Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
File: 323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa (raw, json)
Hash identifier: GST6j0TgIthr2c5xVub1d8IdD0p6xzjTZLNG1bBJw84=
Subject key identifier: 01:D2:23:28:4A:17:71:B9:55:BE:A8:05:72:21:5D:31:E4:2C:D9:59
Certificate issuer: /CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Certificate serial: 02A5396CCE159B41AA4E7AABEBCB6BD88D110E1C
Authority key identifier: 15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
Signing time: Tue 26 Nov 2024 21:47:59 +0000
ROA not before: Tue 26 Nov 2024 21:42:59 +0000
ROA not after: Tue 25 Nov 2025 21:47:59 +0000
asID: 11802
IP address blocks: 2801:80:50::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:a5:39:6c:ce:15:9b:41:aa:4e:7a:ab:eb:cb:6b:d8:8d:11:0e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1522B3F1AC6DBDBA036381C1A33763B7A53B29A3
Validity
Not Before: Nov 26 21:42:59 2024 GMT
Not After : Nov 25 21:47:59 2025 GMT
Subject: CN=01D223284A1771B955BEA80572215D31E42CD959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:38:e5:19:84:32:f4:de:1e:44:de:de:db:4d:
0c:0f:45:33:4a:aa:c4:37:03:47:88:f2:bd:7f:80:
75:b3:15:09:91:33:9c:d1:d6:e9:8f:f7:12:49:fd:
97:42:13:22:c5:ab:e5:0f:e5:21:e5:9c:ac:97:15:
93:02:8c:57:bc:19:eb:d0:2c:3f:d6:b6:a2:8e:7c:
b2:f9:3c:02:d9:9e:96:f7:ce:56:a7:19:8a:a1:49:
be:cd:1e:1c:3e:90:4e:76:4a:73:b3:2f:aa:d9:7f:
c2:9a:92:37:2c:d4:6d:d9:30:5a:ee:53:45:4f:35:
67:70:a6:c5:d2:af:54:e6:4b:1c:d9:ea:c9:c8:3f:
25:cd:98:61:fa:21:1c:8b:e2:25:49:3f:f1:4b:15:
fc:e9:dc:bb:10:6b:8c:6f:5d:0b:35:0b:f1:d1:36:
0b:5c:a5:88:d3:5e:14:08:c2:82:e3:ec:91:9f:5c:
56:22:8c:9f:5d:a1:8f:a4:75:d9:3b:6c:d4:70:4c:
a8:3b:eb:37:81:16:c2:d1:f7:65:e2:ab:ea:13:9e:
05:4f:85:29:2c:da:f4:5d:2a:b2:4c:75:ad:9c:96:
7e:ac:be:a0:4f:da:36:9a:4b:bd:79:e2:f4:c3:88:
08:ea:ca:20:01:e6:85:c2:13:89:98:c8:8b:94:8f:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D2:23:28:4A:17:71:B9:55:BE:A8:05:72:21:5D:31:E4:2C:D9:59
X509v3 Authority Key Identifier:
keyid:15:22:B3:F1:AC:6D:BD:BA:03:63:81:C1:A3:37:63:B7:A5:3B:29:A3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1522B3F1AC6DBDBA036381C1A33763B7A53B29A3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Daku8xJcBMhjk4AKcRdJJGgqM59H2TAaaWCG7LKxE2Zb/0/323830313a38303a35303a3a2f34382d3438203d3e203131383032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:50::/48
Signature Algorithm: sha256WithRSAEncryption
28:44:78:4d:b6:bc:1f:06:db:db:09:ff:86:a9:09:9a:74:4f:
eb:b0:ff:f7:99:86:8a:fa:88:02:20:27:d7:bb:72:bd:98:8d:
92:2c:bb:9b:d2:bf:e9:f6:01:f8:85:d8:69:43:61:d4:0f:7a:
89:67:9f:65:ee:e9:41:e9:70:6b:2c:14:3d:2c:ef:55:44:95:
24:df:b4:4f:82:ed:0c:76:b8:7e:0b:f1:c9:fc:94:40:3c:73:
a5:7e:16:71:1d:9d:ad:2a:6f:0d:4e:4e:b4:1a:63:c0:9d:d2:
ec:73:58:dd:59:54:14:f8:26:89:ca:8b:b2:f3:ca:81:5e:47:
a4:7e:46:61:e4:aa:88:27:cc:ff:8e:89:aa:9a:fd:cd:21:c3:
62:7b:a3:8a:51:77:4d:7b:53:64:e8:34:e4:fa:79:4e:67:f5:
cb:dd:75:ee:17:e6:11:b8:b6:9b:f2:e0:e6:b2:1d:13:13:9d:
53:65:bd:3a:aa:65:be:4c:e6:1f:8d:b0:96:b7:62:6a:b6:91:
96:b3:75:1b:2f:6d:57:ed:38:a3:fb:27:4a:05:43:e1:6b:13:
a7:25:04:3c:46:e2:60:2d:94:bb:99:45:ed:c8:47:e4:9c:cb:
1a:d1:51:57:68:d8:f4:bb:9f:ed:b7:17:bc:34:95:45:8f:ee:
4c:56:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:04:58 2025 by rpki-client