Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
File: 323830313a38303a3a2f34382d3438203d3e203238363436.roa (raw, json)
Hash identifier: CyuwoawztGd4mci7Do8nk0GB00XxIqjpNOMzHMqbm1s=
Subject key identifier: 45:66:D0:77:9D:64:D8:6C:76:EE:F3:DE:68:D8:E6:8C:D9:FC:96:F0
Certificate issuer: /CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Certificate serial: 56B756DAA5A6FED0830AEE1E7B21ADBD8F3DCEE3
Authority key identifier: 8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
Signing time: Thu 04 Apr 2024 11:18:15 +0000
ROA not before: Thu 04 Apr 2024 11:13:15 +0000
ROA not after: Thu 03 Apr 2025 11:18:15 +0000
asID: 28646
IP address blocks: 2801:80::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:b7:56:da:a5:a6:fe:d0:83:0a:ee:1e:7b:21:ad:bd:8f:3d:ce:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D41CABF9128C1CBAC4BB641E77B86D13098BC6D
Validity
Not Before: Apr 4 11:13:15 2024 GMT
Not After : Apr 3 11:18:15 2025 GMT
Subject: CN=4566D0779D64D86C76EEF3DE68D8E68CD9FC96F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:0a:83:19:2c:37:4b:51:d6:20:d6:9a:7d:b6:
a6:55:6a:98:c5:a7:18:cb:3f:02:92:c8:f2:7d:b5:
c8:b7:38:af:65:2e:75:de:fa:12:71:95:51:7c:b9:
f7:73:76:80:af:f1:50:37:24:a6:17:13:c6:f9:ff:
74:5b:a5:6f:a5:4a:39:58:7b:80:2c:93:d8:fe:64:
b4:29:39:92:83:4f:d8:bd:1f:d6:7c:f7:0f:9d:db:
20:4c:07:cd:29:24:2e:23:3f:8e:85:24:60:2c:3a:
b7:5b:91:17:fe:41:b6:e1:b0:d0:17:73:d3:65:ef:
af:1b:1d:ee:b9:ef:a8:5e:16:b0:a8:6b:03:cf:bf:
0b:93:29:54:8f:a4:47:7d:45:d9:a7:5d:18:7b:44:
f2:a6:55:93:76:ba:0d:3e:2d:77:44:e9:27:b1:e5:
09:45:de:3b:a3:f1:6a:94:ab:46:23:eb:1d:67:91:
ad:5e:99:57:25:bb:51:28:4c:f0:6e:6a:ee:55:e0:
ef:55:7e:a9:45:d3:2e:85:78:f7:28:66:1e:00:f1:
6a:79:c8:8c:9e:07:11:c2:88:69:b6:cf:4c:6a:4f:
0b:af:21:f8:3d:20:2e:c5:2d:82:b3:13:43:53:b1:
ce:fc:a7:7a:44:1b:8e:a0:d3:01:f0:00:3e:eb:f8:
dd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:66:D0:77:9D:64:D8:6C:76:EE:F3:DE:68:D8:E6:8C:D9:FC:96:F0
X509v3 Authority Key Identifier:
keyid:8D:41:CA:BF:91:28:C1:CB:AC:4B:B6:41:E7:7B:86:D1:30:98:BC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8D41CABF9128C1CBAC4BB641E77B86D13098BC6D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91dsGTsxWCxPEGTQQuajNSa48R4vDE4MgVw5vBabgELx/1/323830313a38303a3a2f34382d3438203d3e203238363436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80::/48
Signature Algorithm: sha256WithRSAEncryption
6d:2c:5a:b2:e7:ad:8a:e0:e3:a3:d8:07:c7:d3:26:49:8c:4f:
78:8b:52:f9:48:c4:90:1f:87:8f:03:5d:2e:e9:3e:18:b5:9e:
73:7e:da:e9:c0:21:21:0d:77:fa:ec:a0:85:cf:aa:4a:9e:17:
e3:93:70:ac:4e:d6:1a:45:87:95:8d:17:9b:a9:6e:cd:72:88:
49:77:ca:26:67:11:49:be:ba:79:0c:1f:b5:d8:0f:74:a9:10:
80:1a:ea:2f:d0:12:ba:24:58:60:df:3b:87:94:44:3f:94:c9:
4d:23:56:46:24:d5:66:10:4c:51:f0:e2:89:c4:b2:e0:26:0e:
d4:6f:2d:e4:a8:94:b7:46:33:13:d3:0f:02:ce:08:1c:43:a8:
01:07:24:c6:26:5d:ce:b1:96:21:97:b9:ee:9b:ba:44:68:41:
a5:21:a6:08:42:ca:ae:42:fe:ac:74:7c:86:3f:6e:1c:04:5b:
b1:a4:40:e5:32:0c:d8:ae:a4:96:30:54:16:6e:55:5c:72:e7:
64:ca:4e:cc:58:5a:9f:a8:d5:a3:17:eb:2a:3e:25:f8:18:07:
62:f1:1f:c9:2f:85:4a:37:f2:ee:03:dc:7a:e4:65:bf:40:18:
2e:cc:46:c1:29:9b:d1:81:7d:c7:e7:af:c8:99:f1:d7:50:9e:
05:9a:d6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 18:16:15 2025 by rpki-client