Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
File: 323830343a373434343a3a2f33322d3334203d3e20323730393730.roa (raw, json)
Hash identifier: PUhLIB8SSaRVgT7VzOyCgqx971x+yevvaytDg0D3ezU=
Subject key identifier: DA:6F:FD:AA:11:05:E8:FD:C2:8A:09:EE:C2:D9:CB:2F:ED:6E:DE:12
Certificate issuer: /CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Certificate serial: 050C9FC56711023707A676E2B5D5E5F4860789B4
Authority key identifier: 2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
Signing time: Thu 04 Apr 2024 09:11:47 +0000
ROA not before: Thu 04 Apr 2024 09:06:47 +0000
ROA not after: Thu 03 Apr 2025 09:11:47 +0000
asID: 270970
IP address blocks: 2804:7444::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:0c:9f:c5:67:11:02:37:07:a6:76:e2:b5:d5:e5:f4:86:07:89:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E5712C9CCD0E705FECAA05DA82ADF1C847CA831
Validity
Not Before: Apr 4 09:06:47 2024 GMT
Not After : Apr 3 09:11:47 2025 GMT
Subject: CN=DA6FFDAA1105E8FDC28A09EEC2D9CB2FED6EDE12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:85:51:f5:29:f9:d2:6e:83:10:d3:39:8a:6d:
ff:a0:45:5d:5f:9c:61:d2:4f:d3:dc:b0:d9:06:3f:
0f:b5:f0:01:65:5d:03:2f:a2:ef:1d:b7:4b:42:a9:
bd:81:de:16:ac:44:56:08:60:2f:3e:54:49:f8:13:
73:c0:23:8c:b9:d6:5b:a9:4b:fa:1f:ce:ba:09:2d:
35:9f:3c:1c:8c:85:f4:b6:b6:52:ec:c1:70:49:ec:
82:9c:2e:8b:41:4f:00:2b:2c:07:62:b7:2c:27:4f:
de:0b:02:72:ca:2d:38:b3:1e:30:56:a9:b3:8c:e9:
a5:54:83:6e:6b:8e:40:7d:60:18:5d:07:a1:e9:20:
8b:6e:46:7f:71:67:fd:8c:92:fa:46:c6:e4:23:bc:
71:8f:ab:8a:23:f8:b5:82:6c:ad:42:f7:f7:8d:a0:
ca:01:07:8a:f0:db:bd:43:9d:18:1d:41:30:92:61:
48:0f:f6:69:d8:c8:cf:a3:5d:c2:c1:76:a3:de:a3:
9b:c2:b2:70:b6:9f:c8:01:96:bb:26:b1:ac:a4:53:
72:6f:63:06:a8:c5:b4:9e:d2:95:b9:1b:34:e1:71:
c4:7f:70:4a:8e:02:89:4b:4c:c5:66:41:4c:d8:68:
08:bb:38:dd:35:ee:9c:d8:84:34:e6:1e:64:68:88:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:6F:FD:AA:11:05:E8:FD:C2:8A:09:EE:C2:D9:CB:2F:ED:6E:DE:12
X509v3 Authority Key Identifier:
keyid:2E:57:12:C9:CC:D0:E7:05:FE:CA:A0:5D:A8:2A:DF:1C:84:7C:A8:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E5712C9CCD0E705FECAA05DA82ADF1C847CA831.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H74jDfhAmvEyMvqvgpAfhB8cfBU59tHa5q55CoEjcxmK/1/323830343a373434343a3a2f33322d3334203d3e20323730393730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7444::/32
Signature Algorithm: sha256WithRSAEncryption
a9:b4:65:b4:d1:46:32:aa:1e:7b:45:17:16:63:56:c8:2c:f0:
da:fa:af:86:86:86:78:15:db:12:4d:6e:06:8d:88:7a:f5:ea:
9e:61:0a:66:ae:d2:7f:5b:0b:b5:ea:03:d8:fd:66:75:16:cd:
80:ab:33:79:9d:b9:cd:81:72:e6:20:11:ca:24:ef:e5:b8:5b:
8a:22:96:71:df:8b:1b:b0:65:0e:63:3f:e0:ef:f9:a7:55:ca:
72:e4:7c:11:eb:f9:2d:a0:4c:e9:50:16:f4:f8:bb:ab:0e:46:
b0:89:34:ce:c4:c6:93:c8:84:fe:4a:59:7f:d4:c2:e9:d5:02:
d0:b0:bd:23:0e:11:9c:0d:16:22:2b:e1:ac:92:52:f6:3d:d8:
3b:59:0c:17:0c:ff:78:9c:90:10:94:3d:a2:df:7b:dd:1e:07:
85:fd:db:99:ae:a7:7e:ef:8b:a1:2a:d9:00:8f:b1:2b:a0:e6:
ad:1c:61:75:2d:e0:74:83:0c:35:bd:dc:52:00:6b:20:04:9c:
44:99:a4:50:a6:82:b2:9d:8d:f9:4a:fc:62:be:0a:db:df:66:
68:98:cc:79:de:85:48:fd:cb:20:ee:31:65:e6:08:a0:d7:8c:
e8:c4:95:8a:4a:bd:c8:40:e4:6e:38:6c:0e:ee:2f:a5:09:5c:
73:a7:33:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:50:42 2025 by rpki-client