Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
File: 323830343a343762383a3a2f33322d3438203d3e20323637303733.roa (raw, json)
Hash identifier: kMrhH0VDhwxMZhLjZTsI3oMyDgm9tXjaUvcEbwtxkbg=
Subject key identifier: 5B:9A:B3:98:67:11:1B:E9:0A:74:CB:56:95:0C:B7:0D:81:DD:49:DB
Certificate issuer: /CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Certificate serial: 5AD0D0E9CBBD0252984742FCCA1B8CF4C2C3FD0B
Authority key identifier: 28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
Signing time: Thu 05 Sep 2024 15:47:09 +0000
ROA not before: Thu 05 Sep 2024 15:42:09 +0000
ROA not after: Thu 04 Sep 2025 15:47:09 +0000
asID: 267073
IP address blocks: 2804:47b8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:d0:d0:e9:cb:bd:02:52:98:47:42:fc:ca:1b:8c:f4:c2:c3:fd:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28D76E0939F099B47B4B80EA2B9B07BA1A2286F0
Validity
Not Before: Sep 5 15:42:09 2024 GMT
Not After : Sep 4 15:47:09 2025 GMT
Subject: CN=5B9AB39867111BE90A74CB56950CB70D81DD49DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:81:97:92:fe:11:57:57:3e:39:1e:ea:df:b6:
8a:1e:de:f9:50:09:e8:aa:8a:46:b6:e9:99:bb:54:
57:78:ba:7f:48:90:7d:8a:8c:cd:7b:5d:df:02:19:
95:3a:68:fc:fc:b2:12:52:bd:af:b2:d4:c7:13:91:
0c:69:f0:d4:b2:37:b9:da:db:99:14:74:04:dc:c8:
24:54:2f:7f:09:d6:d6:4a:d9:1b:47:89:c3:f7:fc:
9b:81:ca:fb:b9:dc:8c:95:f3:82:11:21:1c:a4:8b:
b8:51:49:f5:2e:93:0d:db:e2:1a:ee:14:7b:24:54:
b0:03:80:17:2b:48:c2:c7:21:36:9e:7d:fa:cc:69:
05:ef:4e:36:d8:e7:fb:51:f8:74:6f:fc:ee:86:03:
bd:58:a1:d0:2f:58:7e:22:e4:3a:32:2b:8a:5d:58:
2b:7f:59:0e:a2:1d:7e:ff:a8:7d:da:24:dc:3c:5f:
0a:47:19:b0:37:5c:23:8c:59:de:f9:cf:1b:93:7c:
06:af:36:a9:a9:80:7a:66:75:5f:9e:73:ed:58:a7:
2d:91:c3:66:35:ea:f7:b6:66:67:a3:ae:f1:91:8f:
c2:b2:fc:8a:a8:dd:93:c2:2b:c9:7b:f8:41:6e:94:
ff:22:01:9d:3a:7b:d4:0a:8e:bb:99:a2:1d:37:30:
18:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:9A:B3:98:67:11:1B:E9:0A:74:CB:56:95:0C:B7:0D:81:DD:49:DB
X509v3 Authority Key Identifier:
keyid:28:D7:6E:09:39:F0:99:B4:7B:4B:80:EA:2B:9B:07:BA:1A:22:86:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28D76E0939F099B47B4B80EA2B9B07BA1A2286F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/rDYne3iGoy7qGna6vPgoy2ui8AFVccwJLfDRasDZn6e/0/323830343a343762383a3a2f33322d3438203d3e20323637303733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:47b8::/32
Signature Algorithm: sha256WithRSAEncryption
2a:b4:f9:f8:f7:13:50:4a:e1:32:f8:41:03:f3:85:70:80:20:
78:4e:7c:80:a4:e2:4b:1b:c6:ee:8f:2f:1f:de:18:59:e5:98:
3b:e5:92:bb:0c:85:93:95:c7:61:2c:7f:1e:25:fb:6e:dc:d7:
16:5b:09:e3:7a:9b:fe:36:51:ea:da:d8:a1:b0:1a:64:c1:7b:
0b:b4:bc:04:71:82:89:c3:9d:91:bf:72:0f:68:5f:2f:25:21:
a9:3f:0a:02:90:39:d1:db:60:ac:0f:43:5b:72:fd:f1:0a:2c:
6a:ba:27:8d:b2:83:63:57:7a:a6:ce:40:50:16:bd:5e:0e:61:
d7:bb:cf:4c:e7:16:97:e4:b2:23:73:01:c9:8e:9e:ab:2b:00:
f0:e0:de:5b:99:f3:8f:29:37:42:3c:65:2f:e6:a4:87:69:be:
12:74:0d:b6:4f:42:90:dc:07:1a:8f:10:45:cd:ba:4c:68:f9:
f1:bd:f8:9b:d9:fa:bc:f6:26:96:11:72:22:cd:03:ce:d4:22:
be:dc:6f:53:f8:d7:fe:4b:3e:41:be:35:91:85:93:82:16:32:
4c:7c:2e:a4:33:9d:39:57:ac:8a:55:b6:c1:e3:d6:90:61:22:
44:08:cd:e2:94:9b:e6:d2:e4:d8:7e:b2:db:89:11:65:c1:0c:
ce:a3:b6:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:26:24 2025 by rpki-client