Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa
File: 323830343a353236633a3a2f33362d3336203d3e20323638353137.roa (raw, json)
Hash identifier: eO9l5Asgyn3jXzBTQZJgjHj4ipibEG/4AFj/+JDRCME=
Subject key identifier: A5:7F:B3:97:8F:E5:96:48:F8:CF:C9:65:EA:23:31:F4:A6:95:4B:2C
Certificate issuer: /CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Certificate serial: 4629DBAE060BE12EE65666A1D2B39B4A41D4E5C9
Authority key identifier: 32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa
Signing time: Sat 27 Jul 2024 20:05:03 +0000
ROA not before: Sat 27 Jul 2024 20:00:03 +0000
ROA not after: Sat 26 Jul 2025 20:05:03 +0000
asID: 268517
IP address blocks: 2804:526c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:29:db:ae:06:0b:e1:2e:e6:56:66:a1:d2:b3:9b:4a:41:d4:e5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32D32D34674F0161657AF3F71B992CAF74E2BBB9
Validity
Not Before: Jul 27 20:00:03 2024 GMT
Not After : Jul 26 20:05:03 2025 GMT
Subject: CN=A57FB3978FE59648F8CFC965EA2331F4A6954B2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:08:70:56:9c:ab:50:e3:6a:aa:e7:cd:47:fc:
98:c1:a6:72:44:1c:86:9c:ab:3a:6f:41:e5:30:80:
96:ca:18:e3:94:d6:4b:61:f3:70:22:7d:f2:e6:5d:
10:b6:bd:94:2f:16:bb:8c:b9:c5:11:a9:de:21:33:
6a:d7:42:06:a4:03:76:27:b8:f7:cc:c9:79:1d:3f:
d9:21:26:8c:63:21:df:b1:5f:ea:d4:1d:d5:c8:f9:
f3:47:0c:89:42:c6:22:fe:a2:bf:be:1b:78:46:39:
f3:fc:93:80:21:c1:50:0d:8b:16:ce:89:a9:ac:54:
81:c1:65:c8:b8:fa:1d:ce:8b:7c:03:ac:f1:de:17:
ac:81:23:4a:4e:0e:40:16:76:56:84:42:a3:16:eb:
5c:a1:42:e0:58:53:03:20:a9:db:14:ac:51:e0:e2:
04:56:d8:b9:64:a0:b3:8b:0c:3a:e6:ed:67:29:31:
e5:37:47:a1:09:e4:07:a7:d2:77:ab:34:56:47:92:
90:ad:db:c2:89:21:6a:fc:d6:ca:84:9c:37:7c:ba:
33:bb:8d:cc:41:47:78:54:fc:4b:7d:f7:42:91:b5:
91:12:fb:a2:56:c1:13:bc:18:30:3c:38:9a:cf:00:
18:7b:b5:71:4b:3c:d1:29:18:f8:15:1e:ea:70:b8:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:7F:B3:97:8F:E5:96:48:F8:CF:C9:65:EA:23:31:F4:A6:95:4B:2C
X509v3 Authority Key Identifier:
keyid:32:D3:2D:34:67:4F:01:61:65:7A:F3:F7:1B:99:2C:AF:74:E2:BB:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/32D32D34674F0161657AF3F71B992CAF74E2BBB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32D32D34674F0161657AF3F71B992CAF74E2BBB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HNaqN3rdkANPqQdw8dfkadQvQGVq1QoTA2BsiBTdsgkT/0/323830343a353236633a3a2f33362d3336203d3e20323638353137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:526c::/36
Signature Algorithm: sha256WithRSAEncryption
0d:21:42:af:de:15:fd:a7:c5:0f:67:75:92:18:55:9d:b7:2f:
01:84:5c:3a:2f:3f:30:34:13:b7:93:00:96:83:32:bc:eb:ac:
d7:50:eb:e0:21:66:22:2c:1f:b3:75:93:73:f9:18:3f:25:bd:
98:24:63:1e:de:cd:ee:d1:4b:42:b7:cf:70:7f:c7:17:b8:73:
82:bb:e8:93:4a:dc:e5:83:34:2b:b9:3b:55:e1:78:8e:c8:cc:
3f:84:3e:76:c3:c4:24:12:93:7e:26:d3:2c:f9:74:97:c6:27:
7e:68:5c:1e:ae:37:31:c4:6a:5e:8e:b8:33:54:39:eb:0b:b2:
44:84:7e:0b:ed:c5:50:89:db:d8:61:59:a2:bd:83:70:85:64:
cd:e6:68:1c:0c:4f:4f:b7:89:f5:02:ad:98:43:d4:5c:f9:fa:
ea:fb:f0:60:9f:74:38:ad:33:35:a4:34:97:89:e6:b6:4c:eb:
93:ea:9c:e7:37:c4:82:cb:28:59:e5:52:57:48:8e:90:9a:ec:
0b:c2:8f:6e:5f:d2:2a:ed:d6:fd:85:ea:47:42:af:40:aa:2c:
fa:63:93:76:83:d8:ba:5c:5c:50:d8:db:7c:6d:a3:63:e8:ca:
b0:2b:cf:0b:83:91:54:22:ab:ec:ff:fb:9f:39:fc:14:2d:b1:
1f:ed:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:44:12 2025 by rpki-client