Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa
File: 323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa (raw, json)
Hash identifier: eg9Tx982qc6oH1IEPWKA7GLueH9lb0mG+11asCuPzbQ=
Subject key identifier: CE:42:17:56:37:92:B7:D8:EF:02:F4:F2:6E:AA:11:22:60:F3:A6:9B
Certificate issuer: /CN=143582F75704EEF8880AF5E444EE85042913D47D
Certificate serial: 18631F62BBBE43B4B162B28F3D6BFCEBFEB2088C
Authority key identifier: 14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa
Signing time: Mon 16 Oct 2023 16:42:31 +0000
ROA not before: Mon 16 Oct 2023 16:37:31 +0000
ROA not after: Mon 14 Oct 2024 16:42:31 +0000
asID: 52965
IP address blocks: 2804:3b8:4:16::460/126 maxlen: 126
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:63:1f:62:bb:be:43:b4:b1:62:b2:8f:3d:6b:fc:eb:fe:b2:08:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=143582F75704EEF8880AF5E444EE85042913D47D
Validity
Not Before: Oct 16 16:37:31 2023 GMT
Not After : Oct 14 16:42:31 2024 GMT
Subject: CN=CE4217563792B7D8EF02F4F26EAA112260F3A69B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:12:ba:2b:54:98:42:48:a6:61:1c:bd:8e:75:
8b:ca:34:13:66:f0:3c:8d:37:07:c3:05:ba:91:07:
11:48:92:4d:38:dc:57:8e:7a:7d:60:29:7b:9c:05:
58:40:5b:74:8c:8e:30:e1:f0:23:bb:0e:5e:ce:83:
0e:7a:e0:4f:1e:50:ee:32:35:2d:01:57:ae:04:cc:
0a:86:bd:a9:c1:25:49:e3:f4:ef:d6:13:fd:3e:72:
e9:fd:75:2e:cf:be:0b:0f:05:78:73:9e:78:05:c6:
6a:16:a5:85:a5:7e:95:98:9f:36:48:c0:8c:02:6f:
2b:98:95:ad:3f:e5:bf:a6:ce:b3:cc:cb:f6:eb:47:
b2:4c:01:5e:2b:ed:01:9b:22:56:9c:70:8f:ca:dc:
6f:81:60:8d:a9:29:2d:6d:c9:88:25:d8:d3:ba:8f:
7c:92:f2:03:a5:d7:77:2f:45:f3:8c:2b:cd:4e:69:
cd:8f:a8:71:63:ed:5e:9c:1a:b2:8c:53:f7:7d:84:
7e:7f:05:c7:dc:de:cc:97:1b:6e:ba:02:31:31:41:
b1:c5:4f:c0:36:86:47:58:21:9d:30:0b:27:4f:87:
8f:35:5c:4b:a6:4e:f2:96:15:33:09:7d:60:96:fe:
95:dd:eb:de:7d:51:46:27:52:07:09:f4:3c:ec:03:
47:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:42:17:56:37:92:B7:D8:EF:02:F4:F2:6E:AA:11:22:60:F3:A6:9B
X509v3 Authority Key Identifier:
keyid:14:35:82:F7:57:04:EE:F8:88:0A:F5:E4:44:EE:85:04:29:13:D4:7D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/143582F75704EEF8880AF5E444EE85042913D47D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/143582F75704EEF8880AF5E444EE85042913D47D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Gn28sxmPtgEfqpaJ6EtwD4q4KwYMdWh41zb1uZE9aBCX/0/323830343a3362383a343a31363a3a3436302f3132362d313236203d3e203532393635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b8:4:16:0:0:0:460/126
Signature Algorithm: sha256WithRSAEncryption
70:64:e2:dc:2d:2f:86:84:5a:c8:0d:be:21:c4:b8:5b:99:9d:
64:0e:78:89:14:81:f0:2b:4a:84:56:d4:74:f2:78:de:14:97:
e6:4b:c5:f1:db:98:c2:9c:18:09:24:46:99:59:f4:56:7d:9b:
fa:f8:7e:43:f7:c4:51:21:42:01:61:bf:e7:d3:b2:6b:63:4c:
f7:ca:73:1a:8a:c1:49:ac:7a:78:08:05:fe:06:71:51:bf:43:
8b:dc:7a:ad:14:7d:b7:d5:7e:50:08:96:d0:97:42:34:7a:8f:
76:b6:9f:12:8d:64:5f:8d:23:43:3a:48:df:52:da:ef:9a:b3:
7b:b3:ee:5b:44:17:72:69:5b:85:ba:d6:57:68:33:a2:b4:5a:
61:ff:9e:4e:c1:7b:fd:b0:c3:a5:26:b3:6b:7f:29:68:db:2b:
25:f2:44:77:1b:d0:f2:3a:ad:fb:ff:aa:74:28:6e:4b:c3:72:
6f:bf:07:ae:f2:e6:f4:11:03:3c:58:85:fc:b7:0f:b9:70:4c:
08:d5:f1:fd:1b:83:3f:8b:af:51:f6:ee:12:5e:bc:ea:cd:de:
8a:76:5e:73:98:42:9b:46:00:de:a8:dc:60:3e:f1:0d:69:9f:
83:6b:38:42:99:0d:ec:67:19:1c:03:fb:26:0d:80:b0:65:97:
38:6b:83:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 06:13:42 2025 by rpki-client