Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa
File: 323830343a333539343a3a2f33322d3438203d3e203238323430.roa (raw, json)
Hash identifier: DXJFs/cJ1nzEUvi/+9Crd7keA8fzyg/I8BisM0k95xs=
Subject key identifier: 81:0B:06:30:B9:51:38:6D:88:AC:37:AB:BB:8E:7C:D8:CB:9E:39:2E
Certificate issuer: /CN=5B97AFF236F65B7267ED145B798C19E124850546
Certificate serial: 321F39A3D26C14EBD1FF9F20EE8130D630BB40E4
Authority key identifier: 5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject info access: rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa
Signing time: Thu 04 Apr 2024 08:54:32 +0000
ROA not before: Thu 04 Apr 2024 08:49:32 +0000
ROA not after: Thu 03 Apr 2025 08:54:32 +0000
asID: 28240
IP address blocks: 2804:3594::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:1f:39:a3:d2:6c:14:eb:d1:ff:9f:20:ee:81:30:d6:30:bb:40:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5B97AFF236F65B7267ED145B798C19E124850546
Validity
Not Before: Apr 4 08:49:32 2024 GMT
Not After : Apr 3 08:54:32 2025 GMT
Subject: CN=810B0630B951386D88AC37ABBB8E7CD8CB9E392E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:29:38:52:1c:b0:0e:3d:dc:bd:60:87:86:
2e:b3:b1:e7:f0:8d:90:3e:53:82:a1:ef:e7:a1:a5:
1c:87:ce:52:cc:06:39:e9:dd:1f:bf:b6:64:0b:60:
61:20:fd:a1:a5:dd:c6:a4:6e:ad:b7:76:64:bd:c4:
ad:22:6b:72:59:8f:d5:1c:c8:b1:da:f8:ab:89:1b:
35:8b:9e:fd:71:6f:74:88:88:4c:bc:1b:30:b0:67:
94:d2:a2:68:99:58:e9:d2:14:b1:3a:3f:54:da:d5:
66:b1:bf:ce:71:a4:62:e8:00:5d:9c:45:37:57:0a:
61:4b:de:f6:8f:2b:a2:d9:f6:d8:9f:5e:5f:ea:cd:
76:d1:5d:b7:38:68:b6:16:c4:7b:8f:b9:95:5c:fb:
ca:77:12:56:31:2a:09:70:eb:73:77:ae:b0:89:61:
96:e5:20:8e:47:ad:0c:b6:94:02:46:72:ad:80:a6:
4d:7e:9b:65:41:f8:71:12:70:46:89:02:65:23:35:
e9:c2:9c:5f:32:1e:19:c7:34:92:78:3c:26:35:20:
1f:a2:29:03:66:70:7e:e5:2e:9a:92:cc:c9:ca:6b:
f4:56:e3:68:12:f3:72:3f:01:34:9b:c5:f8:cb:7f:
5e:87:58:0a:d7:a3:58:30:b8:b5:f0:80:d6:3f:a8:
8a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0B:06:30:B9:51:38:6D:88:AC:37:AB:BB:8E:7C:D8:CB:9E:39:2E
X509v3 Authority Key Identifier:
keyid:5B:97:AF:F2:36:F6:5B:72:67:ED:14:5B:79:8C:19:E1:24:85:05:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/5B97AFF236F65B7267ED145B798C19E124850546.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5B97AFF236F65B7267ED145B798C19E124850546.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/99Rs86z81nZmWHEE7zDehAznS7BqKbTu1TpyXgCoeYss/1/323830343a333539343a3a2f33322d3438203d3e203238323430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3594::/32
Signature Algorithm: sha256WithRSAEncryption
85:b3:af:2b:d0:60:d9:b0:e5:04:b1:21:4c:2c:69:d9:5d:b2:
c1:c1:fb:15:ef:77:16:4e:a8:43:85:8b:1b:7a:cf:b9:c7:23:
e3:8e:63:6b:e1:de:c5:1b:ec:d4:bc:b0:4a:5f:63:4d:53:fa:
88:4f:89:b3:79:39:e2:1f:ab:c4:5f:ab:53:68:7a:14:bb:fa:
79:9a:6a:19:6f:17:18:a9:29:c1:82:f2:71:77:84:99:2e:20:
e2:d4:75:03:67:aa:42:89:cc:f1:22:c0:9b:72:e5:8d:36:dc:
d0:0b:23:eb:7b:97:f5:e6:70:a4:b6:78:f6:08:a5:a4:be:99:
ac:de:e0:b2:f7:a6:80:ef:7f:d9:ed:74:6e:7b:5d:1e:29:97:
4f:08:fa:75:bf:9e:ae:3c:9d:d5:3c:6b:82:85:2d:38:bb:f8:
13:4c:d8:d0:b1:6e:69:be:49:3b:32:7b:59:2e:48:27:6b:33:
67:f8:cf:da:95:b5:38:e8:56:c6:0b:00:be:d2:1b:e1:58:89:
71:09:bb:d4:37:5a:1c:ed:4a:44:f1:a5:d0:1f:ac:85:fe:9d:
2c:45:c3:32:a9:1a:20:55:a8:43:1d:dc:85:86:f9:22:c6:66:
34:f3:d0:0e:a0:85:3e:b3:7c:c1:4b:04:ce:5e:05:43:04:72:
4d:7b:00:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:36:37 2025 by rpki-client