Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
File: 323830343a6162303a3a2f33322d313238203d3e203532393037.roa (raw, json)
Hash identifier: Az++f7YZkH2ME1bCRTFXTZfamMnpKjGt3XvwJqtk+Xk=
Subject key identifier: 91:C4:E9:7B:C9:83:D5:3D:28:8C:CA:66:DA:22:9F:D8:FC:07:99:4D
Certificate issuer: /CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Certificate serial: 287D960DBD925554131EBA516F2402E1697F9DD0
Authority key identifier: 85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
Signing time: Thu 04 Apr 2024 03:07:16 +0000
ROA not before: Thu 04 Apr 2024 03:02:16 +0000
ROA not after: Thu 03 Apr 2025 03:07:16 +0000
asID: 52907
IP address blocks: 2804:ab0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:7d:96:0d:bd:92:55:54:13:1e:ba:51:6f:24:02:e1:69:7f:9d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8547D0C1A84725BCC8A05B725C22293DAC420C79
Validity
Not Before: Apr 4 03:02:16 2024 GMT
Not After : Apr 3 03:07:16 2025 GMT
Subject: CN=91C4E97BC983D53D288CCA66DA229FD8FC07994D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5e:17:6c:49:df:2c:cb:b8:29:6b:0d:c3:b7:
89:cd:e4:36:bb:64:c0:39:08:9a:55:92:a0:61:c0:
87:1d:32:e4:a9:4b:67:13:25:6f:08:0e:e3:67:cb:
90:3f:14:b5:c3:0f:e8:e3:57:79:27:b6:65:7b:af:
a3:33:fe:76:10:92:6b:38:8a:72:7b:a1:62:7d:35:
7e:9a:e6:fc:84:92:64:51:09:39:13:4c:5b:d8:24:
7b:72:6e:41:08:1a:22:02:25:c9:94:ba:f6:67:8b:
46:16:70:b7:bd:32:5b:24:37:95:1a:06:72:38:32:
92:ce:72:2f:73:9d:9e:7c:c9:89:41:88:1e:a1:48:
ba:44:f1:da:f6:99:e0:79:e1:32:bc:d3:06:30:ce:
43:e6:a9:10:38:07:92:2a:86:e3:ee:7f:7c:09:46:
15:d0:23:c2:10:2a:79:24:4b:cf:56:99:e2:47:1b:
e2:a6:a3:9d:99:08:d8:4b:9e:32:1d:bd:34:08:a6:
be:cd:02:d7:42:69:4d:4a:a6:71:dd:5d:d1:c9:c4:
ba:6b:88:bb:66:b5:a5:29:51:42:87:fc:ba:56:27:
a1:96:ef:f7:32:8a:6f:d6:e7:75:fb:02:9b:81:f8:
3f:63:ba:f0:17:04:b0:d9:f7:6d:a3:78:de:f9:31:
61:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C4:E9:7B:C9:83:D5:3D:28:8C:CA:66:DA:22:9F:D8:FC:07:99:4D
X509v3 Authority Key Identifier:
keyid:85:47:D0:C1:A8:47:25:BC:C8:A0:5B:72:5C:22:29:3D:AC:42:0C:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8547D0C1A84725BCC8A05B725C22293DAC420C79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/1/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ab0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:69:36:12:69:45:14:d7:9c:e5:1e:72:06:6d:78:8b:5b:0f:
ba:35:5d:dc:9b:3f:d9:93:21:39:0a:0d:70:a9:65:fc:e6:d0:
5d:c0:ee:c7:b0:be:20:8d:be:7b:0a:c9:ae:7f:c2:19:e4:77:
14:3d:d4:b6:4e:4e:02:b2:26:55:f4:e4:95:c8:2f:f2:19:e5:
07:36:4b:a4:fd:21:ee:a2:c7:ff:a6:33:2c:2e:7b:cd:b6:cd:
ba:72:6a:92:20:2a:27:f9:06:7a:0e:ff:15:a4:e6:31:6f:36:
73:41:0e:9e:cf:d7:84:d9:83:f8:b1:4f:93:3e:82:21:ec:48:
2c:0f:1d:b3:3b:88:f1:83:00:2c:5d:f2:73:aa:79:85:c7:b3:
ef:bb:00:ed:04:9d:2c:d3:98:f7:0c:29:33:16:4e:42:9e:f6:
62:bd:f0:1e:56:15:c4:8a:77:66:e1:7c:67:20:cb:3f:18:2b:
c6:29:be:17:ba:2a:d5:75:f1:d9:d5:f0:48:2d:56:00:80:40:
bb:ce:68:36:64:b4:b9:30:d3:1a:54:56:f0:1b:0e:9c:43:b9:
86:25:73:81:24:62:97:67:e6:54:6b:de:f6:73:ec:13:0d:d5:
a2:ed:b9:79:f2:9c:e0:ab:80:8f:e1:f6:93:f2:db:fd:fc:29:
04:e7:bb:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:52:28 2025 by rpki-client