Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa
File: 323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa (raw, json)
Hash identifier: 1VRrn2iOno+zuXW45Okci19Vc/Osjszi3E1Jne/26+Q=
Subject key identifier: CE:61:D9:A5:B6:7A:69:3A:75:A6:C0:0B:23:05:6F:43:43:86:3F:A4
Certificate issuer: /CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Certificate serial: 4896235CEE28215E6D0F4185DB09CACA745CB909
Authority key identifier: B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa
Signing time: Thu 14 Nov 2024 16:58:07 +0000
ROA not before: Thu 14 Nov 2024 16:53:07 +0000
ROA not after: Thu 13 Nov 2025 16:58:07 +0000
asID: 274647
IP address blocks: 2804:9188:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:96:23:5c:ee:28:21:5e:6d:0f:41:85:db:09:ca:ca:74:5c:b9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B47E475F433744404F90CCDF85FD5C0F61281FD5
Validity
Not Before: Nov 14 16:53:07 2024 GMT
Not After : Nov 13 16:58:07 2025 GMT
Subject: CN=CE61D9A5B67A693A75A6C00B23056F4343863FA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:4a:06:c8:d9:ed:06:59:a5:2d:45:1f:ae:
de:86:02:14:8d:47:5d:96:66:f6:50:1a:9b:3a:64:
b4:e8:5e:b5:fa:fd:24:a7:d9:40:09:80:e2:8b:41:
ef:b1:ad:88:06:83:c0:c3:d9:ba:8f:d0:a8:d4:9c:
90:a1:94:61:c9:48:7a:43:2d:3e:ce:23:2a:4a:f7:
e6:ba:0e:25:f9:d7:a8:31:77:f6:ce:9a:86:56:92:
81:38:8b:14:11:51:2a:97:cf:56:ba:16:48:f9:2a:
0f:db:ed:59:74:92:9e:f0:7d:40:ba:fa:8b:e5:e0:
40:c1:a3:b6:ea:c3:34:fa:3b:05:0c:e2:f3:6a:aa:
ce:eb:a5:67:8b:28:30:6b:34:77:13:ab:8e:a1:6d:
e6:3b:99:de:a9:54:50:29:27:be:c0:1e:8c:de:70:
ee:c3:d3:47:ac:55:0c:db:98:87:f8:7e:62:e5:5e:
b5:f6:8a:9e:8c:0e:93:2b:1f:91:1d:3e:ad:e0:0f:
49:7b:4c:d1:e3:5e:f5:ca:58:84:5b:0c:7f:38:d2:
da:85:d6:89:0a:0f:67:b7:98:eb:b1:44:37:5b:f2:
0f:a1:82:dd:66:db:7d:80:fa:36:48:4f:d3:2a:17:
52:f4:25:5d:4d:d4:ac:57:39:ef:b3:2a:e2:57:90:
fb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:61:D9:A5:B6:7A:69:3A:75:A6:C0:0B:23:05:6F:43:43:86:3F:A4
X509v3 Authority Key Identifier:
keyid:B4:7E:47:5F:43:37:44:40:4F:90:CC:DF:85:FD:5C:0F:61:28:1F:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/B47E475F433744404F90CCDF85FD5C0F61281FD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B47E475F433744404F90CCDF85FD5C0F61281FD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a383030303a3a2f33332d3333203d3e20323734363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9188:8000::/33
Signature Algorithm: sha256WithRSAEncryption
2a:88:14:b7:50:83:ac:80:0f:91:42:ab:75:55:24:4b:3e:9a:
79:69:fb:66:8a:5f:31:fe:cc:b0:ff:c0:9c:c9:f5:ad:4e:df:
c7:e2:42:c8:00:6b:ad:e5:f7:79:48:a3:a8:8d:09:2a:d0:4e:
e6:40:16:03:10:db:60:d1:ad:c9:9a:f9:b6:39:81:b4:9e:18:
59:6e:0b:2e:64:20:56:c6:95:bc:43:9d:5b:46:bd:eb:7d:f3:
19:4b:9f:8a:ab:ec:22:5c:d3:97:61:14:b0:78:88:3c:90:52:
a6:e1:de:aa:6a:3a:44:42:30:7c:e4:33:6a:f2:30:2e:2d:f9:
53:49:a3:ba:4d:e1:7e:42:2e:96:d5:3e:74:68:34:37:25:57:
a9:08:cc:6a:0a:8f:0e:d6:84:69:bf:9b:27:4a:fc:7d:1d:97:
90:e2:f9:25:7d:9f:08:6e:c2:2b:78:1f:bd:de:84:6c:4c:9a:
e6:a2:8c:dd:28:9b:8b:7e:04:94:ed:b7:ff:93:2a:00:30:ae:
02:67:33:7f:11:11:e5:27:4e:03:bd:19:39:b6:df:5e:f5:9b:
7f:be:a6:a3:13:84:26:60:45:2d:7e:db:71:08:59:34:a7:bb:
a9:85:72:93:64:ba:fd:da:53:a7:59:f6:b0:e9:ce:ba:94:71:
b3:bb:29:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:32:55 2025 by rpki-client