f:aa:1d:13:e6:99:
21:c4:1d:b4:35:98:64:f4:59:63:3a:75:8a:42:c7:
a2:e5:e5:f4:1e:7c:ef:3e:0f:77:f0:f3:a9:77:6e:
b1:ce:12:08:bf:41:42:aa:42:81:1d:84:09:d6:ca:
af:46:4f:3c:0b:32:46:3a:6b:36:05:51:5d:cb:8b:
0a:b8:9a:3f:69:db:90:c6:b8:54:c7:a6:79:85:93:
fd:24:d7:1b:3c:28:e6:62:d1:93:5b:f9:42:56:f4:
54:4c:2e:ea:d7:d3:56:f0:9d:9e:63:aa:b0:bf:a3:
74:b7:a9:7a:2f:0a:02:38:69:58:27:73:a3:65:c7:
d5:de:83:cc:e2:b0:d0:16:1f:2f:51:19:d4:34:cc:
5b:7d:78:3c:a8:45:9e:92:f4:60:36:83:9e:20:c2:
20:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B0:C2:A0:C3:A6:7C:70:E0:89:79:FE:EC:90:C0:08:E6:4B:BF:2B
X509v3 Authority Key Identifier:
keyid:F5:CC:91:57:88:11:FE:29:79:0C:7F:0F:01:04:EC:AB:1D:09:75:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F5CC91578811FE29790C7F0F0104ECAB1D0975A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GHQdeeVmexRELbgsPqZWCE7vPH9eoK33rWKwEc3DtU6h/0/323830343a3932303a323030303a3a2f33362d3336203d3e20323633303533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:920:2000::/36
Signature Algorithm: sha256WithRSAEncryption
14:0d:c1:98:84:ca:f8:67:52:b4:4d:3e:d2:48:70:b4:e3:7a:
1a:32:3f:ee:ba:09:3e:07:12:e5:a0:76:d3:2c:57:83:23:cf:
81:cf:81:52:01:49:d0:6b:d1:ec:58:42:26:87:a8:ea:f6:ba:
12:1c:5d:c7:8a:f2:80:e3:51:4d:d7:9c:98:7b:18:26:d8:0e:
85:aa:19:98:4b:2c:f7:a8:c4:d5:48:bc:b0:29:ed:ab:54:98:
f2:52:32:07:1a:0c:8e:db:fa:db:33:59:20:3e:78:35:90:ed:
58:1f:46:78:04:5e:0d:88:1c:df:cb:d8:c0:06:f3:f3:fe:f9:
d5:4f:c1:af:a8:e3:ed:aa:99:2d:0b:3c:ce:d4:29:eb:a4:68:
56:cd:04:1f:4e:15:39:ba:c3:13:a7:48:84:a2:4d:e1:b7:ad:
b0:c0:f0:46:78:8a:f9:fe:62:38:65:65:b2:50:f4:eb:0e:76:
7e:e9:c8:3f:7d:0b:46:20:44:b6:76:6f:91:6e:6f:68:18:53:
89:54:6c:31:81:bf:62:3c:92:00:cb:47:3d:b6:e4:6c:c6:77:
3b:b9:c1:b6:aa:73:fa:83:fa:d3:d9:fe:7c:5f:25:d6:6c:5e:
a6:b6:38:22:bd:a8:5e:19:91:63:2a:5f:62:6c:66:48:b3:57:
ef:a4:b6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:01 2025 by rpki-client