Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
File: 323830343a346262343a3a2f33322d3334203d3e20323637333235.roa (raw, json)
Hash identifier: KdVBtc1T1OrBVwX/deREgpL1MShi3ULKs2keQusjsXg=
Subject key identifier: DD:56:4E:4C:4C:BA:3B:79:42:FC:E4:31:92:1D:79:85:80:C8:49:8E
Certificate issuer: /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial: 623DE0559F6A8B5679C521FD8198E6D249A333C2
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
Signing time: Fri 23 Feb 2024 12:30:34 +0000
ROA not before: Fri 23 Feb 2024 12:25:34 +0000
ROA not after: Fri 21 Feb 2025 12:30:34 +0000
asID: 267325
IP address blocks: 2804:4bb4::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:3d:e0:55:9f:6a:8b:56:79:c5:21:fd:81:98:e6:d2:49:a3:33:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Validity
Not Before: Feb 23 12:25:34 2024 GMT
Not After : Feb 21 12:30:34 2025 GMT
Subject: CN=DD564E4C4CBA3B7942FCE431921D798580C8498E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c7:c7:42:82:dd:1a:c0:d3:e1:1d:05:0f:51:
5d:a2:3e:33:76:ec:ae:13:e1:3c:28:b1:9b:d0:ed:
b1:70:73:18:0c:2d:b4:1d:2d:db:17:53:ea:5a:15:
30:5d:77:15:70:88:ab:1f:46:eb:db:29:68:9b:0a:
93:00:32:6a:f8:98:3b:c7:20:13:11:ea:7d:c5:ed:
8d:09:0c:56:05:af:38:72:11:73:93:ba:e3:cb:01:
32:11:47:41:10:6c:17:bf:a7:36:c3:02:fa:80:20:
64:3b:7e:a6:bc:af:b6:1a:19:9f:ff:a2:bb:93:af:
a3:c6:82:a8:c2:9c:d7:d2:41:03:76:19:0c:34:f4:
b8:1d:c8:b3:56:e0:84:12:8b:86:ca:27:16:b3:8e:
0b:5c:c4:9d:cc:47:74:9b:23:ff:75:3a:ed:a8:32:
c9:00:c4:dd:5c:44:a5:07:73:0a:00:aa:ce:c1:6f:
1e:99:28:d0:74:56:1f:ad:02:b8:6a:33:57:f5:a1:
09:9f:fd:df:ae:74:89:a1:ac:45:40:35:85:cc:fd:
51:1b:52:43:5c:3a:ef:a2:41:6d:aa:22:80:31:91:
b3:46:7c:79:a0:05:68:36:d7:88:6b:9d:ad:86:82:
df:02:95:b8:9e:08:0a:1e:67:6e:e7:17:af:73:a3:
01:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:4E:4C:4C:BA:3B:79:42:FC:E4:31:92:1D:79:85:80:C8:49:8E
X509v3 Authority Key Identifier:
keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3a2f33322d3334203d3e20323637333235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bb4::/32
Signature Algorithm: sha256WithRSAEncryption
0d:2f:d6:34:32:dd:20:01:92:1b:5d:1d:a8:6e:6d:c8:8d:09:
f2:00:7e:a5:0c:69:ff:ac:9d:ef:19:d0:8d:c8:fa:32:08:92:
d4:50:44:0e:8e:bf:de:cb:b8:7a:71:e9:df:ea:1c:a3:07:bc:
7f:3c:1d:ac:02:36:fe:20:e1:1b:77:93:54:01:73:cc:54:b6:
82:22:94:c1:c4:41:fd:92:c4:b9:de:3c:3c:fe:82:ea:19:92:
4e:c2:68:64:49:75:99:c1:1a:e3:50:1f:d6:b6:5a:7b:0d:d8:
0c:8e:e5:b9:9c:d3:d4:e9:b1:d6:cb:c3:5a:a7:be:4b:64:b5:
8f:9d:dd:b5:40:98:18:2c:94:f0:4d:c7:e4:8b:84:c0:06:ba:
28:e7:c0:e0:b7:50:e5:a7:82:8f:dd:44:20:96:22:4a:4b:89:
e7:c8:75:91:7a:9e:ba:94:5b:33:33:34:85:46:27:01:c3:b5:
6a:9f:00:50:14:4e:f0:c3:4a:fe:4e:3b:ce:a9:d9:f7:25:51:
f8:ce:20:6a:ef:8b:06:58:89:94:07:5b:0b:03:07:5d:1c:8e:
2f:73:9a:6f:ce:ef:93:a4:8f:d8:ac:9f:ec:ff:5a:af:b4:76:
95:9d:03:d6:93:5c:98:d4:6d:d7:a7:df:ad:0a:a0:0f:3a:8e:
19:54:01:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:39 2025 by rpki-client