Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
File: 323830343a323134343a3a2f33322d3438203d3e203532373935.roa (raw, json)
Hash identifier: qlDiWy5KR88GkRRNziG9p8oAQxt3Wmh8iJHelB126rU=
Subject key identifier: F3:A7:B6:80:AC:89:F6:E2:31:E2:ED:A4:C2:74:5C:41:60:09:AA:21
Certificate issuer: /CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
Certificate serial: 057ECE84D7BAA00FE10EE367A89A0C279E1A3867
Authority key identifier: 2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
Signing time: Fri 05 Apr 2024 14:20:12 +0000
ROA not before: Fri 05 Apr 2024 14:15:12 +0000
ROA not after: Fri 04 Apr 2025 14:20:12 +0000
asID: 52795
IP address blocks: 2804:2144::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:7e:ce:84:d7:ba:a0:0f:e1:0e:e3:67:a8:9a:0c:27:9e:1a:38:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0
Validity
Not Before: Apr 5 14:15:12 2024 GMT
Not After : Apr 4 14:20:12 2025 GMT
Subject: CN=F3A7B680AC89F6E231E2EDA4C2745C416009AA21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:13:2b:8e:a4:d2:2c:d4:be:8e:34:a4:56:
09:43:f6:db:8e:7a:16:19:2c:00:33:e7:57:bf:fa:
e7:24:a5:68:ab:f2:28:7c:6d:92:a5:6c:54:9d:c8:
73:d0:ce:e4:b4:fe:78:f1:bc:41:97:0c:a9:88:f3:
0d:29:a0:b5:9e:cb:b9:ca:ce:49:f3:0f:9a:73:7c:
98:89:f1:52:72:8a:35:4a:bb:24:33:21:a5:02:39:
2c:57:13:cd:8c:ca:74:29:b9:6d:b0:e4:a7:b0:46:
20:1c:3d:88:d2:03:f5:38:e3:9a:38:52:d1:f9:9a:
ac:9b:d3:68:1a:a0:f1:aa:61:27:d5:76:1f:11:99:
f0:6f:98:dc:0c:f0:32:33:32:91:9f:ce:fa:e2:e2:
90:2f:64:21:9d:d0:4d:89:48:c4:ee:c2:6b:3c:44:
41:cc:95:e6:13:d1:0c:dc:3c:58:51:bd:9f:d3:f7:
5e:b7:7b:fe:11:5b:75:ca:e7:f3:8a:89:a8:51:ff:
51:f2:84:6b:35:68:96:0b:02:7e:57:b6:7e:7e:10:
7f:4b:62:d4:d1:e4:38:3b:de:ab:cb:74:c0:d3:99:
e5:87:6e:cb:2c:7c:89:8b:b8:ed:27:5b:32:fb:72:
62:c2:e5:c5:6e:3c:d7:20:4b:8c:8e:c6:44:66:14:
94:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A7:B6:80:AC:89:F6:E2:31:E2:ED:A4:C2:74:5C:41:60:09:AA:21
X509v3 Authority Key Identifier:
keyid:2E:EE:5B:E5:B1:D7:2F:B8:B9:DF:F2:65:FC:5A:82:E8:D4:74:0A:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2EEE5BE5B1D72FB8B9DFF265FC5A82E8D4740AA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Vtbkx4KTL9qNX6oFjGE7Fx5XWpgwMbprPr58JBnHRGd/2/323830343a323134343a3a2f33322d3438203d3e203532373935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2144::/32
Signature Algorithm: sha256WithRSAEncryption
87:f4:e8:37:70:56:9e:bc:5e:e9:39:bc:a7:a0:40:fc:9e:7f:
04:b4:f3:a9:da:49:7e:f3:e3:48:c3:62:b3:0b:6d:a3:d9:21:
f0:8c:a5:32:3b:36:00:0e:7b:ec:d6:a0:53:13:1c:81:f3:0b:
e2:65:34:13:f7:76:f4:25:7b:28:52:a0:58:2a:e1:87:1d:18:
48:c7:c8:70:df:b1:9a:ca:9e:4c:fe:93:b8:5d:23:ca:ff:f4:
8a:3f:9f:c5:10:5e:f4:56:ab:9b:3c:46:d2:99:b4:2b:f7:0b:
33:a1:50:12:72:32:be:1e:03:13:5d:a1:ed:5d:1f:54:a7:7c:
04:d8:56:ca:1d:08:04:5b:14:8b:4f:42:5f:8c:1d:7e:66:4d:
41:37:25:07:5d:39:f9:87:19:dd:a9:64:b6:3c:4a:91:de:f5:
87:9b:e6:81:4b:a6:5d:1f:e2:0b:16:4a:5a:d6:cf:e6:bb:c5:
b3:67:b4:0f:9d:2d:59:ff:4d:18:dc:e7:6c:44:49:a6:02:79:
ce:fd:83:94:1a:31:a8:5b:b8:a3:04:b1:6f:c4:c2:7f:59:33:
c6:f5:47:21:a6:31:c7:61:24:2c:73:04:4f:52:b7:06:db:46:
9c:fd:88:ab:30:9f:d3:33:97:c5:64:e9:60:b6:fa:93:bc:45:
63:81:95:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:52:21 2025 by rpki-client