Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
File: 323830343a343832633a3a2f33322d3438203d3e20323637313032.roa (raw, json)
Hash identifier: k+m7NJ/LiD6tVxNKkdmv0eOfPgDkeNW4j/UWesy0Xj8=
Subject key identifier: 40:15:5A:7A:A0:20:14:E0:AC:5B:23:95:BE:A4:AA:BB:C7:DE:85:40
Certificate issuer: /CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Certificate serial: 12C55A5A29C49A7A037144261063A8A4B8684CE6
Authority key identifier: D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
Signing time: Thu 04 Apr 2024 03:00:46 +0000
ROA not before: Thu 04 Apr 2024 02:55:46 +0000
ROA not after: Thu 03 Apr 2025 03:00:46 +0000
asID: 267102
IP address blocks: 2804:482c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c5:5a:5a:29:c4:9a:7a:03:71:44:26:10:63:a8:a4:b8:68:4c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D539CF929B6A6A2B9596B922F417FAD917799ED7
Validity
Not Before: Apr 4 02:55:46 2024 GMT
Not After : Apr 3 03:00:46 2025 GMT
Subject: CN=40155A7AA02014E0AC5B2395BEA4AABBC7DE8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:58:6e:10:16:f2:b1:19:02:26:cf:c3:79:
9c:a8:37:eb:93:8e:0d:ad:e5:4e:23:29:6e:9b:87:
70:3f:7c:3b:29:62:8f:90:00:3b:f2:dc:2c:ab:53:
69:0a:7a:35:c7:57:ba:b9:9a:5d:94:e1:91:9b:a3:
42:09:db:3f:75:d8:28:f3:2e:b0:33:c8:22:10:57:
21:4a:49:6d:ff:05:a8:c0:18:a2:95:42:2f:20:9d:
a1:da:25:9e:b2:c0:68:5a:eb:9e:5a:1e:bc:7c:f5:
a4:0e:72:29:5c:7d:a7:c7:af:a0:9d:54:49:2f:13:
b5:3a:6e:eb:28:f0:07:0f:44:6c:51:78:ab:1d:3a:
f3:8b:a8:d9:dc:d9:cd:52:56:4c:b4:ca:ca:6d:9e:
1c:b0:96:da:4b:09:44:39:e4:eb:e9:b0:92:d0:d3:
75:db:68:54:a9:53:d5:2f:44:ae:0b:b3:8b:68:67:
72:a2:18:ae:4f:68:ba:d0:5f:b7:6a:11:d9:b8:9a:
34:43:d4:1d:a8:0a:93:51:04:d9:36:70:46:c8:a5:
55:c5:7d:2a:96:55:a3:0d:5d:71:e9:df:0f:33:07:
fa:a6:1c:82:13:7f:cc:f7:1b:99:4c:51:c7:30:7a:
a3:a2:40:64:21:20:64:86:87:5c:e7:f1:17:03:98:
83:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:15:5A:7A:A0:20:14:E0:AC:5B:23:95:BE:A4:AA:BB:C7:DE:85:40
X509v3 Authority Key Identifier:
keyid:D5:39:CF:92:9B:6A:6A:2B:95:96:B9:22:F4:17:FA:D9:17:79:9E:D7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D539CF929B6A6A2B9596B922F417FAD917799ED7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dta3WHX5cwq88gfLEcrPeajtRXvAPuPXXLz1ssN73S3T/1/323830343a343832633a3a2f33322d3438203d3e20323637313032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:482c::/32
Signature Algorithm: sha256WithRSAEncryption
d3:b7:58:7f:6d:12:0d:82:20:aa:50:1b:96:b9:21:09:14:24:
08:34:48:bb:12:f9:ed:1f:3d:7a:67:31:c2:04:93:23:59:08:
b9:04:b4:e7:0e:6e:67:73:52:80:79:f1:99:22:2d:fd:73:45:
4f:ce:1c:1b:b9:b6:83:74:b0:90:74:5f:4e:06:19:85:f4:81:
7f:fe:13:5f:ef:90:09:04:97:6b:6a:cf:44:e6:90:76:9c:ca:
c5:ae:3f:0f:69:12:58:63:da:15:dd:5d:9a:fb:f1:f6:2d:1a:
4d:4b:a8:be:e4:ce:2c:d5:99:be:f2:62:25:7e:79:7f:f6:71:
b4:02:b0:fe:b3:21:4f:c2:78:78:9a:34:df:f3:23:e8:f7:fa:
fb:70:f8:62:bd:ec:25:11:f7:bc:3e:ca:cf:2b:99:6f:0a:6e:
d9:dc:90:46:d7:6e:d2:57:99:9b:34:75:99:02:61:4d:40:7b:
ce:de:92:5b:fb:7a:35:e0:ac:7f:be:6a:8b:a1:43:34:b9:3e:
2c:e6:d8:1e:17:fb:74:14:dc:be:2c:20:a7:3c:7d:91:a3:5d:
cd:74:b8:b3:bd:c8:a0:f7:b3:6c:9a:57:90:d0:d2:76:d9:82:
9e:13:47:34:33:70:03:98:f9:fa:df:ec:79:c5:44:3b:83:23:
7b:11:ef:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 15:56:23 2025 by rpki-client