Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
File: 323830343a313664633a3a2f33322d313238203d3e20323633313034.roa (raw, json)
Hash identifier: b5gMdKLicTqzVMnYCYiOoHwaj4z39gasHn1brnydh9c=
Subject key identifier: A4:32:B3:C3:81:F6:D6:1C:8C:BD:A5:E4:3A:D7:45:38:E4:4E:A3:89
Certificate issuer: /CN=87B1C7EAED276157BEE841B04303FA76647D005D
Certificate serial: 60A66A20B8F552AF8179C2D39FB1635435C952F2
Authority key identifier: 87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
Signing time: Thu 04 Apr 2024 20:35:14 +0000
ROA not before: Thu 04 Apr 2024 20:30:14 +0000
ROA not after: Thu 03 Apr 2025 20:35:14 +0000
asID: 263104
IP address blocks: 2804:16dc::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:a6:6a:20:b8:f5:52:af:81:79:c2:d3:9f:b1:63:54:35:c9:52:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87B1C7EAED276157BEE841B04303FA76647D005D
Validity
Not Before: Apr 4 20:30:14 2024 GMT
Not After : Apr 3 20:35:14 2025 GMT
Subject: CN=A432B3C381F6D61C8CBDA5E43AD74538E44EA389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:fc:7e:15:c2:cc:36:cd:86:60:f9:0f:97:02:
98:c3:7d:1a:ef:79:cb:66:ad:9f:5c:53:d0:b1:30:
e3:4d:1b:99:7d:8f:34:c4:78:c5:98:ca:23:57:bb:
d8:58:a4:21:2b:82:e1:7e:98:28:f9:18:e9:6d:93:
23:e5:18:c9:d8:d6:9a:b5:02:7b:97:02:f3:8c:c6:
e1:88:90:9e:fb:df:67:28:15:04:0e:78:ee:8a:3b:
b7:3b:7a:69:33:ba:f2:0a:8b:63:d7:7f:08:90:cd:
62:be:08:f8:7c:73:4f:3d:6b:59:41:06:a2:a2:5c:
c3:66:3b:02:79:ef:8b:a5:14:6c:37:04:a3:13:f3:
29:ae:83:0b:de:c7:f8:37:53:46:93:a7:fb:b7:10:
3e:fc:57:db:43:3e:d7:7f:76:c8:27:3d:18:2f:94:
ad:35:ac:2a:4e:8d:a9:82:eb:5a:f8:d4:8a:49:de:
b5:21:ae:4a:7b:2a:98:cc:b1:c6:78:bc:a9:a5:6d:
fd:79:94:d4:20:70:a0:b2:35:f9:5f:99:ab:2d:36:
6d:a9:36:7a:99:80:5d:24:01:b1:3e:2c:75:ad:07:
1e:a8:64:a2:0e:a5:1c:4d:4c:9b:92:b5:a5:47:c6:
4c:7c:49:67:e8:40:7c:7a:6b:26:84:34:23:65:5c:
20:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:32:B3:C3:81:F6:D6:1C:8C:BD:A5:E4:3A:D7:45:38:E4:4E:A3:89
X509v3 Authority Key Identifier:
keyid:87:B1:C7:EA:ED:27:61:57:BE:E8:41:B0:43:03:FA:76:64:7D:00:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/87B1C7EAED276157BEE841B04303FA76647D005D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/87B1C7EAED276157BEE841B04303FA76647D005D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DqwfjFuBX4kQ4gMUzRx1D8fvK4KYFfXZoNFZ6Ja6ArGr/1/323830343a313664633a3a2f33322d313238203d3e20323633313034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:16dc::/32
Signature Algorithm: sha256WithRSAEncryption
6c:79:a0:de:72:c3:eb:c2:f2:ab:0b:dd:5b:0f:f5:fa:73:86:
b1:6e:46:cb:dc:cc:de:0b:23:6b:90:65:ee:05:cb:b8:e7:a6:
0b:00:bc:2c:1f:16:21:aa:59:c6:a6:3c:93:8f:98:48:cd:6c:
ed:50:6f:74:59:31:40:bd:16:2b:60:71:2a:77:6e:9f:17:15:
98:6f:56:13:02:01:32:b6:7b:94:2b:c5:5b:a7:75:f1:c2:8a:
38:32:49:b5:46:a4:25:ff:c2:15:09:89:18:7f:38:04:66:0f:
53:0c:f0:bd:7e:0b:53:e1:ce:d3:ef:83:d8:a2:40:22:8d:41:
92:77:9e:d2:d1:34:18:e5:50:13:d3:2c:22:75:74:24:59:b2:
53:69:06:d2:a3:9c:19:4e:41:5a:c0:4e:3e:e9:29:97:ed:5e:
62:0a:5e:26:76:07:30:86:17:ed:87:92:fb:5e:91:33:13:6c:
f6:c2:57:7e:6d:62:ea:02:88:9c:b9:16:74:bc:d1:2c:49:5b:
86:0f:7d:75:c7:66:72:ef:ba:3c:88:96:9d:c5:26:b2:54:5a:
15:2c:9d:c4:45:b5:e5:4d:89:f3:a7:d6:0e:85:c5:cc:03:c0:
21:27:f1:c7:24:92:c9:39:f8:fc:f6:46:da:36:e7:2e:ad:87:
6c:34:45:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:16:36 2025 by rpki-client