Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa
File: 323830343a333937633a3a2f33322d3336203d3e203532353932.roa (raw, json)
Hash identifier: LUk6V76y8pZ51vvrFPnkR/k2b6NOOQ6fbAfl2u9oEpE=
Subject key identifier: 7C:7B:97:0B:8B:65:FE:5D:58:58:C3:91:05:A9:72:04:F8:41:59:7D
Certificate issuer: /CN=CFF957416ABC451AD3955260CF69F31756051BD6
Certificate serial: 3D13C33F52ACB15C3D03C66D191E576205135418
Authority key identifier: CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa
Signing time: Thu 27 Jun 2024 12:04:27 +0000
ROA not before: Thu 27 Jun 2024 11:59:27 +0000
ROA not after: Thu 26 Jun 2025 12:04:27 +0000
asID: 52592
IP address blocks: 2804:397c::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:13:c3:3f:52:ac:b1:5c:3d:03:c6:6d:19:1e:57:62:05:13:54:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFF957416ABC451AD3955260CF69F31756051BD6
Validity
Not Before: Jun 27 11:59:27 2024 GMT
Not After : Jun 26 12:04:27 2025 GMT
Subject: CN=7C7B970B8B65FE5D5858C39105A97204F841597D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:93:4c:20:00:57:f9:58:e2:19:96:f5:56:ac:
ae:3d:fd:cd:b9:20:3c:64:e9:59:d7:61:c0:3c:0d:
e7:33:83:7c:f4:bd:fd:59:6f:3b:54:ac:32:c4:d9:
8a:18:8d:41:2a:06:55:07:f4:0d:72:13:b5:2c:ed:
13:2e:7e:dd:19:9c:17:d3:00:cb:60:c0:8c:aa:27:
f1:48:29:64:ef:27:b0:95:7b:a6:bb:e6:bf:f2:f7:
6b:2a:a3:c9:cb:0e:ef:0b:80:1a:d4:5d:08:bc:33:
cb:d7:80:4c:60:2a:96:ec:62:9b:26:53:a2:0f:2b:
c4:12:ca:38:8b:2e:6f:47:f2:b4:92:ad:2d:c0:67:
07:68:73:76:8a:a5:93:49:27:7b:b5:e0:0e:c6:6f:
69:9f:57:c4:0d:e7:9c:15:5c:ec:7f:09:99:d6:5d:
7c:6d:7f:c0:73:c7:8d:55:f4:06:60:cc:05:84:72:
c3:6f:c2:a6:76:e1:6e:bf:65:eb:3f:73:02:9d:26:
92:06:73:01:9f:b9:a7:2a:17:7d:69:1e:ad:f7:61:
fd:75:3f:45:81:3d:eb:c2:9d:d6:1b:2b:ad:c7:4b:
3a:05:fb:db:ea:c9:30:48:85:d8:9a:36:50:e3:ec:
c6:b1:a2:9b:f0:0e:d1:da:42:61:1d:32:5b:27:be:
eb:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:7B:97:0B:8B:65:FE:5D:58:58:C3:91:05:A9:72:04:F8:41:59:7D
X509v3 Authority Key Identifier:
keyid:CF:F9:57:41:6A:BC:45:1A:D3:95:52:60:CF:69:F3:17:56:05:1B:D6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/CFF957416ABC451AD3955260CF69F31756051BD6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFF957416ABC451AD3955260CF69F31756051BD6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV4QR1rboQjucbuLzDBEZKWLZrnjtPyYzM9kFc6mWcHU/0/323830343a333937633a3a2f33322d3336203d3e203532353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:397c::/32
Signature Algorithm: sha256WithRSAEncryption
5b:09:ce:9a:d8:fa:8e:02:78:03:58:49:52:d0:7d:89:ff:47:
03:aa:7e:62:93:27:00:df:f3:6f:18:f5:31:3b:83:5a:e2:0f:
4c:9d:0c:7f:0b:d4:66:b4:00:35:13:3e:b4:ab:2e:5e:94:85:
fb:69:3d:4d:c6:59:e6:de:51:d4:ba:b2:9d:51:a6:80:e2:00:
0c:ac:51:12:88:24:bc:1c:8e:ef:89:9d:e2:01:ea:42:a9:91:
c1:b4:bb:c3:08:4a:4b:d8:8a:04:4c:79:11:72:69:8f:6d:64:
77:21:e5:79:3e:b5:1c:8b:ba:97:9d:81:9f:e5:71:c8:3b:f4:
e2:62:76:9b:cd:bb:08:35:f0:04:10:dc:0d:da:e7:fb:79:46:
39:bd:1d:4d:4c:7b:c7:dc:72:d0:fe:ea:7b:8a:e7:66:aa:44:
48:2e:0d:4f:4e:ca:de:b5:43:91:51:d9:4d:2f:c1:4e:0f:1b:
6a:36:cb:91:01:6b:20:0a:d3:81:9a:bc:08:6b:24:67:1a:01:
6f:98:e4:9e:dc:ce:9b:20:53:82:22:d4:8f:ed:52:c5:92:a9:
5a:29:8a:df:c4:c0:89:b0:2e:af:0a:0b:f7:ba:18:03:d4:f9:
0d:16:25:78:a5:26:14:5e:99:31:7c:f1:38:0b:95:45:8b:a2:
10:24:3f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:21:03 2025 by rpki-client