Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3332203d3e203631363937.roa
File: 323830343a316165343a3a2f33322d3332203d3e203631363937.roa (raw, json)
Hash identifier: I1vGbfLnax4DjzJ9LoCYjM1+lTqfktmeDHGJLEtsbZw=
Subject key identifier: 92:EB:44:28:01:98:01:23:CD:3A:4F:E8:2C:BA:3D:53:9B:FD:27:73
Certificate issuer: /CN=0E1720DD71542C4E7D57283F271E8BD1C333E5A9
Certificate serial: 323EAFE8577001DC287CD548B6BF5FF8D5B66DE7
Authority key identifier: 0E:17:20:DD:71:54:2C:4E:7D:57:28:3F:27:1E:8B:D1:C3:33:E5:A9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3332203d3e203631363937.roa
Signing time: Tue 27 Feb 2024 13:41:35 +0000
ROA not before: Tue 27 Feb 2024 13:36:35 +0000
ROA not after: Tue 25 Feb 2025 13:41:35 +0000
asID: 61697
IP address blocks: 2804:1ae4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3e:af:e8:57:70:01:dc:28:7c:d5:48:b6:bf:5f:f8:d5:b6:6d:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0E1720DD71542C4E7D57283F271E8BD1C333E5A9
Validity
Not Before: Feb 27 13:36:35 2024 GMT
Not After : Feb 25 13:41:35 2025 GMT
Subject: CN=92EB442801980123CD3A4FE82CBA3D539BFD2773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:1b:0f:5f:88:65:be:2d:61:51:5b:7f:fe:
59:38:76:d8:24:83:08:f2:3a:14:98:7b:5e:40:8f:
c7:ef:bb:61:85:dc:39:9d:ca:93:90:99:9b:3f:28:
0d:d6:04:24:5f:25:85:eb:8b:e5:fc:2c:c9:69:3d:
ac:3a:f1:de:53:38:83:ca:10:5c:fe:52:80:e0:85:
8d:ca:51:89:7d:2e:99:16:d5:d7:b4:98:b4:b4:b3:
86:cb:ce:42:b2:16:65:b3:5b:87:d3:1e:6c:58:ac:
c9:95:31:ec:ed:61:e1:31:78:7b:e6:52:e0:eb:50:
19:44:ea:63:96:f5:83:9b:27:b3:e1:d0:79:07:0a:
43:4e:c7:c8:4b:cb:28:e7:e1:05:06:d3:76:18:b8:
42:31:fa:0e:17:fc:ed:2a:af:9a:eb:b3:85:ae:e9:
2c:63:d4:7a:f9:ed:86:b8:5c:47:6b:ed:cd:89:45:
25:37:75:8c:69:0e:33:98:4d:0d:ea:e4:73:31:b7:
33:50:90:4e:22:fa:27:43:80:9b:3a:50:d4:77:60:
91:4d:aa:ae:fb:99:8c:62:24:72:b0:cc:45:50:f9:
56:f6:a5:97:6b:55:ff:1d:fc:d6:99:2b:f1:5b:d7:
47:c1:d6:ff:10:4e:bd:54:15:67:0c:ee:19:51:4f:
78:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:EB:44:28:01:98:01:23:CD:3A:4F:E8:2C:BA:3D:53:9B:FD:27:73
X509v3 Authority Key Identifier:
keyid:0E:17:20:DD:71:54:2C:4E:7D:57:28:3F:27:1E:8B:D1:C3:33:E5:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E1720DD71542C4E7D57283F271E8BD1C333E5A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GSPMfUQAbLEks9AwKkj7TFfjfR3RUKL45ygmFy9ALdEh/0/323830343a316165343a3a2f33322d3332203d3e203631363937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ae4::/32
Signature Algorithm: sha256WithRSAEncryption
31:c8:52:07:96:58:3d:15:30:fc:e2:f9:4a:24:86:d1:c2:86:
0a:96:8e:11:94:8c:e7:19:26:81:af:de:9e:44:a0:26:f3:b2:
1f:96:e6:06:ed:01:29:69:a7:e7:db:c6:1e:de:68:d8:96:94:
55:14:a1:32:c6:09:25:0f:d9:77:34:bc:f3:5e:0b:01:23:48:
48:76:80:8a:b7:7c:de:8b:fa:1e:42:17:a3:79:bd:51:52:57:
d7:c9:99:23:c0:a4:6e:40:d2:c7:7c:2e:6d:fa:88:52:c6:fa:
b5:0a:92:46:06:68:f9:c0:a9:4a:56:cd:06:13:43:4f:c5:37:
73:52:01:cf:7c:3d:25:7d:67:8f:18:01:46:91:b1:a6:b4:72:
e6:ab:43:c1:be:d5:7a:9c:0b:8d:cd:88:71:62:84:91:96:a8:
6f:79:3a:78:19:04:73:49:d4:fa:53:3d:66:ca:36:e9:74:07:
f9:29:b3:9a:61:b5:34:93:64:6c:4e:98:93:68:00:1e:5d:1e:
19:c3:0d:16:ad:0b:a0:04:ee:30:1a:df:e4:f2:8f:df:52:b9:
5d:99:21:e8:6b:27:a6:85:77:c9:20:f7:6d:b7:de:a8:55:8b:
33:c7:e0:2d:f5:7c:14:53:d5:a1:78:04:8b:95:cb:2d:1e:45:
73:28:00:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:52 2025 by rpki-client