Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3332203d3e203533323137.roa
File: 323830343a3237343a3a2f33322d3332203d3e203533323137.roa (raw, json)
Hash identifier: ChdiqiZ0LFZOoKQPeRgk+t//x8M5v1MMFbVO4eX9NBw=
Subject key identifier: 68:B5:43:B1:F9:29:B8:15:4B:46:A0:59:88:B9:F6:6A:EC:FC:67:FE
Certificate issuer: /CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Certificate serial: 3FD38B6231FF3E19DDB43B842D9022B6DFF722B5
Authority key identifier: 52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3332203d3e203533323137.roa
Signing time: Sun 28 Jul 2024 18:53:53 +0000
ROA not before: Sun 28 Jul 2024 18:48:53 +0000
ROA not after: Sun 27 Jul 2025 18:53:53 +0000
asID: 53217
IP address blocks: 2804:274::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:d3:8b:62:31:ff:3e:19:dd:b4:3b:84:2d:90:22:b6:df:f7:22:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520BD06FB2D06F747C5B26FFFB9D7BC82AB87744
Validity
Not Before: Jul 28 18:48:53 2024 GMT
Not After : Jul 27 18:53:53 2025 GMT
Subject: CN=68B543B1F929B8154B46A05988B9F66AECFC67FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:e0:9d:4a:0c:3f:80:b1:b8:40:ef:27:89:
fa:6b:50:5a:bb:37:42:35:07:f8:49:a9:48:21:68:
4f:aa:a3:a9:68:03:d5:77:cf:a8:27:b6:34:76:15:
10:40:df:d7:96:ea:b9:74:9f:46:20:a5:4d:49:de:
98:a9:f7:3d:da:57:67:ec:1b:a7:d0:75:5c:ba:73:
c4:12:fd:e4:e6:12:f4:38:cc:72:89:cc:d4:6f:9a:
da:13:45:50:73:d9:4a:ee:a8:9c:e6:b0:7d:61:c9:
49:8c:a8:4d:82:98:7f:39:66:80:24:23:e2:ca:9d:
33:a1:d5:58:dd:5c:a7:db:28:c7:7c:46:27:e3:f6:
3c:2a:9c:36:83:2b:5f:5f:fa:a6:73:d3:ab:21:60:
01:0b:1a:cd:d3:1b:00:18:eb:07:11:60:a3:f5:cb:
b1:b3:6c:e5:04:18:f5:4c:e3:53:c5:64:fb:f7:8e:
16:af:77:98:20:ef:cf:ee:76:ef:54:69:b9:07:87:
f4:29:b9:72:4d:6b:5a:ec:66:8b:0c:73:7d:ae:76:
ce:27:03:5f:29:34:2b:49:8d:0d:a8:0a:20:37:bd:
2d:d1:b9:04:0f:df:4d:d3:45:e1:0b:66:1a:3c:96:
5b:38:f6:4b:77:fe:80:2d:e2:cf:0b:e6:22:c4:f8:
cb:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:B5:43:B1:F9:29:B8:15:4B:46:A0:59:88:B9:F6:6A:EC:FC:67:FE
X509v3 Authority Key Identifier:
keyid:52:0B:D0:6F:B2:D0:6F:74:7C:5B:26:FF:FB:9D:7B:C8:2A:B8:77:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/520BD06FB2D06F747C5B26FFFB9D7BC82AB87744.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HAGcfrQyoZnbhrJgXuLMPxbqBrwKtR9eMV4XuebvaM65/0/323830343a3237343a3a2f33322d3332203d3e203533323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:274::/32
Signature Algorithm: sha256WithRSAEncryption
91:61:43:f2:d9:46:ab:0e:51:f2:3e:a0:a5:6e:92:45:d6:f8:
5a:d9:f0:f6:4d:c9:0c:1a:d4:e6:74:9a:02:ab:73:a6:fe:ec:
ab:34:f9:bf:da:e1:d2:4d:bc:5b:b6:a8:59:06:d8:0e:2f:05:
ef:1e:f6:d9:57:96:d5:e2:11:6d:0f:19:e0:e9:ff:32:2a:c7:
a0:c2:27:c7:ca:cc:8b:9c:ed:65:59:02:49:76:6b:b2:e5:af:
b2:8b:a7:7c:2b:1c:27:d8:f7:bf:d4:f6:59:6c:3d:6f:27:d6:
53:bd:01:5a:01:33:6a:b8:22:57:03:fa:db:15:91:c9:07:c5:
bb:66:9d:80:32:0a:82:06:8f:98:88:6e:e3:62:6c:c4:cf:32:
b5:1f:59:47:38:9e:e3:ee:92:33:a1:e3:d7:ba:9c:45:de:ca:
96:24:f7:9f:d2:33:04:0b:e4:e1:ba:8c:fc:14:67:e8:d6:0d:
4f:eb:51:27:b3:d3:4a:50:97:ea:0e:e3:26:f5:7f:56:2e:a1:
2e:b8:76:6e:88:de:08:e5:07:84:92:13:d3:0f:5c:76:64:cd:
3f:33:65:a8:3d:3e:39:c4:da:b2:4e:5d:23:eb:31:ff:a9:11:
a5:d3:d9:c0:de:d2:00:a9:ca:2b:17:77:f6:19:0a:aa:a6:fe:
6c:8d:0a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:18:32 2025 by rpki-client