Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
File: 323830343a353264303a3a2f33322d3438203d3e20323638353433.roa (raw, json)
Hash identifier: DF0fxzsvgMk8HM/bUDfJhx2+gZfAoVjbKiGitUg7OZo=
Subject key identifier: 38:F7:FB:D1:E8:81:75:F7:C6:42:CF:82:6B:9A:06:44:EC:CB:C0:FC
Certificate issuer: /CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Certificate serial: 66351DC2FEA1C4F2AF1917F8A311B665FFAEAEA6
Authority key identifier: C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
Signing time: Fri 07 Jun 2024 19:35:22 +0000
ROA not before: Fri 07 Jun 2024 19:30:22 +0000
ROA not after: Fri 06 Jun 2025 19:35:22 +0000
asID: 268543
IP address blocks: 2804:52d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:35:1d:c2:fe:a1:c4:f2:af:19:17:f8:a3:11:b6:65:ff:ae:ae:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88
Validity
Not Before: Jun 7 19:30:22 2024 GMT
Not After : Jun 6 19:35:22 2025 GMT
Subject: CN=38F7FBD1E88175F7C642CF826B9A0644ECCBC0FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:5b:bf:c0:47:e1:81:21:11:e7:2b:97:8e:
a7:10:5b:a6:3c:9f:e5:ba:18:c6:55:33:62:35:e1:
4d:95:04:93:a5:14:61:c9:b4:b0:e9:15:68:d0:8b:
3c:a7:61:cd:a5:f6:e1:9e:ff:13:04:44:39:1c:2f:
9d:bd:6d:64:d4:0e:6b:2a:b4:01:ff:d5:ca:bd:e6:
c3:cb:3c:04:64:1b:90:04:1a:9e:cf:38:8a:16:ab:
65:2a:50:16:96:d8:42:14:44:52:58:1f:18:06:5b:
d0:e9:95:a3:d1:cc:b7:8d:4d:2d:f5:50:cf:48:a0:
75:b6:86:27:0a:a6:42:db:4f:eb:38:de:09:08:91:
58:6c:ae:22:51:64:da:74:f7:91:5b:28:d1:64:1c:
ac:3c:a3:a8:62:35:60:b6:55:c1:52:25:d3:50:0d:
2a:2c:44:32:82:b8:88:18:0e:67:af:95:ba:2e:ad:
04:79:ee:d9:d3:d2:a2:33:47:4d:33:43:50:58:69:
07:f0:d8:18:e3:5a:4c:70:b4:e7:9d:5e:c0:61:55:
47:7f:5e:1b:97:b4:44:f5:90:89:1d:5a:2c:3d:1b:
61:70:0c:25:a9:d7:17:99:20:bc:b5:77:0a:ec:c5:
e5:de:92:f9:57:d3:1e:e7:c6:24:16:a0:77:a0:a4:
e5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F7:FB:D1:E8:81:75:F7:C6:42:CF:82:6B:9A:06:44:EC:CB:C0:FC
X509v3 Authority Key Identifier:
keyid:C2:CB:7C:1A:52:E7:5C:0D:4B:39:4E:09:FC:63:EA:CF:FD:69:2D:88
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C2CB7C1A52E75C0D4B394E09FC63EACFFD692D88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8WthNsaptBsPEEe8aLfxHAyaSxAnnT9yuWegHSdHMVM/0/323830343a353264303a3a2f33322d3438203d3e20323638353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:52d0::/32
Signature Algorithm: sha256WithRSAEncryption
90:d1:8a:2a:43:df:57:fc:b9:20:3c:37:00:47:b2:2c:4c:57:
5a:27:67:fa:7c:cd:a5:3e:f2:99:67:31:1e:5c:78:28:e2:fd:
0e:cf:e3:4d:5a:70:61:d0:16:30:24:70:fe:5a:fb:87:74:23:
38:23:1b:55:8b:95:04:a2:34:91:95:e8:40:2d:6f:55:71:7c:
47:bb:b2:7e:d9:ca:a1:a3:d9:03:b2:a6:3a:b4:c8:7f:b4:56:
24:b1:61:71:5d:de:2c:38:c7:65:c6:73:49:93:ca:c3:6c:b5:
ce:e3:e6:8e:c1:aa:85:00:7a:89:cb:ad:cf:a6:54:e4:38:b2:
20:c7:c1:8d:77:cb:12:92:16:b4:3d:d7:82:5c:2c:d4:c8:c5:
84:f8:72:cd:6a:27:12:64:a0:b3:fc:40:62:a4:53:6a:14:5a:
8b:36:b6:9b:d5:a4:45:10:3e:e7:aa:1b:0d:bb:54:58:b4:5f:
c6:f5:c4:d1:e4:9a:9d:81:ab:ed:eb:2f:fa:7e:b8:e6:32:c1:
58:76:e2:11:18:b6:44:4a:f8:6e:f1:e8:ca:af:c2:52:b2:9b:
6e:75:3d:ca:90:97:8e:16:40:6c:bf:3c:c6:d6:76:5f:74:98:
b6:63:f6:23:11:5a:b6:69:02:a0:4a:7a:ee:f9:a5:23:cf:b5:
3e:43:7a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:46:04 2025 by rpki-client