Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/323830343a353364303a3a2f33322d3332203d3e20323638363038.roa
File: 323830343a353364303a3a2f33322d3332203d3e20323638363038.roa (raw, json)
Hash identifier: 3XldVA95u1DXoM+cXO2M1A+SYLzzJUr9zZV5ENWR/SQ=
Subject key identifier: 45:09:52:81:FE:03:19:69:59:02:AC:52:99:FA:A7:9A:B9:2E:7A:CC
Certificate issuer: /CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
Certificate serial: 13DE4D22AED65453EF6920EC04FA409F13BF063E
Authority key identifier: DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer
Subject info access: rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/323830343a353364303a3a2f33322d3332203d3e20323638363038.roa
Signing time: Mon 31 Jan 2022 19:30:49 +0000
ROA not before: Mon 31 Jan 2022 19:25:49 +0000
ROA not after: Mon 30 Jan 2023 19:30:49 +0000
asID: 268608
IP address blocks: 2804:53d0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:de:4d:22:ae:d6:54:53:ef:69:20:ec:04:fa:40:9f:13:bf:06:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249
Validity
Not Before: Jan 31 19:25:49 2022 GMT
Not After : Jan 30 19:30:49 2023 GMT
Subject: CN=45095281FE0319695902AC5299FAA79AB92E7ACC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:dd:55:15:4a:c5:01:a4:92:a8:2b:93:2e:
7e:3e:fb:c6:fe:bc:54:65:81:a9:c7:71:4d:f1:41:
43:22:c6:f4:62:ec:f8:8b:13:89:32:43:30:18:67:
a0:40:53:74:62:5a:41:a2:93:6a:c6:f8:c5:8d:52:
b1:33:26:de:42:48:6e:b0:d0:c3:47:69:8d:5d:44:
0a:35:3d:5e:4c:02:6b:3a:ef:a2:d9:e3:41:41:ee:
4c:0d:2f:db:40:38:84:a4:05:e9:e9:e4:d8:22:22:
8c:84:a4:5a:db:ae:bf:42:18:6a:36:e0:a7:69:66:
b1:c5:a1:f4:51:30:17:f8:08:96:51:f3:5e:5f:38:
40:32:89:54:fc:75:6c:cb:93:b5:e9:e8:10:0c:9e:
29:c2:c8:23:cc:cd:51:76:77:f6:cb:3b:56:dc:05:
c6:29:67:6c:26:ad:1a:d9:a9:d2:3f:ee:a6:7d:1f:
0e:c6:47:cf:8f:0e:71:ad:f4:d3:ba:c6:47:bc:a6:
44:d1:ed:03:2d:dd:14:1e:a8:02:f6:9a:bd:c2:11:
3a:19:da:64:13:40:47:7a:af:6e:ad:99:a2:62:3f:
73:63:1a:20:50:ea:3a:a7:6e:30:c7:ff:46:50:80:
9a:04:2c:3d:d9:53:b3:0e:e9:0b:49:8b:9b:31:33:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:09:52:81:FE:03:19:69:59:02:AC:52:99:FA:A7:9A:B9:2E:7A:CC
X509v3 Authority Key Identifier:
keyid:DE:5D:38:FB:58:25:9E:39:64:BD:75:DF:E7:AF:1B:1A:B4:C2:02:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE5D38FB58259E3964BD75DFE7AF1B1AB4C20249.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/JDN8FMo6BVUyHYrBriie665rpbonCaBkYafBCtvWNrUu/0/323830343a353364303a3a2f33322d3332203d3e20323638363038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:53d0::/32
Signature Algorithm: sha256WithRSAEncryption
48:61:ab:8f:e1:6f:66:91:58:cf:50:93:d7:e8:a4:76:5a:3b:
66:d4:9a:99:9c:1d:40:59:1c:a1:66:b7:8f:83:79:d1:7c:ea:
e1:ff:7e:de:e7:a6:63:e0:9b:88:8c:d7:18:4b:20:57:e3:94:
20:c6:a4:93:c4:95:dc:30:39:ca:09:e6:dd:49:75:94:27:d8:
68:08:e3:81:5b:36:de:16:0e:a5:f0:87:df:fe:f5:9b:91:e4:
5b:1c:f2:ed:7f:f3:b2:47:ae:5e:17:90:a4:91:26:9a:47:8e:
44:fe:e5:d8:b2:6b:ae:87:84:35:7f:84:22:99:36:74:71:af:
87:1e:10:dc:a4:89:3b:8e:00:77:83:10:12:71:28:8e:54:4b:
78:88:88:12:76:44:3d:72:a3:55:5e:f4:c1:9e:2a:02:c7:59:
70:4c:2e:8f:b5:a9:ad:89:0b:fb:2c:74:78:0d:a9:9f:55:0c:
ab:69:02:e5:19:4c:46:6b:d7:1e:65:a4:52:df:83:77:69:09:
08:45:00:b5:8e:15:9d:4d:f0:3a:ce:d0:10:10:71:b4:62:21:
16:1e:7b:a0:f9:c4:0b:22:ad:d1:0b:8b:4d:bd:03:45:e6:23:
db:80:c8:11:14:81:a9:44:8f:6b:9d:7c:27:00:38:61:b3:6e:
78:7c:3c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:31:26 2025 by rpki-client