Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
File: 323830343a6666343a3a2f33322d313238203d3e203533323138.roa (raw, json)
Hash identifier: tnq1vBxIcrDoZjcoVFNhre3fHKZMaMm8oRp5pwoZIL4=
Subject key identifier: 0C:44:E4:77:4B:09:DA:40:39:09:99:A6:85:FE:7D:5D:07:AE:AA:5D
Certificate issuer: /CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Certificate serial: 38CDA9D1EB31E6167A046FD3870793FB1F98E48E
Authority key identifier: 29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
Signing time: Mon 16 Sep 2024 19:21:51 +0000
ROA not before: Mon 16 Sep 2024 19:16:51 +0000
ROA not after: Mon 15 Sep 2025 19:21:51 +0000
asID: 53218
IP address blocks: 2804:ff4::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cd:a9:d1:eb:31:e6:16:7a:04:6f:d3:87:07:93:fb:1f:98:e4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2942F22000F3A7315703CF3B13100D76386FCAD1
Validity
Not Before: Sep 16 19:16:51 2024 GMT
Not After : Sep 15 19:21:51 2025 GMT
Subject: CN=0C44E4774B09DA40390999A685FE7D5D07AEAA5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:25:85:a4:6f:b2:17:cf:ae:9b:3a:2b:cd:12:
d1:5c:07:59:c0:34:d6:37:90:3e:94:10:17:7d:61:
f0:19:74:68:ae:2a:df:e3:c4:6a:42:18:9e:08:64:
b1:67:f4:51:23:2e:10:5b:49:ff:bd:9e:91:b8:86:
6b:ed:24:82:0b:12:5a:8e:f4:b2:a9:c1:f8:ad:4d:
93:3b:0e:2d:75:18:34:d4:84:4b:07:3a:34:54:1a:
4f:dd:e6:f4:dd:8c:21:f9:ae:86:4e:5d:58:b8:e7:
a0:b4:ac:c8:f7:f6:c3:02:a2:b1:7c:72:2d:0f:ff:
b1:31:65:35:e7:15:79:2c:f5:79:fd:4f:96:a1:f7:
a1:57:be:00:fe:cd:57:8b:02:42:45:62:5a:e5:74:
27:16:e4:6a:39:98:c1:e9:f4:ec:c6:da:06:14:8c:
14:a0:93:4c:2d:b6:95:dc:a8:7f:b0:ed:03:b2:5c:
ef:f4:0b:9d:b7:99:c4:3f:e5:22:1a:8a:b2:a8:4c:
f2:03:8c:1b:6b:36:d4:ca:7c:90:8c:4a:77:ff:c5:
35:00:97:a3:40:4e:28:1c:07:75:e1:99:d1:40:04:
e7:82:27:8b:94:6c:66:91:f8:22:30:ae:8a:60:1f:
47:db:74:22:80:91:11:67:0c:d3:ea:d9:a3:8c:38:
cd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:44:E4:77:4B:09:DA:40:39:09:99:A6:85:FE:7D:5D:07:AE:AA:5D
X509v3 Authority Key Identifier:
keyid:29:42:F2:20:00:F3:A7:31:57:03:CF:3B:13:10:0D:76:38:6F:CA:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/2942F22000F3A7315703CF3B13100D76386FCAD1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2942F22000F3A7315703CF3B13100D76386FCAD1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Y9hYbgko8AXFAbo6TR23XtUuACQwG86U4gdSJY3xUgx/0/323830343a6666343a3a2f33322d313238203d3e203533323138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ff4::/32
Signature Algorithm: sha256WithRSAEncryption
86:7f:50:20:56:37:4f:b4:47:56:b5:52:32:98:49:ca:7d:ef:
b4:07:78:95:8e:a9:9f:a2:68:78:69:2f:ed:0d:80:f4:9f:92:
56:db:20:9c:0a:27:3c:dd:6d:ea:22:ac:e5:71:04:97:66:13:
c0:d3:a0:ad:0d:7a:7c:e4:45:63:49:a0:db:0e:33:d6:91:5c:
17:e9:dd:d0:db:9e:c6:ba:75:a1:e8:04:d5:c9:d1:be:c2:1f:
1f:60:3c:27:67:ea:60:67:c4:7d:1e:21:23:96:ab:d7:41:51:
d9:af:b8:23:12:f5:be:6a:0a:8f:86:61:f8:89:48:be:eb:2e:
d2:df:b2:ab:76:04:bf:e6:46:8e:6c:b9:d4:0c:f3:bf:38:92:
08:b4:4c:e5:24:db:ad:1c:be:71:cd:8e:a8:00:f0:24:d7:c4:
2a:52:cd:c5:3e:fa:cf:f5:94:d3:da:5b:f4:3e:56:27:66:3b:
78:0a:f9:96:ce:81:14:9d:5b:fd:25:f3:89:ea:5a:07:4b:b8:
45:7a:f5:5e:74:c4:6b:ab:39:b3:71:11:ca:17:70:16:86:51:
5b:10:0f:a8:b9:ee:0a:08:5d:ba:45:6e:67:e5:ec:cf:62:db:
53:f6:fd:6c:d6:94:2c:c4:14:0d:5b:ab:95:39:9a:68:40:bc:
d3:86:2e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:34 2025 by rpki-client