Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/323830343a3234383a3a2f33322d313238203d3e203238353938.roa
File: 323830343a3234383a3a2f33322d313238203d3e203238353938.roa (raw, json)
Hash identifier: IbaPStpdTzkkREcqfOdV3upHEiqDqwQBtVrUN78DC40=
Subject key identifier: 13:20:D7:33:BB:14:13:CA:6C:8B:A3:8A:6A:77:15:D8:A4:D3:34:9E
Certificate issuer: /CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Certificate serial: 618076ED6E484AABB799D58EAE835FF2CBDEC1A0
Authority key identifier: 8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/323830343a3234383a3a2f33322d313238203d3e203238353938.roa
Signing time: Fri 20 Oct 2023 22:59:08 +0000
ROA not before: Fri 20 Oct 2023 22:54:08 +0000
ROA not after: Fri 18 Oct 2024 22:59:08 +0000
asID: 28598
IP address blocks: 2804:248::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:80:76:ed:6e:48:4a:ab:b7:99:d5:8e:ae:83:5f:f2:cb:de:c1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8B924E8BB66CF82E6EA52F9E28FED28B91917B26
Validity
Not Before: Oct 20 22:54:08 2023 GMT
Not After : Oct 18 22:59:08 2024 GMT
Subject: CN=1320D733BB1413CA6C8BA38A6A7715D8A4D3349E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e5:bc:f9:90:73:5d:3d:57:dd:f6:54:25:da:
c4:90:75:d8:55:64:d3:23:58:2b:b6:43:e1:87:33:
e8:e5:53:a2:20:0f:87:d7:25:36:67:4a:3f:70:71:
38:8c:3a:93:30:d8:bd:c6:64:7a:63:b9:a8:dc:9e:
9f:3d:6a:bd:05:e0:1e:1e:9e:6a:b1:15:e0:11:e3:
63:96:df:c6:8f:5b:8a:c9:4e:b2:63:27:d2:36:6f:
91:a5:77:93:6e:bf:c6:7a:40:b7:78:2e:7a:26:c7:
05:75:cd:b5:c8:cf:56:3d:4c:60:aa:6d:b1:39:1f:
21:e9:16:08:22:ec:41:0e:d6:b4:8e:47:06:bd:5c:
88:6b:bd:a9:d5:88:9b:55:2b:46:7f:e9:4e:28:d8:
33:c6:4b:b7:36:3a:69:48:36:53:98:37:36:56:27:
07:d8:84:5f:72:db:2b:8d:72:08:90:d6:43:a6:f5:
95:12:16:6a:09:ed:a9:18:cc:8e:56:85:4f:fd:bf:
58:cf:97:c6:25:14:a4:60:58:4a:82:ea:15:b7:59:
f9:a6:d8:9c:71:4e:f6:af:3a:fe:26:50:35:ae:ea:
9c:b5:12:0c:cc:ed:04:eb:6e:a0:fb:47:1a:72:e4:
52:12:e6:f8:a3:16:81:2a:e6:b4:c1:1b:fe:d9:e1:
73:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:20:D7:33:BB:14:13:CA:6C:8B:A3:8A:6A:77:15:D8:A4:D3:34:9E
X509v3 Authority Key Identifier:
keyid:8B:92:4E:8B:B6:6C:F8:2E:6E:A5:2F:9E:28:FE:D2:8B:91:91:7B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B924E8BB66CF82E6EA52F9E28FED28B91917B26.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J5SCLynrT1qhxSWH275aNxxVLCvb5NFMi139jLKXQrLP/1/323830343a3234383a3a2f33322d313238203d3e203238353938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:248::/32
Signature Algorithm: sha256WithRSAEncryption
5a:07:8b:70:86:00:56:6d:9b:3a:8d:aa:aa:2e:43:f2:e0:3a:
a5:61:f4:29:91:dc:52:bd:30:f6:53:ed:25:5a:cd:80:28:d4:
c1:20:15:fc:9e:02:64:9c:32:81:a4:3e:31:b5:52:2c:db:11:
f2:1d:7e:88:51:7e:33:1f:59:3a:9a:45:7f:9a:fb:03:70:d6:
79:d9:7e:ac:16:f0:17:8b:6e:6c:33:f0:56:5e:30:66:ec:dd:
b5:fb:96:b1:28:dc:c9:62:4a:dd:10:24:e5:34:3d:b3:5b:10:
10:68:a1:01:e9:d2:6a:3a:21:e3:7d:18:44:d4:ea:ac:53:51:
12:2f:59:a3:08:d6:a5:b4:10:98:f0:e2:49:61:ee:8e:94:a4:
0e:51:ce:f6:cd:3c:d9:e1:85:f8:ed:0d:da:45:0a:ab:ff:7a:
bd:66:d8:ec:51:10:9a:c4:75:b7:7c:54:aa:1f:58:9f:3b:d4:
99:a8:54:be:a3:7f:3a:b8:07:8a:a8:dc:52:8e:19:9e:8d:a2:
ee:1b:ef:26:1d:da:04:38:e6:fd:2a:72:e7:cf:a9:c1:e0:86:
f6:17:fa:9b:e1:3d:61:37:96:b2:24:02:8d:a4:0e:7d:13:23:
f7:e2:8a:25:13:91:64:24:de:e4:62:8f:44:37:aa:e9:89:0c:
f8:b7:01:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:45 2025 by rpki-client