Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
File: 323830343a376335343a3a2f33322d3438203d3e20323731343839.roa (raw, json)
Hash identifier: BiL8oUgvucHA0y1W6seoe7Un1Nj33ESDTNcJy8kJKu4=
Subject key identifier: 02:27:C2:2C:49:16:20:63:B5:C2:68:3A:31:BA:53:F4:6D:48:81:8C
Certificate issuer: /CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F
Certificate serial: 0A1E1EBB794EC4E2A9E243E649BF055B3F04EC8E
Authority key identifier: DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
Signing time: Wed 03 Apr 2024 18:30:12 +0000
ROA not before: Wed 03 Apr 2024 18:25:12 +0000
ROA not after: Wed 02 Apr 2025 18:30:12 +0000
asID: 271489
IP address blocks: 2804:7c54::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:1e:1e:bb:79:4e:c4:e2:a9:e2:43:e6:49:bf:05:5b:3f:04:ec:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F
Validity
Not Before: Apr 3 18:25:12 2024 GMT
Not After : Apr 2 18:30:12 2025 GMT
Subject: CN=0227C22C49162063B5C2683A31BA53F46D48818C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:36:56:39:ca:bc:43:2f:2a:50:15:c0:1e:2d:
12:01:ae:41:de:0c:8a:fd:68:4c:9b:83:29:94:d1:
3e:6d:dd:a0:61:61:d6:2c:1e:47:4f:96:4e:c1:6e:
be:07:0b:99:c4:92:35:26:3f:ab:99:53:da:65:0d:
b7:46:06:c0:f3:06:a9:d9:5f:a7:19:d5:f1:08:2a:
01:fa:92:de:d8:d2:70:4c:e8:46:3b:c6:f2:ed:e9:
4e:83:85:7b:67:36:1b:e8:73:81:d8:e4:7f:fe:e1:
05:e8:95:22:aa:d8:a1:59:ad:94:e0:13:9a:77:1b:
79:c5:0e:ee:bc:57:96:6b:85:9a:5b:a4:02:3b:cb:
dd:d1:f7:f4:11:69:70:b2:4d:b7:c2:77:78:2e:6c:
a3:c6:f0:47:86:85:90:75:3e:81:10:3c:70:0c:8e:
c7:fd:a0:ea:8e:ff:83:fa:7d:e9:9b:75:62:38:00:
bd:bf:e0:f6:fa:e9:7a:e2:a6:ab:72:50:df:03:e8:
12:9d:3b:47:40:9c:5d:9e:fa:e5:83:64:4e:5c:d3:
e9:8d:d9:54:17:55:3d:4e:d3:d3:72:37:40:8f:b2:
d1:c1:d7:0b:13:a4:26:0c:3b:18:76:c4:4b:18:0a:
25:50:56:18:6e:9f:56:da:fa:ee:aa:13:48:bd:a0:
5c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:27:C2:2C:49:16:20:63:B5:C2:68:3A:31:BA:53:F4:6D:48:81:8C
X509v3 Authority Key Identifier:
keyid:DC:D7:A1:AD:D4:DE:BD:23:B1:C5:FA:D5:E6:0B:C2:69:D2:AD:10:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCD7A1ADD4DEBD23B1C5FAD5E60BC269D2AD100F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3sHkDgcrhfqA53N7opJ2rnPF5cPFuByv223i6QgxrnvZ/1/323830343a376335343a3a2f33322d3438203d3e20323731343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c54::/32
Signature Algorithm: sha256WithRSAEncryption
23:10:26:e3:6a:86:75:75:8a:56:bd:ec:dc:aa:b3:20:fd:4b:
4b:5e:6c:75:cb:e8:49:5c:48:99:43:a4:dc:2b:3c:2a:8c:b5:
23:b0:ef:b5:81:16:e6:a0:27:eb:66:90:9a:06:8f:fd:72:e9:
a9:f6:f5:7e:3a:3d:de:5a:9c:19:9c:3f:c6:38:5c:b9:50:f6:
52:62:64:bf:d3:57:1f:b3:9f:8a:a6:d8:c7:b3:77:5b:1c:07:
09:5f:c9:ca:f3:0e:44:1e:dc:e6:d9:2d:65:5e:42:bd:ed:3a:
d3:92:b5:93:41:93:8a:41:b0:a0:a4:f5:a4:3a:d9:8c:39:70:
74:22:ea:f7:57:8c:54:46:19:21:4b:60:ba:49:6e:5c:79:93:
62:ed:33:f2:e3:ab:c9:1b:08:7e:85:08:b2:6e:70:6b:5a:25:
ef:a4:a5:95:91:e5:d8:b6:f3:22:74:83:19:d0:82:26:26:f7:
b3:49:e2:bb:f5:2f:d0:d0:56:54:c0:96:1c:bd:bd:2d:5a:55:
0c:eb:3a:d0:3d:48:d7:5a:55:01:6a:72:05:99:86:d3:d1:e3:
33:fb:82:87:7c:47:72:80:5b:87:45:cd:e0:39:00:77:30:e6:
37:f5:a7:d0:f7:29:f2:41:ce:49:9a:24:de:97:12:ff:a8:80:
3e:c0:5f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:47:44 2025 by rpki-client