Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a383030303a3a2f33332d3333203d3e20323637303933.roa
File: 323830343a343830383a383030303a3a2f33332d3333203d3e20323637303933.roa (raw, json)
Hash identifier: 5WjoGRjC1PsMqUNyzxhh+1AcEhSwq/FRM0AIP0+qYK8=
Subject key identifier: D7:25:EC:96:51:68:12:9B:52:EE:02:72:41:56:4C:C2:76:45:44:5E
Certificate issuer: /CN=8969EE982CBE9BCDB5B100091931153438B2D419
Certificate serial: 526D50D68694ACA10121F5A97BE7584C131FA84B
Authority key identifier: 89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a383030303a3a2f33332d3333203d3e20323637303933.roa
Signing time: Fri 10 Jan 2025 13:55:57 +0000
ROA not before: Fri 10 Jan 2025 13:50:57 +0000
ROA not after: Fri 09 Jan 2026 13:55:57 +0000
asID: 267093
IP address blocks: 2804:4808:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:6d:50:d6:86:94:ac:a1:01:21:f5:a9:7b:e7:58:4c:13:1f:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8969EE982CBE9BCDB5B100091931153438B2D419
Validity
Not Before: Jan 10 13:50:57 2025 GMT
Not After : Jan 9 13:55:57 2026 GMT
Subject: CN=D725EC965168129B52EE027241564CC27645445E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9c:b4:62:80:d0:b3:2c:8c:17:b7:8f:f1:55:
65:4b:bb:61:f5:08:bd:5a:4c:80:bd:cd:11:31:d3:
7c:1a:a7:09:43:b3:3a:ba:60:98:5d:98:52:14:74:
42:ed:c6:ba:e1:6a:41:0d:bf:4f:6b:0a:71:6d:87:
23:8b:0b:fb:20:a1:99:63:ff:13:4c:04:c8:66:cf:
e8:a4:73:48:0c:0a:66:0a:d2:b3:6b:35:5d:e8:37:
9c:67:54:04:90:42:49:ff:ac:11:bf:79:74:1e:0c:
77:41:93:f1:91:ad:6c:37:81:2f:a7:cb:08:34:5f:
ff:06:43:38:1c:d3:e6:d2:e5:8e:51:27:92:3f:5a:
93:43:f2:c0:00:cd:e1:50:23:5f:82:28:77:57:de:
e2:a2:57:15:69:82:26:98:13:4b:ad:07:c4:0e:07:
e7:8c:71:d0:f9:4a:82:53:93:eb:4a:e1:5d:ba:86:
0a:d5:eb:fa:ea:d6:d6:b5:49:2e:ac:e2:aa:c7:ba:
78:e5:6e:1e:b5:70:1c:f1:e6:cb:fc:da:87:79:44:
53:41:47:ab:48:83:0c:07:c2:66:b7:00:fa:47:59:
a3:a4:75:56:98:87:65:ce:92:2c:47:1a:ce:b1:eb:
35:d2:c5:35:9a:27:22:2b:07:aa:87:5a:e0:29:e5:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:25:EC:96:51:68:12:9B:52:EE:02:72:41:56:4C:C2:76:45:44:5E
X509v3 Authority Key Identifier:
keyid:89:69:EE:98:2C:BE:9B:CD:B5:B1:00:09:19:31:15:34:38:B2:D4:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/8969EE982CBE9BCDB5B100091931153438B2D419.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8969EE982CBE9BCDB5B100091931153438B2D419.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JjCBdukVB3dKs8Br9SwwfNKqKdY78JjN23r5oWdinti/0/323830343a343830383a383030303a3a2f33332d3333203d3e20323637303933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4808:8000::/33
Signature Algorithm: sha256WithRSAEncryption
99:f2:ee:66:24:0b:cd:22:1f:f2:ca:ad:ee:03:7c:45:8d:6c:
ef:11:b1:5b:7e:23:99:ea:7f:8a:0b:f5:ca:56:c9:f1:71:72:
3a:ce:52:9a:20:a7:71:b1:46:b5:b8:96:31:4d:ff:81:79:16:
17:38:ac:6a:74:c6:84:08:72:a5:51:13:9a:be:c4:1a:2c:14:
d0:0f:30:fa:9d:02:75:aa:af:71:de:c4:e8:51:94:45:33:b7:
10:60:5d:a2:f3:33:ed:30:44:90:08:23:44:b7:bb:fa:c0:d2:
9c:f9:6f:be:5f:21:a8:26:ba:c5:a3:00:b2:35:2f:a7:d5:76:
66:cd:47:b9:f3:61:63:8f:b1:b0:1d:5e:99:64:a4:a1:85:18:
91:d0:54:7f:78:b7:42:d0:3e:5d:ce:50:db:bd:7a:2a:9f:b4:
e2:ed:f3:8d:39:39:0a:4f:1a:e1:93:c9:29:cb:16:93:4a:cc:
6b:50:6e:b2:d7:6f:4e:21:16:07:b2:3d:06:e9:f4:8e:c6:6a:
1d:bd:e5:db:dc:6d:03:ce:7c:31:c4:6a:fa:3f:34:7d:4d:64:
f3:fc:cb:89:29:56:cc:f2:4c:42:ef:3d:8c:54:5a:8a:77:e3:
e3:64:9b:e9:57:b3:cd:45:dd:d0:d4:e0:aa:5d:73:e7:81:19:
0e:d6:62:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:48:12 2025 by rpki-client