Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
File: 323830343a313431633a3a2f33322d313238203d3e203533313330.roa (raw, json)
Hash identifier: ktjzMQbU1TWUEcYqpFFC7wtgpD/Gm3NXMEEwQ8V6LR0=
Subject key identifier: FA:5A:48:80:A8:EE:15:84:1B:6D:B0:C5:8E:55:BA:1F:F8:6C:76:58
Certificate issuer: /CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Certificate serial: 200973D101D3F530C68AC6187C5B7A2A0B0B9DC0
Authority key identifier: 02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
Signing time: Thu 04 Apr 2024 05:12:30 +0000
ROA not before: Thu 04 Apr 2024 05:07:30 +0000
ROA not after: Thu 03 Apr 2025 05:12:30 +0000
asID: 53130
IP address blocks: 2804:141c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:09:73:d1:01:d3:f5:30:c6:8a:c6:18:7c:5b:7a:2a:0b:0b:9d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02CB993E9585A53FC6B40DA762A73EB2821BF6ED
Validity
Not Before: Apr 4 05:07:30 2024 GMT
Not After : Apr 3 05:12:30 2025 GMT
Subject: CN=FA5A4880A8EE15841B6DB0C58E55BA1FF86C7658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1a:fe:29:7f:c6:3a:30:ac:b3:72:4b:01:af:
ff:85:11:5b:76:31:ce:da:84:3a:9f:48:74:16:78:
20:29:d9:dc:5a:42:7f:6b:b2:82:45:2d:d3:80:ce:
c7:31:bb:86:9e:7a:42:8e:26:d4:b5:98:ce:0d:56:
d0:09:16:4c:5b:4d:16:1d:9a:bc:38:49:22:04:57:
05:45:e3:7e:bf:13:f2:0c:18:66:15:56:b6:fe:3c:
f5:c3:1e:ff:88:c7:43:e7:2c:6d:c2:41:8e:37:7b:
a0:75:3a:91:90:9e:ee:a2:d6:b3:32:14:f3:f1:7c:
fe:d0:0c:ef:65:3d:51:13:86:d2:b6:8a:be:7f:63:
3e:42:77:22:25:a8:3b:d1:6d:9c:6f:52:ba:d5:e4:
8c:86:28:bd:ac:d9:5e:21:2c:87:3d:37:cf:8d:15:
82:4b:38:58:c3:ba:7f:b0:21:f6:8d:be:ac:72:c6:
71:62:b7:63:d7:90:6e:b9:5f:ec:97:f7:94:c9:bf:
05:59:27:18:72:d3:cc:07:7c:21:a0:20:e6:10:e7:
fe:97:b6:d7:cc:9f:08:50:d6:ff:db:a0:2f:7e:31:
37:e2:dd:0b:8f:66:a0:77:4b:b5:34:38:eb:f6:1b:
82:fb:60:b2:c8:09:5a:15:cc:f9:9b:b2:d7:fb:ce:
5f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:48:80:A8:EE:15:84:1B:6D:B0:C5:8E:55:BA:1F:F8:6C:76:58
X509v3 Authority Key Identifier:
keyid:02:CB:99:3E:95:85:A5:3F:C6:B4:0D:A7:62:A7:3E:B2:82:1B:F6:ED
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/02CB993E9585A53FC6B40DA762A73EB2821BF6ED.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DR8GQ5BUdBH4kqaACcZYQbjnUERKgPYCk2NJi7J4KL6Z/1/323830343a313431633a3a2f33322d313238203d3e203533313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:141c::/32
Signature Algorithm: sha256WithRSAEncryption
0b:09:cd:df:94:6d:43:ce:66:38:9a:af:81:e2:83:19:df:f1:
ac:29:ac:3d:ff:51:19:92:68:96:31:f7:83:cd:40:21:bd:4d:
e3:38:ee:1a:78:9d:76:c3:7c:d5:b6:1b:cf:09:52:35:41:fb:
45:85:38:eb:74:be:b4:c7:f1:d8:5f:82:bb:e8:e1:18:87:e8:
4d:84:31:e9:45:a3:18:e7:b4:4c:99:97:4c:68:d2:16:f4:6c:
02:8a:ab:1e:b7:fa:80:7d:3b:19:6a:24:3f:1a:3b:8c:8b:3c:
46:c4:64:5a:45:8c:99:fc:87:e0:f2:e1:64:9f:36:c3:49:3b:
88:d3:4b:99:ff:20:62:aa:7f:aa:0f:d8:26:64:82:11:73:52:
52:a6:ce:6e:8c:09:f0:17:75:a2:d0:8d:92:b7:ff:77:29:0e:
ad:df:e5:83:75:db:5f:e4:ab:55:5c:75:93:f7:d7:6d:da:0c:
46:4e:ca:87:e1:36:fa:42:08:f1:7d:f6:4a:50:12:5a:2b:c3:
00:27:9a:c6:1d:21:35:c9:bc:0e:e2:3a:13:d1:a3:b3:df:89:
62:d3:1d:d3:c2:36:c2:14:a5:12:d7:a7:70:9a:39:48:cf:10:
1a:e3:48:98:fc:06:14:2b:a4:18:b5:f5:91:bb:c6:69:89:9f:
43:a6:c2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 16:45:23 2025 by rpki-client