Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
File: 323830343a313038303a3a2f33322d3438203d3e203238323837.roa (raw, json)
Hash identifier: 2tFXTmc9Wnp3brn1vNSZaHqV2NghdKy3Pl5KS9jVjt8=
Subject key identifier: 0D:19:FF:26:B8:D6:86:9A:17:02:64:58:14:FF:65:0D:D0:CA:AD:D2
Certificate issuer: /CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Certificate serial: 40586E6E03562494063E219BFB60F77C5B1D6072
Authority key identifier: 8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
Signing time: Wed 12 Jun 2024 13:13:43 +0000
ROA not before: Wed 12 Jun 2024 13:08:43 +0000
ROA not after: Wed 11 Jun 2025 13:13:43 +0000
asID: 28287
IP address blocks: 2804:1080::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:58:6e:6e:03:56:24:94:06:3e:21:9b:fb:60:f7:7c:5b:1d:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EB5640E5E527878FC946C7E404DEEF0F92CB53F
Validity
Not Before: Jun 12 13:08:43 2024 GMT
Not After : Jun 11 13:13:43 2025 GMT
Subject: CN=0D19FF26B8D6869A1702645814FF650DD0CAADD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:da:f8:21:9c:4c:f7:49:b7:09:5e:f2:53:
db:4b:f3:28:d0:10:e1:25:6f:3b:77:f7:2d:9e:8b:
4d:ad:cb:3d:ea:2f:e5:83:93:cf:f7:87:15:de:35:
af:52:bf:32:52:fe:ec:fd:6f:93:81:05:5d:1a:75:
8c:30:07:b9:f1:e2:44:ab:e9:2a:a2:b3:2d:52:27:
b5:db:3c:33:87:30:d1:18:f4:2f:5e:0a:f6:f8:8f:
23:7f:5a:b4:a6:e4:4e:91:8b:21:f3:6b:3e:62:f2:
69:a8:41:b2:c1:c0:5c:06:74:87:78:70:cc:53:49:
f5:30:19:72:6d:86:a6:82:b3:ed:cb:82:1d:77:04:
99:2e:37:99:01:55:ee:77:60:5e:51:16:9d:93:24:
cc:d1:4a:d0:b4:7c:c9:ac:81:d4:ec:c1:d8:27:06:
c1:99:c5:76:d5:aa:ed:df:f6:23:61:12:b2:58:c7:
cd:28:9a:51:5f:8f:07:95:e3:01:4f:29:cb:1d:f4:
b0:9e:79:f6:30:5f:f3:c2:c0:e2:fe:9e:1c:7c:63:
b0:f4:f3:04:20:20:9b:d6:58:80:c1:a0:a8:30:a1:
1f:df:04:25:78:63:cd:5f:60:01:03:33:51:1f:2e:
42:9e:27:6d:80:ae:d6:28:5f:bd:28:e0:71:c7:26:
d8:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:19:FF:26:B8:D6:86:9A:17:02:64:58:14:FF:65:0D:D0:CA:AD:D2
X509v3 Authority Key Identifier:
keyid:8E:B5:64:0E:5E:52:78:78:FC:94:6C:7E:40:4D:EE:F0:F9:2C:B5:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EB5640E5E527878FC946C7E404DEEF0F92CB53F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3fXuYKThx4oPfofxGQU6CJpsmLmyswNmC6Wu6r1mgUK/1/323830343a313038303a3a2f33322d3438203d3e203238323837.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1080::/32
Signature Algorithm: sha256WithRSAEncryption
4b:23:0c:12:26:29:03:45:8e:84:46:c8:26:99:bf:0a:03:89:
37:db:c9:21:d1:42:fe:08:0f:54:f6:93:5f:1c:fd:a0:c4:7d:
d9:9b:30:ae:3e:b0:17:16:3b:e0:86:72:40:42:70:e3:91:6d:
2f:ab:0e:3a:26:2c:74:63:da:37:52:95:36:9e:f7:ad:ec:4b:
a9:3c:ec:5a:33:c4:b9:80:02:3b:1a:37:70:1a:d5:0f:93:17:
61:9f:29:2b:eb:4f:68:d1:8e:4c:46:e3:90:f1:59:6d:57:5c:
ce:fb:5d:ea:a1:dc:52:bf:b0:be:85:ae:73:3e:fa:40:8f:51:
90:9c:3f:65:62:9f:3e:c2:2f:c9:bd:51:20:e7:ed:8e:b2:96:
12:c8:3a:82:d1:a5:12:21:f7:fa:02:cf:79:31:ac:20:e9:cb:
24:ca:55:16:ea:e0:86:ee:41:8c:3c:23:a0:f7:15:e0:f5:76:
84:a2:2c:5b:38:12:9b:9f:77:aa:b9:ac:79:1f:fa:90:62:3c:
14:9b:9f:15:d9:fe:91:12:d2:98:6b:62:92:ad:5e:45:26:2d:
39:c5:d8:0d:e7:22:87:07:f1:ef:71:da:ea:47:b9:7e:08:d2:
b5:bc:6b:78:02:b4:af:8f:c3:bb:04:a3:23:01:78:f5:8a:3e:
a5:b3:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 02:18:38 2025 by rpki-client