Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
File: 323830343a323535383a3a2f33322d3438203d3e20323634323735.roa (raw, json)
Hash identifier: vC5rVvvzfBAI0mm3XY8A78jeA2hpP6Gnz+DXe7vNPMY=
Subject key identifier: 4F:7C:45:A6:68:C5:7C:D1:E6:68:6A:78:B5:40:88:DC:17:7A:35:59
Certificate issuer: /CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Certificate serial: 7BF3B1C4F88CA1FF790CE2A5C637CF448086D123
Authority key identifier: D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject info access: rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
Signing time: Wed 15 Jan 2025 23:06:31 +0000
ROA not before: Wed 15 Jan 2025 23:01:31 +0000
ROA not after: Wed 14 Jan 2026 23:06:31 +0000
asID: 264275
IP address blocks: 2804:2558::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:f3:b1:c4:f8:8c:a1:ff:79:0c:e2:a5:c6:37:cf:44:80:86:d1:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D9C4F17E8FEAA71140327FF834FC01E5DD40E797
Validity
Not Before: Jan 15 23:01:31 2025 GMT
Not After : Jan 14 23:06:31 2026 GMT
Subject: CN=4F7C45A668C57CD1E6686A78B54088DC177A3559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2a:a9:4d:96:45:46:ac:58:42:17:b2:84:ac:
81:13:2a:0a:98:96:32:1d:0d:51:32:c9:91:a9:1e:
ae:94:cf:a8:14:88:45:27:81:62:13:34:48:ac:75:
a5:5d:eb:05:c6:f6:2e:7f:fc:02:1a:4a:a3:c5:f2:
0c:f3:a5:61:09:db:e0:09:e5:d3:72:5f:48:b4:f6:
48:3c:00:18:39:b4:84:34:5d:cf:b8:d3:83:0e:83:
86:4b:95:8b:2e:93:91:51:33:3b:1b:c8:52:65:b2:
3c:28:8b:f7:1b:9f:3f:10:62:b1:d4:5b:c9:9f:5a:
c3:5d:aa:c6:3c:5f:fb:d4:11:79:82:54:d3:76:2d:
09:9c:83:ff:70:89:e8:a3:44:46:10:e9:2e:fb:62:
2f:28:c8:e4:91:c2:8e:a7:fd:bf:6f:d5:28:09:b9:
1d:31:10:8e:5c:54:3f:8d:08:b7:af:98:6b:e4:eb:
5a:dc:df:aa:ac:30:71:8a:70:08:6d:67:a7:1c:e1:
bc:53:0e:a4:f6:69:5d:5d:e5:4f:80:8d:2a:d4:3d:
38:0f:31:e0:9a:d4:9b:93:a3:9c:fe:40:4d:24:d6:
ea:c5:6f:e8:61:9a:ac:b2:fc:7c:dc:65:33:7c:6e:
00:30:3d:81:db:a1:2c:ed:45:fe:f5:ba:94:8e:40:
56:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7C:45:A6:68:C5:7C:D1:E6:68:6A:78:B5:40:88:DC:17:7A:35:59
X509v3 Authority Key Identifier:
keyid:D9:C4:F1:7E:8F:EA:A7:11:40:32:7F:F8:34:FC:01:E5:DD:40:E7:97
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D9C4F17E8FEAA71140327FF834FC01E5DD40E797.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/27pUxAbzrKc7Ry7hXdmaREKDNjdtsrJnq92uvNw6s2XL/0/323830343a323535383a3a2f33322d3438203d3e20323634323735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2558::/32
Signature Algorithm: sha256WithRSAEncryption
4c:c9:35:bf:82:56:e0:7d:ec:30:94:d5:85:0e:0d:84:64:dc:
4e:68:34:a8:3d:2a:a8:86:b0:4c:c0:6c:30:ed:a7:42:b8:00:
da:a9:ed:30:bb:ab:c4:e5:99:ab:4c:52:c1:7d:88:05:94:86:
30:46:3c:31:af:47:b0:4f:04:ac:2a:89:52:02:82:d0:8b:5b:
c1:94:b2:08:e8:f7:98:d7:07:8b:cc:06:1e:87:da:ca:c5:1c:
51:35:57:61:ff:84:36:50:15:dc:42:6a:cf:0e:a9:dd:16:ac:
62:3f:ba:23:21:1d:27:44:09:f9:8f:f2:7e:d3:7d:00:c5:37:
1c:89:a9:b0:8d:80:33:cc:f5:da:60:49:1c:e6:7f:e8:26:f3:
39:f3:1b:f0:7f:a2:b1:2b:80:be:6b:29:9d:70:27:ae:09:ae:
9f:fe:12:34:73:10:94:ea:40:dc:1e:1f:8b:b6:f4:54:92:db:
73:d5:22:02:f4:c7:b2:67:3b:23:3d:49:e0:55:c4:27:15:80:
b7:a3:47:1f:8d:a7:6b:5b:50:9a:f4:cb:26:96:6a:5c:ba:0f:
af:58:eb:80:11:40:67:33:2b:a3:33:61:85:36:1b:f0:70:93:
79:11:af:99:c9:f5:53:fb:e6:df:bc:ca:9f:f5:6c:7d:67:1a:
30:e1:cf:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 09:51:06 2025 by rpki-client