Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa
File: 323830343a6166343a3a2f33322d313238203d3e203532393330.roa (raw, json)
Hash identifier: XDksuwy9IzoUFEqUDKREoeF8FTmwIldqE33r7mfmHB0=
Subject key identifier: 45:AA:8C:EF:E9:7F:A5:DB:9F:C5:2D:A7:AC:BE:80:94:43:6E:F3:48
Certificate issuer: /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial: 3B23F781F9BBF32AB7A61E78D574C4CA1D9B4D9A
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa
Signing time: Wed 10 Apr 2024 15:50:35 +0000
ROA not before: Wed 10 Apr 2024 15:45:35 +0000
ROA not after: Wed 09 Apr 2025 15:50:35 +0000
asID: 52930
IP address blocks: 2804:af4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:23:f7:81:f9:bb:f3:2a:b7:a6:1e:78:d5:74:c4:ca:1d:9b:4d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Validity
Not Before: Apr 10 15:45:35 2024 GMT
Not After : Apr 9 15:50:35 2025 GMT
Subject: CN=45AA8CEFE97FA5DB9FC52DA7ACBE8094436EF348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ac:8b:de:cb:aa:52:e6:63:12:a5:d9:27:52:
c6:0d:08:68:b3:cb:9d:a3:79:01:f3:ea:cf:b2:40:
5e:b9:66:93:4e:96:22:74:50:fd:bf:b0:9f:0d:04:
11:f2:fe:ea:40:db:44:3c:07:4d:98:3a:05:1d:7c:
af:2c:3b:e8:c2:a9:de:6a:45:38:fb:55:50:b9:b1:
a9:4f:53:3b:34:46:78:9f:57:d2:52:ac:0b:f3:1a:
7d:5c:d6:4c:37:40:92:b8:dd:e2:e4:85:49:ba:76:
0d:b3:87:53:a5:7d:bd:bd:8c:78:12:8b:9d:fd:fc:
d9:b1:9f:ff:5d:07:56:e0:91:ea:0f:b9:23:4f:29:
48:ff:85:09:90:0e:c6:19:d6:22:fa:36:c3:55:4e:
5c:63:cf:2a:95:36:fb:24:ed:47:cd:83:72:ca:ce:
85:32:6b:20:6b:48:8f:3e:56:79:a6:71:14:5a:56:
66:63:5c:3c:bf:d7:b1:eb:f2:b3:97:37:01:cc:15:
04:21:12:e6:36:87:7f:90:b6:a9:09:75:6c:88:fe:
32:8c:31:cb:71:df:85:73:9e:48:ca:ac:55:3d:4c:
e3:4b:89:6f:75:e4:60:ab:19:3c:a2:39:11:eb:7a:
e5:22:3e:17:e5:a8:be:7a:71:91:58:71:18:8a:08:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:AA:8C:EF:E9:7F:A5:DB:9F:C5:2D:A7:AC:BE:80:94:43:6E:F3:48
X509v3 Authority Key Identifier:
keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:af4::/32
Signature Algorithm: sha256WithRSAEncryption
33:56:7a:9b:d5:92:dc:88:9d:f7:79:5a:e5:57:c1:1a:48:c7:
ec:e4:97:5a:80:2b:4b:2a:df:fe:82:ed:3f:fe:bb:9b:ad:ef:
36:10:5f:0a:5d:ff:b0:77:90:27:82:fe:b9:d1:43:39:3b:fd:
90:65:57:d5:a3:48:93:97:0a:f3:f3:02:42:50:b6:a1:f3:21:
55:7a:0d:d6:19:33:cd:fa:a3:31:56:ae:0f:1c:ec:f7:57:e5:
02:3b:d2:8e:3f:06:79:8d:b6:78:63:d1:aa:a6:d2:61:14:bb:
2e:7b:58:02:d7:bf:5d:4f:f4:e4:e5:69:1c:59:7c:03:9e:5c:
b6:7f:cb:43:76:11:75:42:1e:31:42:ce:22:d1:7f:82:3b:be:
0b:e5:8b:08:66:65:b0:27:f8:49:52:af:c1:e9:e4:51:da:0d:
1d:12:f3:05:3c:a1:c4:34:f1:81:dc:96:b5:2d:8a:40:c1:bc:
a2:40:6e:70:82:77:ee:16:d2:c2:e4:8f:d9:b1:7b:29:9e:76:
12:e9:d6:aa:a0:85:12:92:cf:8a:af:4f:09:af:4d:06:15:81:
cf:f0:58:a3:4a:9c:79:56:a0:ef:e1:61:8b:4c:84:c0:1f:67:
5b:d5:1d:d6:e5:98:c8:58:cf:57:60:c0:a0:22:31:85:d0:6b:
5a:03:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org