Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a373030303a3a2f33362d3336203d3e203631353932.roa
File: 323830343a346333343a373030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier: 7OnQC4IYUgDWrd4sZHZL1/UB+xIiAKPYx2GW4OslflM=
Subject key identifier: 87:61:89:9C:20:5D:D4:49:F7:32:8E:85:A4:C8:EB:32:1C:60:F5:17
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 335C92F7BEC1C2D0CE8FB4843C29ED8D7B33C3B0
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a373030303a3a2f33362d3336203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:02 +0000
ROA not before: Wed 12 Feb 2025 14:26:02 +0000
ROA not after: Wed 11 Feb 2026 14:31:02 +0000
asID: 61592
IP address blocks: 2804:4c34:7000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:5c:92:f7:be:c1:c2:d0:ce:8f:b4:84:3c:29:ed:8d:7b:33:c3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:02 2025 GMT
Not After : Feb 11 14:31:02 2026 GMT
Subject: CN=8761899C205DD449F7328E85A4C8EB321C60F517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:92:f6:53:39:d8:bf:16:52:ed:a8:19:f2:2b:
97:20:7a:25:00:3b:39:0d:1b:16:ce:54:d4:7a:51:
02:ad:e4:68:8a:0d:45:08:23:ff:55:66:56:97:0d:
76:fe:c0:cc:2b:5e:f8:2e:29:06:95:24:b3:3e:f4:
65:c9:be:04:16:2a:73:b8:5f:60:5c:82:76:9b:1f:
04:19:ff:bb:d1:89:ce:fe:d0:7d:f7:79:57:4b:74:
2d:53:ac:45:fc:44:21:76:90:8d:e2:60:c8:60:f8:
5d:eb:98:e4:60:6e:5d:4e:d6:21:2d:94:e9:5a:7b:
fd:64:40:bb:73:47:c4:1c:e4:98:9a:5f:6f:06:0f:
2b:d9:13:22:81:18:eb:81:20:7e:32:a6:31:07:81:
a9:4e:43:89:54:69:39:b9:cd:63:c7:d5:43:c7:23:
d0:54:50:e4:6e:05:8c:6f:a5:9d:0a:7e:0a:b3:cd:
b1:7c:0d:d5:ab:c7:e9:e8:40:7b:55:c9:14:03:92:
c9:67:4a:f5:84:0b:cc:fc:bd:3f:19:b5:b6:0c:71:
17:a7:fd:b9:73:ab:92:2a:f6:24:c0:c5:29:e2:2e:
53:63:49:97:e5:b3:04:ab:53:5f:87:5e:38:b5:95:
73:2d:46:14:68:91:f5:47:15:77:1c:07:c3:2d:34:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:89:9C:20:5D:D4:49:F7:32:8E:85:A4:C8:EB:32:1C:60:F5:17
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a373030303a3a2f33362d3336203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:7000::/36
Signature Algorithm: sha256WithRSAEncryption
1e:1b:5f:79:c2:58:c9:d8:88:0a:52:24:88:76:3c:cd:a6:bc:
8d:2c:62:05:7c:cd:32:a2:6d:da:be:9e:ee:c8:b7:3c:c7:eb:
b4:ec:6f:84:b4:41:d9:bb:bc:bc:11:ce:94:a0:b8:85:76:91:
a3:e9:56:17:c1:70:7e:7d:8d:ed:c3:4c:a4:ef:87:4b:f2:ad:
47:a6:d9:05:60:cf:13:68:89:7e:29:98:ed:d9:fe:b2:da:ce:
f9:f7:2c:57:9e:fb:14:d3:e3:01:d1:eb:7c:d9:8b:3c:94:14:
46:8b:d9:f5:63:f9:62:fb:94:f8:81:32:3f:63:f5:4d:fd:e1:
3b:8b:7b:89:cf:8a:bf:bc:6b:11:5b:ce:6e:ce:74:81:40:31:
56:db:40:4e:8d:91:bf:91:b1:e8:05:b0:67:3a:cf:af:ff:24:
4b:f5:20:ce:10:40:5f:64:26:fd:f1:08:31:fe:67:fa:3d:85:
45:11:76:94:cb:de:27:b3:76:4b:8a:13:b1:47:fa:b6:73:85:
53:83:d1:fd:1e:d5:c0:ab:51:4c:5c:ed:c4:3a:bc:fd:b1:92:
5e:f2:6f:31:7f:a5:0b:7d:4f:45:6a:6d:cf:04:a9:24:77:42:
bd:52:3a:ac:c5:81:f9:bd:b0:2b:42:90:ef:a8:c6:2d:c9:c5:
95:db:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:48:22 2025 by rpki-client