Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa
File: 323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa (raw, json)
Hash identifier: KUIoOdLyFAks0gKhTs6OYoBTuAVneKOUWMlaDZQPb84=
Subject key identifier: 4E:62:5C:3A:03:07:E4:30:C9:C8:69:0A:F7:E1:CB:55:C7:B8:EF:9E
Certificate issuer: /CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Certificate serial: 4F1CE13A344FD2928299D12EAD6A338A1119B81E
Authority key identifier: B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa
Signing time: Tue 30 Apr 2024 22:06:00 +0000
ROA not before: Tue 30 Apr 2024 22:01:00 +0000
ROA not after: Tue 29 Apr 2025 22:06:00 +0000
asID: 264525
IP address blocks: 2804:20fc:600::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:1c:e1:3a:34:4f:d2:92:82:99:d1:2e:ad:6a:33:8a:11:19:b8:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B9DB8EACB9F78A564A559454E357E1E31344B1C8
Validity
Not Before: Apr 30 22:01:00 2024 GMT
Not After : Apr 29 22:06:00 2025 GMT
Subject: CN=4E625C3A0307E430C9C8690AF7E1CB55C7B8EF9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:5e:34:ba:52:89:a9:db:8f:2f:0f:77:c3:7a:
38:e4:42:4d:3c:7f:71:72:f2:f5:b8:c8:4c:6c:27:
ea:c9:4b:d7:56:1f:79:84:4e:df:18:60:44:df:df:
32:12:96:0f:0a:cd:26:39:44:87:bd:cf:58:64:8f:
7f:8f:6c:ca:e3:9b:04:00:06:42:93:a7:bb:87:da:
5f:0e:5e:db:46:01:c5:25:ff:24:72:1b:7e:0c:93:
3b:91:43:2e:62:31:44:3d:88:d6:b8:70:55:41:ba:
87:1d:b5:b8:59:da:8e:f0:7d:98:d6:9a:54:d1:75:
30:08:64:c3:61:e6:ff:0d:5b:cc:0a:d6:6b:ac:32:
d9:2f:d3:99:2c:69:1c:3d:f2:c7:9f:94:80:b2:b4:
b8:57:ec:9c:76:61:05:f7:0d:8c:b3:87:25:13:d0:
83:2a:c4:47:2a:ae:fc:30:01:c7:90:9b:88:55:98:
4e:14:24:df:a9:53:0a:d7:bf:7e:85:59:1b:f3:ff:
8d:0a:d2:9d:a2:49:2a:f6:ae:1c:5c:16:26:a0:02:
27:3d:c9:0e:d9:56:cc:61:66:53:a2:79:c5:81:00:
2f:a0:4d:aa:8c:f2:a4:ff:a2:d6:8a:49:b9:1c:27:
ee:c5:9c:6c:56:fb:31:7d:07:43:7a:16:84:fb:99:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:62:5C:3A:03:07:E4:30:C9:C8:69:0A:F7:E1:CB:55:C7:B8:EF:9E
X509v3 Authority Key Identifier:
keyid:B9:DB:8E:AC:B9:F7:8A:56:4A:55:94:54:E3:57:E1:E3:13:44:B1:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/B9DB8EACB9F78A564A559454E357E1E31344B1C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B9DB8EACB9F78A564A559454E357E1E31344B1C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tRwyEQ5CnFhgRBoLCtm1PRTJTEq3CE7JoGLaBhU48wi/0/323830343a323066633a3630303a3a2f34302d3430203d3e20323634353235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:20fc:600::/40
Signature Algorithm: sha256WithRSAEncryption
42:35:94:82:fc:b2:2e:e1:86:d8:47:75:f2:49:03:93:ac:da:
4c:a0:7f:e8:a4:c1:81:11:83:42:f1:db:b4:ec:c2:70:29:85:
3b:5d:ef:be:4c:8c:79:13:10:3e:be:5b:31:bf:6d:44:c8:01:
0b:ee:fb:70:8e:48:5d:1a:c2:ff:ba:24:52:97:86:bd:37:91:
09:9f:8b:74:d4:01:ff:33:f9:cf:2f:58:0c:ac:b4:e9:4d:8e:
80:5a:1f:09:ef:3f:97:d9:78:31:f5:e7:0b:b9:73:df:59:e0:
34:92:f2:f8:37:00:69:82:85:66:71:ba:5e:e2:e5:47:a8:77:
05:45:09:92:18:21:ef:98:40:9a:00:ed:4b:91:f7:38:38:53:
80:2f:50:c1:cc:77:0a:89:23:90:44:19:f2:f1:28:f7:46:c5:
41:4e:7c:42:16:c4:7a:af:00:c3:da:58:8d:17:e0:80:ad:90:
aa:f4:53:ce:7f:2b:a2:2f:2b:af:2c:62:98:f0:8d:db:7c:57:
bd:dd:43:17:89:f5:c7:51:0c:58:14:5c:c5:2d:9e:cd:7c:de:
8d:15:c8:1b:cc:14:a3:81:ac:31:81:91:28:ae:bb:47:64:3d:
eb:8f:fe:f0:8a:4c:e1:3d:12:ba:80:84:09:2b:a3:fb:de:1b:
37:0f:59:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 11:03:48 2025 by rpki-client