Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
File: 323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa (raw, json)
Hash identifier: IZpGq/lK9FtMstTk3L4t3iWBaBjdWYGFNfSNNIxglEw=
Subject key identifier: CE:00:AB:D3:48:95:CB:4C:2D:FC:7F:65:1D:C4:4B:10:05:48:7E:00
Certificate issuer: /CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Certificate serial: 406E19A006D878CA45C2039ED8286B4DF6B7BB76
Authority key identifier: F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
Signing time: Sat 31 Aug 2024 14:14:50 +0000
ROA not before: Sat 31 Aug 2024 14:09:50 +0000
ROA not after: Sat 30 Aug 2025 14:14:50 +0000
asID: 268091
IP address blocks: 2804:57dc:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:6e:19:a0:06:d8:78:ca:45:c2:03:9e:d8:28:6b:4d:f6:b7:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F21D7B441CD17B27DF661753E8E60740AA5CDBFE
Validity
Not Before: Aug 31 14:09:50 2024 GMT
Not After : Aug 30 14:14:50 2025 GMT
Subject: CN=CE00ABD34895CB4C2DFC7F651DC44B1005487E00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:8a:8b:bd:64:e1:ab:c9:8e:79:fc:d5:68:
4f:2d:75:99:9c:f4:24:54:b9:35:f0:6d:a8:16:ff:
54:76:0b:d3:90:b2:0c:87:7a:87:3d:f2:fa:34:4f:
40:b2:3a:81:ae:bd:d8:d8:7b:c7:17:f1:ad:ca:55:
62:ab:89:1a:5d:87:b8:ea:9d:e5:5d:9f:3b:24:5d:
c9:54:2b:44:b1:76:01:17:49:3c:65:27:c9:a4:5e:
59:32:0c:26:95:63:7a:37:2f:d8:d0:d2:d9:29:7e:
fd:80:2d:9b:c6:8e:65:2b:e6:76:0d:17:f3:e7:72:
e1:d6:17:52:56:f1:a0:5d:ab:59:f0:1f:78:b1:e0:
96:b3:c1:b2:25:48:f0:a4:7a:2b:33:ab:94:68:5f:
a5:46:23:d3:4c:16:27:ad:74:ba:6c:ea:4f:58:d1:
94:04:91:8f:cd:d8:35:42:c5:16:78:15:d3:d6:a2:
2d:40:a1:55:f0:f7:49:ed:39:c8:a1:fe:4e:06:9d:
af:23:e7:19:8a:e0:3d:fa:97:7d:9b:ed:59:ed:1e:
03:bf:93:36:c8:70:bd:e7:e9:e7:c7:37:1d:46:03:
86:d0:c2:c7:fd:07:16:87:20:87:d5:e2:ab:8b:0d:
98:69:6e:40:fa:f5:eb:6a:41:7c:7e:ae:70:65:53:
d1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:00:AB:D3:48:95:CB:4C:2D:FC:7F:65:1D:C4:4B:10:05:48:7E:00
X509v3 Authority Key Identifier:
keyid:F2:1D:7B:44:1C:D1:7B:27:DF:66:17:53:E8:E6:07:40:AA:5C:DB:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F21D7B441CD17B27DF661753E8E60740AA5CDBFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a383030303a3a2f33342d3334203d3e20323638303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57dc:8000::/34
Signature Algorithm: sha256WithRSAEncryption
38:a0:ee:bc:5e:a9:40:51:e3:09:84:26:85:bf:2e:6e:3d:76:
f7:fd:12:4b:55:34:7c:2e:69:ac:33:bc:24:b9:1d:c4:4e:db:
7a:47:7d:81:5d:e5:ea:02:25:82:5e:0d:d0:ec:9d:fb:12:5e:
da:1a:c5:32:1d:18:b5:19:30:d9:27:b0:b1:56:9a:ba:44:ec:
fe:02:ab:a9:a5:1b:8a:d0:2a:3d:b6:11:d3:e3:94:fb:20:82:
7b:34:0e:a8:a0:02:f3:a1:57:9f:9d:a7:0c:e9:88:c0:7a:0b:
33:c9:74:fc:8a:37:d3:ce:5a:b2:2c:8a:b3:1a:28:45:1f:f3:
f4:38:2b:b3:85:e0:6f:e2:85:6d:66:a9:ca:c1:32:92:cb:25:
23:9b:bb:a7:fe:fd:e7:9f:2f:9b:0f:6d:99:45:cb:d9:ed:eb:
85:76:93:00:ec:1a:f9:80:94:94:07:4e:a3:93:19:c9:46:25:
6b:86:51:03:1b:4f:4a:30:2d:10:c3:51:8c:ba:2f:f4:58:6f:
3e:54:7e:16:45:aa:7f:7e:26:e6:84:4e:48:8d:24:51:85:16:
35:0d:bf:88:4a:ae:6d:ae:cf:68:68:22:de:87:bd:72:b6:e9:
5f:af:ee:0b:08:69:48:b9:7f:6f:da:c1:96:14:b7:d8:d3:5f:
20:8b:df:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:10:24 2025 by rpki-client