Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
File: 323830343a323636343a3a2f33322d3332203d3e203532373231.roa (raw, json)
Hash identifier: dSmtfSrp0T3EPoq9FnsWWh0VRIGkE4C9AkhWMSRZHY8=
Subject key identifier: B4:9F:3E:75:93:EB:6F:77:DC:B0:08:80:3F:2B:EB:AC:29:7F:88:63
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 192989B6A7A1952C8C3A8A81A224F12EAC7EB407
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:29 +0000
ROA not before: Tue 01 Apr 2025 13:08:29 +0000
ROA not after: Tue 31 Mar 2026 13:13:29 +0000
asID: 52721
IP address blocks: 2804:2664::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:29:89:b6:a7:a1:95:2c:8c:3a:8a:81:a2:24:f1:2e:ac:7e:b4:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:29 2025 GMT
Not After : Mar 31 13:13:29 2026 GMT
Subject: CN=B49F3E7593EB6F77DCB008803F2BEBAC297F8863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e6:c4:fa:aa:3c:04:d1:f9:37:5b:32:4f:1e:
4d:a5:fb:05:ae:91:84:17:8d:6a:46:ea:08:79:ef:
56:f9:03:4c:47:9e:6a:99:d5:b5:12:54:50:df:a1:
4b:0f:30:d3:0b:80:03:99:ba:07:8f:0d:74:e6:5c:
b2:62:07:9e:23:ae:99:82:0c:b7:8b:7d:5c:f2:76:
bc:06:7d:6a:6f:b6:34:e0:bc:1d:78:4f:e1:15:14:
7d:8e:ae:37:06:a8:1e:e0:7b:aa:5a:b9:f9:55:ef:
e6:cb:30:3f:b5:d0:e8:ed:e8:91:f2:bf:93:f7:a3:
32:a9:04:e9:40:95:b1:be:54:ef:41:21:bb:50:29:
05:ab:5c:cb:36:c3:7f:7e:71:db:4c:98:3f:ea:0a:
45:00:19:0b:ae:b6:f9:c2:ea:1a:8b:38:96:95:ea:
51:fd:8c:99:72:f7:e3:2b:4a:68:3c:27:d7:a7:12:
d1:36:f4:3c:24:cc:e5:a9:d9:a2:71:1e:1a:fa:b6:
e9:f2:93:4b:10:42:b7:bb:df:d8:57:cf:19:92:4c:
a4:ba:b6:2a:7b:96:45:4f:75:d4:8d:c7:f8:92:3c:
d4:f4:71:67:d0:56:5b:74:0b:d4:dc:e8:47:ca:b1:
0a:c3:02:a0:6c:b2:1e:f1:79:93:b3:26:a1:3d:d3:
5e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9F:3E:75:93:EB:6F:77:DC:B0:08:80:3F:2B:EB:AC:29:7F:88:63
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a3a2f33322d3332203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664::/32
Signature Algorithm: sha256WithRSAEncryption
48:b7:52:56:d9:f0:ab:7c:a2:51:3e:09:52:16:89:47:95:e2:
d8:8b:a1:fc:b5:54:90:15:2e:19:12:72:2d:51:cc:00:45:ed:
c3:29:5e:e8:b7:7e:65:23:fa:70:73:d0:c2:95:e4:70:45:5f:
55:97:7a:ee:2d:02:37:5c:d9:51:e4:91:d5:9a:b4:e7:8e:74:
97:16:96:15:bc:29:f9:f1:c8:a3:05:26:fa:b5:ca:8f:c1:67:
92:08:b1:c3:f9:70:80:c3:4a:86:36:e5:32:95:3c:2d:e5:77:
b2:09:dd:d4:b5:db:d1:38:6f:65:49:1a:87:2d:1f:0d:4b:2e:
6f:6d:ed:06:93:4e:f4:6b:e8:c0:97:38:3a:64:62:cc:23:fe:
d7:85:25:eb:17:6a:2e:c5:70:96:5a:6c:75:72:9b:b4:42:71:
8c:76:db:29:13:96:69:e4:14:0b:8a:f7:ac:24:ce:3d:46:ff:
14:03:7e:a9:4f:0b:5b:36:0f:b5:48:0f:8f:10:c6:c7:19:b7:
52:58:79:92:26:d3:e2:48:06:89:fd:20:b0:14:2a:c1:07:80:
91:7b:96:18:01:63:ec:e7:84:3e:f3:f6:8c:d5:b4:e1:cb:ff:
11:79:e2:cb:b1:54:cc:33:f8:10:6e:c1:28:55:51:f7:16:07:
0b:a9:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 19:24:10 2025 by rpki-client