Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a336130303a3a2f34302d3430203d3e203533313935.roa
File: 323830343a3361383a336130303a3a2f34302d3430203d3e203533313935.roa (raw, json)
Hash identifier: fcMk01+Od8dOzS48FVkNZgQwz9cGozlmII2NBeYjeEw=
Subject key identifier: C7:01:5A:26:05:28:68:5F:D3:2C:B8:C4:C5:4A:91:74:D9:E8:B7:4A
Certificate issuer: /CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Certificate serial: 27FEC323DD3958FE18270A0223CF5DB7444C99E3
Authority key identifier: D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a336130303a3a2f34302d3430203d3e203533313935.roa
Signing time: Fri 23 Aug 2024 20:00:07 +0000
ROA not before: Fri 23 Aug 2024 19:55:07 +0000
ROA not after: Fri 22 Aug 2025 20:00:07 +0000
asID: 53195
IP address blocks: 2804:3a8:3a00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:fe:c3:23:dd:39:58:fe:18:27:0a:02:23:cf:5d:b7:44:4c:99:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77
Validity
Not Before: Aug 23 19:55:07 2024 GMT
Not After : Aug 22 20:00:07 2025 GMT
Subject: CN=C7015A260528685FD32CB8C4C54A9174D9E8B74A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:12:60:55:bc:25:56:7f:18:38:ac:b8:c9:5f:
1f:25:d2:d8:60:c7:61:8d:03:56:15:ff:91:2f:73:
7d:7a:67:20:53:52:fd:55:51:99:7d:af:6d:a1:8e:
5c:e9:db:34:dd:78:67:54:af:06:53:00:24:c2:74:
d3:9d:f2:8f:77:e2:43:e2:97:67:c7:54:cb:61:f4:
6d:dc:1b:93:28:94:94:8a:a5:e9:ca:52:3d:1c:7a:
2d:25:e7:69:7d:67:32:be:84:0d:f0:bf:80:4c:37:
f3:b7:6a:43:d0:9c:af:c5:7a:7f:84:d4:3e:93:e8:
a7:0f:da:36:b9:cf:18:f3:d5:4a:80:b6:26:1c:c8:
c2:d4:1a:df:7f:bb:25:23:48:54:de:03:3d:1e:b6:
00:01:f5:e1:fe:3f:60:2e:9d:c9:d1:2d:fa:17:e0:
de:d4:55:99:05:c8:00:16:10:8f:25:42:6e:db:04:
6d:ac:e4:b2:94:13:c5:1a:9d:76:08:ae:14:c7:f9:
c2:b6:eb:7c:dd:58:08:11:b6:04:13:ee:47:a3:71:
51:ea:81:31:07:57:8f:4c:68:67:7e:ff:d2:a4:92:
38:32:73:3f:08:c9:33:92:69:29:b1:43:0b:89:e0:
de:ee:8d:bc:b5:2c:01:a7:cc:1b:d3:76:9b:e7:fd:
ad:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:01:5A:26:05:28:68:5F:D3:2C:B8:C4:C5:4A:91:74:D9:E8:B7:4A
X509v3 Authority Key Identifier:
keyid:D5:F6:B7:FF:6F:96:81:9D:AF:FD:6C:EF:21:9B:89:AD:F3:E3:CF:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D5F6B7FF6F96819DAFFD6CEF219B89ADF3E3CF77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HMLbExkmsrQTi3GWpZU5g9phogpbGb6hJmX7ZV2W2MSJ/0/323830343a3361383a336130303a3a2f34302d3430203d3e203533313935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a8:3a00::/40
Signature Algorithm: sha256WithRSAEncryption
04:a2:f1:1a:30:0a:62:b1:a7:7a:29:5d:ef:77:25:96:1b:dc:
b9:ab:d1:10:12:8d:ec:26:16:1a:a7:4e:dc:6b:e1:7c:20:3e:
bf:6e:45:0f:3c:a1:50:5f:f3:7d:e8:f5:45:a4:84:5a:34:8d:
bc:da:56:fd:2c:b5:e9:b0:0b:45:35:c9:78:95:1c:76:53:c7:
77:20:2e:2c:fb:43:07:ec:7f:72:4c:4f:03:02:7d:86:fc:e9:
dc:c6:f2:69:3f:9a:ff:13:69:34:72:7b:82:f5:72:22:8c:a6:
f0:dc:1c:b3:bd:33:93:90:15:4b:66:85:48:d9:63:18:55:94:
c8:3c:3d:e7:d8:d0:a7:54:6b:09:04:99:3f:95:52:a0:df:fd:
b4:d1:d1:dc:d7:68:dc:1d:65:c1:4d:1c:2e:dc:39:d9:83:6a:
98:5e:14:13:d1:7e:5b:bf:55:2a:03:42:c3:ea:ac:7b:9a:3e:
73:bd:2c:fd:55:ab:06:ee:b6:82:12:77:1b:01:13:95:9c:2b:
90:f1:25:ea:c9:dd:57:15:5a:f6:57:79:ed:d8:d7:a9:f2:76:
fb:ee:3f:a5:60:db:6d:dc:be:e3:d7:5f:05:32:7b:2e:2e:a0:
9c:09:df:43:79:4b:a2:a0:5f:a2:26:75:10:4d:36:de:0f:0a:
01:57:df:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:27 2025 by rpki-client