Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
File: 323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa (raw, json)
Hash identifier: ojPV2uyi8lc8x0zCENdcjPGgafM3c9Za4isIo6WWGe4=
Subject key identifier: 00:88:D8:B3:9E:9B:9E:13:14:7F:9F:C2:06:2E:F6:8F:8A:97:D7:2B
Certificate issuer: /CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Certificate serial: 172080933E1C0A57CF0A354C02B72875EF26AACD
Authority key identifier: 25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
Signing time: Sun 11 Dec 2022 18:40:39 +0000
ROA not before: Sun 11 Dec 2022 18:35:39 +0000
ROA not after: Sun 10 Dec 2023 18:40:39 +0000
asID: 262847
IP address blocks: 2804:2e8:8010::/45 maxlen: 45
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:20:80:93:3e:1c:0a:57:cf:0a:35:4c:02:b7:28:75:ef:26:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259825BFF3ECA64245B68FAE07CEECBC25E35500
Validity
Not Before: Dec 11 18:35:39 2022 GMT
Not After : Dec 10 18:40:39 2023 GMT
Subject: CN=0088D8B39E9B9E13147F9FC2062EF68F8A97D72B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:76:c9:d7:3f:65:20:f7:c4:68:f7:9c:a1:6f:
5f:d7:91:23:8b:f3:c0:d6:2f:92:d6:ff:57:0c:cb:
80:94:ba:0b:be:2e:49:9e:2a:71:62:c3:99:54:78:
2c:be:3d:ba:6d:59:7e:0e:a7:b5:30:6f:e8:30:09:
c2:b2:00:d3:24:df:49:fb:77:80:9e:34:ad:7b:9e:
fa:6a:52:2a:73:d2:66:21:ea:5b:27:31:4a:60:63:
dd:f2:df:23:ff:19:cd:85:fe:d1:50:7c:fe:b3:f2:
d9:09:05:a1:5e:a4:08:fc:68:7a:84:df:96:f7:34:
c6:72:ef:fd:f4:c1:43:9b:80:66:f5:38:b5:70:30:
04:67:17:4e:98:b7:52:64:ac:ec:46:8e:d1:bf:f6:
89:d7:88:77:39:0d:9e:2a:90:81:f4:c8:55:ef:23:
6d:24:89:38:4f:fd:c4:cb:91:ec:a8:76:3d:76:53:
19:a3:dd:0f:c2:25:24:47:2e:6b:d7:9c:7b:8f:89:
67:1d:0a:c3:61:e5:12:a2:bf:52:1f:3f:be:9d:0f:
1a:f9:86:87:49:fa:ab:67:1d:99:0d:cf:d6:a9:0a:
03:9e:96:ec:b9:d6:cf:45:ca:07:72:2d:da:b8:c1:
1c:ed:fc:2a:20:16:18:5e:dc:e4:0b:06:75:90:2d:
4d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:88:D8:B3:9E:9B:9E:13:14:7F:9F:C2:06:2E:F6:8F:8A:97:D7:2B
X509v3 Authority Key Identifier:
keyid:25:98:25:BF:F3:EC:A6:42:45:B6:8F:AE:07:CE:EC:BC:25:E3:55:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/259825BFF3ECA64245B68FAE07CEECBC25E35500.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bAbbZ6x5FrwA4J6ad61JeotwdYCxR3vvdDuV7hHGqBf/0/323830343a3265383a383031303a3a2f34352d3435203d3e20323632383437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2e8:8010::/45
Signature Algorithm: sha256WithRSAEncryption
52:c9:80:5f:90:92:d0:9f:ac:d0:df:12:f2:82:56:25:0f:8d:
dc:ee:12:e4:cb:29:67:4b:3e:8a:5f:49:57:2d:79:f8:d4:89:
0d:a6:c8:e8:74:e0:fd:39:81:45:a1:98:d3:98:da:c2:16:a4:
26:63:96:03:5f:9d:67:0f:bd:70:63:c7:56:fa:be:57:28:14:
24:96:f5:00:28:d9:27:f0:3e:9b:08:6b:27:b2:46:ac:e8:5a:
43:67:eb:d5:48:db:7f:25:2a:04:03:cf:17:b4:ed:c1:06:a0:
70:f0:88:7c:03:4e:0e:d8:aa:59:2b:fe:05:55:ed:91:39:db:
e6:57:0f:5c:74:81:46:b9:f2:b7:54:7a:41:19:2c:55:58:26:
10:53:2a:c5:56:0c:36:f2:39:dc:b0:86:ce:44:a9:d5:b5:19:
b4:2c:75:29:92:da:05:89:cc:b1:1b:4e:80:da:47:d7:bb:68:
ab:3f:07:df:58:d2:52:a8:b4:86:17:a8:2c:10:52:ae:ae:74:
dd:b4:28:a8:fe:23:9f:ab:8c:cc:56:a3:a4:f5:06:59:cd:9d:
dc:16:ee:1b:e6:3c:f5:bd:95:c7:71:87:d1:2a:a4:b6:55:4d:
a7:b0:d5:ea:68:fb:47:09:ef:38:2a:0b:5e:6e:c7:b6:f5:8f:
55:4e:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:51 2025 by rpki-client