Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
File: 323830343a3335383a3a2f33322d313237203d3e203533323436.roa (raw, json)
Hash identifier: JVHPsslmLUrYzuFfoPS2NKEWh7yRgsvdZJdgfANsXF8=
Subject key identifier: 42:E2:A4:83:BB:A2:E6:4C:8C:90:07:5A:26:FE:55:6E:FD:EA:1A:BC
Certificate issuer: /CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Certificate serial: 0F56D2F6E93FFEE2744F7887CD251C90E1E876B2
Authority key identifier: 30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
Signing time: Thu 06 Mar 2025 18:57:29 +0000
ROA not before: Thu 06 Mar 2025 18:52:29 +0000
ROA not after: Thu 05 Mar 2026 18:57:29 +0000
asID: 53246
IP address blocks: 2804:358::/32 maxlen: 127
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:56:d2:f6:e9:3f:fe:e2:74:4f:78:87:cd:25:1c:90:e1:e8:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30FE93C29B2D9E965F52FCED04760810A240E9E1
Validity
Not Before: Mar 6 18:52:29 2025 GMT
Not After : Mar 5 18:57:29 2026 GMT
Subject: CN=42E2A483BBA2E64C8C90075A26FE556EFDEA1ABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5e:d3:5b:8f:e9:a4:ad:e3:37:cc:c9:c8:9c:
d1:0a:9a:fd:25:aa:e1:fd:bf:f2:6d:5e:a4:40:d9:
65:83:be:26:b8:f4:0b:f8:cb:b5:14:46:aa:ae:a3:
12:b3:7e:4b:fd:00:20:78:a9:12:72:2f:fd:78:8c:
05:f1:fe:19:21:ff:ba:b8:4b:4f:3d:d4:02:a3:53:
2f:bc:b3:c7:7e:50:b0:9a:0b:35:9c:73:b2:ab:f3:
98:c8:a8:03:34:45:2e:eb:e8:61:13:68:af:5c:dc:
71:5c:68:7a:8a:5a:93:d1:00:b7:19:61:97:b2:b8:
7c:a3:03:1e:0f:0d:b7:92:7e:3f:fe:7a:ad:b3:66:
26:61:c3:26:cc:6e:1e:6b:43:9b:c2:0f:37:82:47:
5c:54:80:5a:d8:d8:58:68:5e:07:10:5f:75:9d:c9:
83:84:a5:5a:9e:d5:c3:41:e2:e8:cc:c0:5e:69:fc:
41:9b:e4:02:56:a4:e3:ea:ed:5a:54:f2:bd:dc:87:
25:33:e4:4b:f5:c3:42:4a:75:09:48:72:bf:1d:f7:
cd:bd:a4:75:a3:61:40:3c:9d:4f:c6:2f:30:89:59:
22:52:2c:35:ab:ec:60:0b:a2:8e:e0:06:a7:78:bd:
dc:3c:d6:e1:8b:17:47:24:22:73:eb:4d:a0:1f:1c:
44:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:A4:83:BB:A2:E6:4C:8C:90:07:5A:26:FE:55:6E:FD:EA:1A:BC
X509v3 Authority Key Identifier:
keyid:30:FE:93:C2:9B:2D:9E:96:5F:52:FC:ED:04:76:08:10:A2:40:E9:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/30FE93C29B2D9E965F52FCED04760810A240E9E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RvQnmNeQqiUdDqF4qgXRBBN3oCPkMEPfdHY8i3JVPx1/1/323830343a3335383a3a2f33322d313237203d3e203533323436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:358::/32
Signature Algorithm: sha256WithRSAEncryption
43:28:dc:e8:ce:45:52:0f:d2:21:98:2b:16:60:ea:52:cf:2c:
cf:e5:57:40:2e:a3:a7:43:28:75:83:47:94:33:92:11:b3:0f:
56:80:50:11:2d:6c:1b:97:75:8b:69:bd:a4:7b:63:8f:12:1b:
f4:aa:87:1b:d1:37:9b:bd:93:6b:89:80:9b:c1:0c:aa:a9:3b:
9a:87:bd:dc:7c:9a:88:64:db:1a:c9:f9:b0:a1:cc:7f:57:f6:
a6:1d:b0:95:e0:89:63:9a:6e:f6:59:93:40:94:c9:6d:20:6f:
66:e7:7b:f2:fa:fd:89:84:dd:b9:52:ba:9f:05:b5:81:c4:d1:
c9:db:14:f0:e8:76:24:a9:83:8a:f5:25:0b:29:ed:e6:29:8e:
4e:c5:ec:b7:55:af:82:72:c3:8c:ad:a8:2e:5f:96:7d:87:b6:
6e:c8:f8:b0:c6:b8:8f:2d:c9:9f:ea:10:90:34:94:53:9b:0c:
67:4a:c6:93:2e:ea:f3:f8:04:64:61:1d:7d:47:2c:d3:35:aa:
90:23:6a:a2:6d:85:3b:fa:ec:72:54:56:ff:9b:ef:40:c6:d0:
f2:77:6e:18:1b:d0:27:e8:f6:4c:e7:3f:51:80:98:f7:8f:c1:
c5:1b:ef:7d:c2:ec:04:a9:03:e7:6f:c8:2f:64:31:49:21:21:
67:54:cd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 05:07:54 2025 by rpki-client