Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3334203d3e20323638383431.roa
File: 323830343a356236383a3a2f33322d3334203d3e20323638383431.roa (raw, json)
Hash identifier: td0kO296pNaSEDnuq9XDELniVdD//t6CbaRogjNfwxs=
Subject key identifier: 11:D7:68:45:1A:D7:A8:F6:FB:57:74:A5:12:06:52:0F:28:B1:11:B3
Certificate issuer: /CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Certificate serial: 170DFBB6A6D346FBE9B209F69D85FDA62AADEDC1
Authority key identifier: 5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3334203d3e20323638383431.roa
Signing time: Thu 21 Nov 2024 21:38:47 +0000
ROA not before: Thu 21 Nov 2024 21:33:47 +0000
ROA not after: Thu 20 Nov 2025 21:38:47 +0000
asID: 268841
IP address blocks: 2804:5b68::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:0d:fb:b6:a6:d3:46:fb:e9:b2:09:f6:9d:85:fd:a6:2a:ad:ed:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F52636F24AE680A3F696ED6FDCFB30574D5A7FC
Validity
Not Before: Nov 21 21:33:47 2024 GMT
Not After : Nov 20 21:38:47 2025 GMT
Subject: CN=11D768451AD7A8F6FB5774A51206520F28B111B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b8:84:6d:eb:b9:f7:9d:5e:0b:3b:69:64:a7:
72:a1:a1:1d:06:6e:86:bf:d7:c0:33:0a:96:b7:91:
9e:35:aa:63:73:d2:52:31:9d:5e:53:94:c1:23:26:
6e:f7:b2:67:18:4f:a2:d4:31:dc:c7:51:d2:74:39:
79:93:c9:f3:b1:c0:a7:b1:41:3c:d1:94:9b:37:c7:
62:9a:35:7b:54:36:0f:eb:51:98:c1:c0:82:c8:6e:
c6:46:4f:37:c3:da:a5:ca:8c:35:e0:28:e9:27:7f:
a5:af:b9:50:0a:8c:ff:73:3f:1f:3a:ef:c9:88:c9:
ae:18:7d:a4:91:3c:c1:bf:a1:94:65:53:28:b3:45:
05:53:f1:70:8f:31:09:e5:e7:4b:e9:71:d8:9e:a1:
b1:a5:ed:46:36:5b:a6:f7:40:a0:78:3d:ef:0e:18:
1a:48:07:f5:03:2d:87:b5:56:4f:10:ca:75:51:a1:
8f:ec:b3:b3:60:a0:52:4e:9d:ef:ea:fe:03:f8:c7:
60:3e:76:28:44:6b:7f:63:9d:60:40:2e:54:b7:e5:
55:31:0a:fa:63:f5:1f:86:56:62:f9:ec:dc:43:36:
09:a3:66:cb:b4:41:a8:01:f2:96:3d:15:42:60:4b:
fc:d8:6b:eb:e3:38:46:88:c3:1d:10:4d:b8:9e:e4:
be:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:D7:68:45:1A:D7:A8:F6:FB:57:74:A5:12:06:52:0F:28:B1:11:B3
X509v3 Authority Key Identifier:
keyid:5F:52:63:6F:24:AE:68:0A:3F:69:6E:D6:FD:CF:B3:05:74:D5:A7:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5F52636F24AE680A3F696ED6FDCFB30574D5A7FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/MQ7aXgokNCgsxUj5SdjhVgCWhmV8Gs9fAm63LKC8JGF/0/323830343a356236383a3a2f33322d3334203d3e20323638383431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b68::/32
Signature Algorithm: sha256WithRSAEncryption
80:1c:34:fa:13:46:54:1b:dd:a4:42:03:43:67:67:b0:e0:48:
e4:90:4f:ef:5c:1c:e7:ce:83:3c:b5:e0:23:d8:84:2e:24:2f:
ab:d0:96:48:7a:b1:50:4b:42:af:3d:02:0b:e7:ce:ac:06:75:
29:93:cd:5b:c8:51:0e:ad:ae:38:60:60:87:f0:1a:c8:4e:25:
df:4a:f3:c0:8a:71:7a:54:e2:91:b2:f2:bf:3a:68:46:38:a6:
0c:df:d7:d0:7d:ec:c6:8e:7a:5b:21:5c:14:14:ac:ea:af:a5:
5a:84:79:da:39:7f:96:d1:05:8a:b7:d7:2b:1b:d6:27:66:ce:
26:12:4f:82:1f:1a:65:53:c4:2a:91:3e:bf:8c:0b:93:56:bb:
81:ac:81:77:55:42:58:58:1e:74:1b:b3:71:1c:51:8d:b2:91:
90:4a:f9:73:2a:fc:b5:42:04:d7:7c:91:b3:6f:82:3d:77:89:
bc:2d:ef:84:a6:d0:6d:60:e2:e3:2f:5c:a1:46:f6:02:6c:db:
3c:6b:88:3e:c1:ce:7f:26:87:bc:c0:d3:87:ab:b2:74:d5:8e:
1f:1e:75:b3:00:14:a6:7e:fa:ae:36:2e:bc:ed:29:86:47:c9:
76:81:d8:a8:45:88:b5:ae:7c:75:e5:df:e0:5a:d3:ce:fb:80:
a8:38:eb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:28:35 2025 by rpki-client