Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
File: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (raw, json)
Hash identifier: g0oaMcv5duLmGWbafaBDuKMQDxvNcPTmv0haCBekSjY=
Subject key identifier: 19:25:B9:88:69:0C:FA:FF:E7:0F:D5:76:E0:5E:63:9D:71:8B:29:38
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 575F8EB92DAF949DF50F45555E14977CC74EA92D
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
Signing time: Thu 04 Apr 2024 14:10:18 +0000
ROA not before: Thu 04 Apr 2024 14:05:18 +0000
ROA not after: Thu 03 Apr 2025 14:10:18 +0000
asID: 53029
IP address blocks: 2804:628::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5f:8e:b9:2d:af:94:9d:f5:0f:45:55:5e:14:97:7c:c7:4e:a9:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Apr 4 14:05:18 2024 GMT
Not After : Apr 3 14:10:18 2025 GMT
Subject: CN=1925B988690CFAFFE70FD576E05E639D718B2938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:03:2c:1a:ec:69:3b:82:3d:2c:93:ac:1a:20:
f3:4e:a2:77:41:36:0b:80:48:90:06:ff:dc:7a:52:
22:60:65:f0:77:13:ff:e3:21:47:78:0a:69:a1:69:
ce:ec:f5:7a:b8:96:c3:76:7a:c1:65:7e:de:35:80:
ed:25:44:22:cd:78:a3:97:07:3f:5c:a0:b5:de:a6:
b8:ef:98:7a:68:04:f5:83:fa:13:c5:70:a4:1f:72:
3f:8d:b4:fc:75:d9:10:4f:8a:d5:b0:b0:1a:f8:72:
32:ec:6c:47:17:68:49:c2:59:07:04:38:32:83:e7:
bb:01:4e:53:e9:b8:4a:3b:47:6b:69:8a:d5:7a:0f:
e0:aa:80:9b:1b:50:5f:40:06:26:95:6e:4d:ac:dc:
8a:3a:3a:46:8d:86:36:82:b1:e9:dd:d2:f5:93:9a:
56:dc:ba:99:1b:3c:15:18:fc:14:12:c0:52:b0:6e:
c9:c5:93:41:32:b1:fb:1e:a8:e4:fc:a7:2f:a5:51:
c8:23:1e:f5:e8:15:a5:50:6e:6f:01:b7:d8:72:9b:
8b:1a:36:d8:7f:87:3b:b9:36:94:19:a2:c8:fb:23:
65:ce:8b:52:95:05:9d:aa:ff:47:86:e5:04:1a:ce:
3c:38:d3:58:3d:37:ab:43:8e:25:7c:6b:21:54:f8:
eb:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:25:B9:88:69:0C:FA:FF:E7:0F:D5:76:E0:5E:63:9D:71:8B:29:38
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:628::/32
Signature Algorithm: sha256WithRSAEncryption
0f:b6:f4:e5:71:04:46:7a:85:4a:1d:79:89:ad:73:ba:1f:78:
64:6a:8f:f6:88:6e:61:89:63:f9:20:42:1a:e4:64:38:ef:b1:
ba:7a:2b:d2:65:50:b9:7a:85:d0:5a:d9:14:59:ef:76:89:e9:
52:c8:42:3c:18:53:d5:03:35:7f:0f:3b:51:b7:e8:01:68:e5:
95:a4:29:c7:87:79:73:c2:fc:fb:1c:66:a0:63:91:2e:e7:4c:
01:24:c3:5c:df:77:61:04:6f:8e:87:6e:8a:e5:91:3b:42:33:
ff:62:e6:26:82:3a:e4:f5:e4:11:07:c3:da:f2:4c:95:de:12:
7c:5e:ef:9b:55:c3:9d:dd:f5:cf:f5:90:2c:4f:4c:0a:45:43:
77:04:ef:81:49:9c:dd:4a:b3:de:b0:3d:56:69:4c:ca:33:09:
44:45:cb:30:38:6a:33:68:40:b4:09:3a:c7:5f:c4:ff:30:a4:
96:af:af:48:16:0e:6b:f9:ca:6a:8b:7f:f1:3b:da:3c:24:16:
27:a4:1b:73:08:41:10:41:87:4c:4f:b4:2a:57:cf:cb:ad:6a:
fd:d8:b4:ed:9f:25:de:33:93:fc:b5:31:85:94:01:30:04:bc:
49:d0:d6:5a:56:59:4a:ec:dc:7d:e1:62:bd:06:3c:09:f6:e0:
e3:d9:2a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 17:57:07 2025 by rpki-client