Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
File: 323830343a383865303a3a2f33322d3438203d3e203238333236.roa (raw, json)
Hash identifier: H1H13m/8kUhRFbaM5uLCg+NY14wFBl8TkjDTPzyaiQM=
Subject key identifier: 8A:C2:09:42:CE:62:31:E7:A7:9E:0B:74:98:42:2A:60:78:5F:55:5A
Certificate issuer: /CN=425279A675F326D0577BF774BBB20A14508381AD
Certificate serial: 5E592296899930EF91D37F0EE0A4B11153450EB9
Authority key identifier: 42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
Signing time: Thu 04 Apr 2024 13:54:38 +0000
ROA not before: Thu 04 Apr 2024 13:49:38 +0000
ROA not after: Thu 03 Apr 2025 13:54:38 +0000
asID: 28326
IP address blocks: 2804:88e0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:59:22:96:89:99:30:ef:91:d3:7f:0e:e0:a4:b1:11:53:45:0e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=425279A675F326D0577BF774BBB20A14508381AD
Validity
Not Before: Apr 4 13:49:38 2024 GMT
Not After : Apr 3 13:54:38 2025 GMT
Subject: CN=8AC20942CE6231E7A79E0B7498422A60785F555A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8d:1b:07:7c:9a:ce:76:23:49:e1:98:38:7f:
90:fa:bb:18:29:46:89:d4:75:3c:8c:18:dc:46:8f:
6a:56:c8:c3:1b:e6:44:18:4c:b1:d3:fd:4d:8c:44:
45:56:88:74:66:5e:28:fb:cf:af:88:c8:87:ba:98:
11:70:a6:ba:4a:a2:80:e4:e8:55:61:00:98:26:20:
f2:02:47:6a:d6:35:00:2d:ee:4f:ca:c7:f8:9f:78:
19:55:b7:ea:2e:c7:e6:39:17:da:77:88:1f:3b:e9:
81:34:68:0d:a3:f6:57:ae:93:a0:74:72:64:e8:a4:
18:94:fb:16:f9:9c:3d:cc:b4:ff:e9:c9:7c:2c:90:
5c:e3:2a:fc:02:60:c4:dd:d0:21:38:d6:8f:3d:0d:
1a:dc:a6:59:b8:8c:59:3d:58:d8:0f:d7:9c:03:78:
1e:44:a5:bb:8f:e9:25:1f:8a:40:de:0e:97:47:08:
1d:b4:bd:cb:07:d3:5f:0d:37:6a:2b:71:7e:d2:5b:
44:ac:1b:a0:65:2c:a3:62:f4:46:f4:89:f2:08:27:
82:38:b9:87:dc:ae:1d:cc:b0:ab:ec:be:30:c8:8b:
f7:f0:d7:08:e3:ac:66:75:5d:ce:02:f0:13:d9:18:
5c:96:bd:cc:9d:f2:83:27:2f:bf:b9:1f:0a:d4:1f:
ec:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C2:09:42:CE:62:31:E7:A7:9E:0B:74:98:42:2A:60:78:5F:55:5A
X509v3 Authority Key Identifier:
keyid:42:52:79:A6:75:F3:26:D0:57:7B:F7:74:BB:B2:0A:14:50:83:81:AD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/425279A675F326D0577BF774BBB20A14508381AD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/425279A675F326D0577BF774BBB20A14508381AD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AcRyYkAe7B81Hmh8RpDQPrmCn6GzMMTdJByTqPMjybma/1/323830343a383865303a3a2f33322d3438203d3e203238333236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:88e0::/32
Signature Algorithm: sha256WithRSAEncryption
17:bc:3f:6b:48:e9:fd:a2:96:a4:86:57:97:73:7c:87:24:d1:
a4:ab:93:3d:94:6c:c1:4f:65:38:ab:c2:9a:a6:9b:b9:21:5a:
6d:02:d8:91:a7:9c:42:36:ca:85:39:b6:fa:f0:d6:fd:87:54:
82:91:08:c7:8b:09:d2:46:ee:5c:b0:88:63:45:fe:11:8a:1d:
90:6f:dc:4c:38:95:09:a9:8f:f1:a6:13:e9:2e:da:f2:61:67:
13:8c:cd:f7:67:69:0c:1a:fc:8b:c3:28:85:6c:55:0c:04:ff:
50:d3:e2:35:85:2f:fe:d9:f9:a5:65:ba:45:a3:0c:f9:dd:bb:
da:a1:ba:6f:d5:c4:71:24:ac:9f:3e:5c:18:54:57:e3:81:aa:
64:d4:3a:02:12:92:45:c0:bf:49:88:39:77:5d:fb:0c:22:d9:
da:95:18:d0:b3:37:fb:53:90:52:3e:ff:7e:c7:37:34:6b:6f:
97:41:d0:43:8d:b5:ab:5b:03:57:81:20:58:d4:38:57:f6:59:
7a:d2:17:cd:56:38:e2:c9:f4:93:fa:c8:8c:a5:3b:b2:ae:68:
e3:c8:a6:65:46:b5:50:b3:36:43:57:55:29:84:59:02:20:bd:
c9:1c:cc:1c:bb:7a:e4:b8:7f:8a:b0:a7:6d:35:dd:7a:5f:ef:
fb:55:e8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 02:28:11 2025 by rpki-client