Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
File: 323830343a363931343a3a2f33322d3438203d3e20323730323437.roa (raw, json)
Hash identifier: +q0LyvSDCPH7cc7wyNazpdF2jT3giAMSFlPDwfWzQXo=
Subject key identifier: 28:C4:FD:40:D8:9A:F7:21:2C:F0:7D:31:08:F1:E5:AA:D0:B1:3D:CD
Certificate issuer: /CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Certificate serial: 1D5D7892DCA96E3235BF9CB7357B610D5FAB464A
Authority key identifier: A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
Signing time: Wed 10 Apr 2024 13:19:27 +0000
ROA not before: Wed 10 Apr 2024 13:14:27 +0000
ROA not after: Wed 09 Apr 2025 13:19:27 +0000
asID: 270247
IP address blocks: 2804:6914::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:5d:78:92:dc:a9:6e:32:35:bf:9c:b7:35:7b:61:0d:5f:ab:46:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A17E1666B400764AAB84BF876124DB6CB1EB0DC3
Validity
Not Before: Apr 10 13:14:27 2024 GMT
Not After : Apr 9 13:19:27 2025 GMT
Subject: CN=28C4FD40D89AF7212CF07D3108F1E5AAD0B13DCD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:bc:c3:95:25:79:f0:c3:82:e1:ee:31:93:
74:97:ce:7b:8e:07:69:85:01:6c:70:f0:7e:57:1d:
5d:77:6b:bf:93:07:b8:f0:dd:c8:95:63:50:3b:1f:
b2:61:c7:e3:42:6f:f2:76:3b:3e:9e:a5:86:dc:ad:
05:8b:d7:82:fe:ec:ed:58:10:0d:b9:1a:2c:bd:b0:
e4:21:50:15:ca:b1:93:7f:d1:ef:c0:0e:a8:24:9c:
a9:02:49:8a:74:2d:cd:50:00:db:be:d1:30:ed:f1:
65:3c:23:d1:8e:eb:bf:e6:f6:7b:99:ed:42:78:d3:
1e:5b:46:bf:a3:16:0a:5b:3a:9f:05:05:2d:1a:2b:
a7:1f:84:49:b3:b7:86:6d:07:6a:36:18:c0:22:f7:
60:27:46:ab:ba:72:48:e5:d7:cb:e7:4a:a4:d3:51:
7a:3b:90:54:80:b9:01:58:0e:a5:c7:ea:45:91:eb:
52:d3:3d:7a:e2:69:9e:94:a6:f0:74:e0:23:57:32:
cd:45:c2:23:d4:e3:32:dc:38:d2:b4:9b:ee:b8:cf:
86:fd:37:8b:0a:3e:40:a8:2a:68:59:84:27:1a:22:
33:63:ff:da:eb:d1:86:0f:45:e1:eb:4a:92:f2:a2:
27:a8:58:c4:84:01:2b:b9:f1:be:f8:cd:07:35:b3:
34:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C4:FD:40:D8:9A:F7:21:2C:F0:7D:31:08:F1:E5:AA:D0:B1:3D:CD
X509v3 Authority Key Identifier:
keyid:A1:7E:16:66:B4:00:76:4A:AB:84:BF:87:61:24:DB:6C:B1:EB:0D:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A17E1666B400764AAB84BF876124DB6CB1EB0DC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4qKyFrWr1AeRE6FG9TKBHQhDYZtUT4wGp3iv6Npwe9n/0/323830343a363931343a3a2f33322d3438203d3e20323730323437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6914::/32
Signature Algorithm: sha256WithRSAEncryption
36:0d:ce:ea:2e:fe:46:8a:4a:34:c3:4a:6b:19:e3:34:3a:8a:
15:39:ce:c0:b6:b5:02:53:34:c5:75:27:8f:f0:f5:8a:26:3d:
76:2c:49:ab:fe:e3:af:b6:15:dd:5f:1f:aa:dd:94:82:d0:5a:
84:19:4a:ba:7c:da:ea:3c:b2:c5:50:f7:61:ad:08:00:98:c8:
50:a8:27:11:2f:6d:8f:e8:38:28:89:37:ae:04:60:3a:2d:31:
96:8b:32:11:46:5b:1c:57:be:22:ea:8d:fa:28:55:cf:62:32:
95:ae:db:93:c5:c9:8b:db:e1:32:08:ba:f7:9a:c4:53:8e:3f:
6a:37:15:62:38:49:1e:91:eb:45:99:c8:39:dd:98:08:6a:3e:
00:c5:eb:6f:55:0b:28:1f:4b:27:bb:24:02:52:81:ec:cd:21:
da:ca:ff:fd:00:02:10:53:02:cf:0c:21:5e:b3:43:13:a7:54:
e5:0b:09:32:2f:b9:48:7d:74:30:be:3f:75:6a:f3:3c:3f:eb:
31:04:84:87:f7:20:37:0a:66:a4:f5:55:94:70:d3:c2:f1:ce:
05:13:95:67:c3:99:b6:c1:20:97:50:b6:e6:44:3e:bb:26:af:
e9:ad:6b:2b:81:25:52:88:ba:b6:de:68:a4:a9:5c:dc:21:26:
ec:bc:41:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:53 2025 by rpki-client