Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/323830343a363932633a3a2f33322d3332203d3e20323730323533.roa
File: 323830343a363932633a3a2f33322d3332203d3e20323730323533.roa (raw, json)
Hash identifier: QOPrzgklMM8Zg8tD5G8UinzyF/DZUkSmLcrWvaj5Uoc=
Subject key identifier: DB:C9:A4:D9:06:56:FA:15:AD:5F:D4:2A:D6:C2:CB:80:F4:B1:16:6B
Certificate issuer: /CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Certificate serial: 7F96F923AE8CE705DBB127B55F3BA7CCB61F9945
Authority key identifier: 3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/323830343a363932633a3a2f33322d3332203d3e20323730323533.roa
Signing time: Wed 24 Apr 2024 12:37:22 +0000
ROA not before: Wed 24 Apr 2024 12:32:22 +0000
ROA not after: Wed 23 Apr 2025 12:37:22 +0000
asID: 270253
IP address blocks: 2804:692c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:96:f9:23:ae:8c:e7:05:db:b1:27:b5:5f:3b:a7:cc:b6:1f:99:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD
Validity
Not Before: Apr 24 12:32:22 2024 GMT
Not After : Apr 23 12:37:22 2025 GMT
Subject: CN=DBC9A4D90656FA15AD5FD42AD6C2CB80F4B1166B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:af:db:f5:b5:39:0c:42:41:a4:fb:e2:c5:5b:
91:21:29:1a:26:0c:c0:88:35:1f:cb:fc:7e:09:68:
0e:d9:e7:3a:18:d9:c7:18:7a:a8:3c:df:59:bf:df:
54:7c:c9:67:8d:0c:41:d7:b3:76:ef:1b:70:8c:92:
04:ae:30:78:15:ab:3a:4b:7a:62:29:a4:50:9c:66:
f7:e1:22:28:36:0c:c4:90:f9:f1:d3:d7:c4:6e:9b:
cc:d5:59:ef:f3:9c:54:b7:8d:42:38:17:f9:eb:05:
11:3f:a2:1e:60:ed:ab:53:d9:cc:c5:02:86:82:5a:
8b:1c:2a:f4:c8:3e:80:00:94:a7:f3:8d:7b:30:dc:
50:f0:6c:01:d9:80:a1:37:53:68:d0:5d:64:dc:ea:
17:92:a9:ea:42:51:a5:35:cf:00:a4:85:eb:3a:6c:
92:72:18:f9:4b:24:40:6e:8d:ae:9a:1c:78:44:7c:
19:b0:81:30:9c:06:cb:62:45:1a:aa:f9:db:bc:f3:
6c:bd:fe:ca:28:1a:8c:31:e8:18:52:9d:e2:70:b2:
0d:7c:c2:53:c2:10:58:de:bd:51:1c:ad:43:bd:37:
50:41:f9:ee:dc:0d:75:74:4d:89:9c:a8:20:42:c9:
61:ce:25:5b:ec:df:13:ed:6e:cf:21:ac:c6:9f:b8:
32:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:C9:A4:D9:06:56:FA:15:AD:5F:D4:2A:D6:C2:CB:80:F4:B1:16:6B
X509v3 Authority Key Identifier:
keyid:3F:D3:A1:2D:37:BF:70:EB:94:5F:12:1D:5A:05:38:B9:8B:BC:EB:CD
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FD3A12D37BF70EB945F121D5A0538B98BBCEBCD.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3bc486tcyBavaohWf69oL8BvX2B9ATx5ZPNNTTQp38Rr/0/323830343a363932633a3a2f33322d3332203d3e20323730323533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:692c::/32
Signature Algorithm: sha256WithRSAEncryption
6d:83:c3:da:cc:3f:17:9c:ef:79:db:98:1c:82:ce:ad:18:44:
12:de:e5:1c:9f:56:f5:15:2a:1b:2c:8f:32:9b:45:67:d5:54:
22:86:93:1e:f1:e3:ed:5f:65:74:d3:37:61:68:20:c2:16:ed:
71:3e:7e:83:fe:c9:32:76:2a:aa:2a:ae:47:8f:d1:80:24:28:
9f:bb:10:61:13:fb:08:8b:1f:41:c5:b2:ac:ab:8a:6d:d4:ab:
2d:ac:93:92:a7:9f:a9:cc:b2:d3:5c:9d:eb:47:b7:93:dc:87:
48:d7:6a:50:e7:8b:76:1c:b6:a1:8f:89:ce:56:0c:97:c6:bc:
b8:0f:36:18:f1:c1:9f:85:fb:c1:eb:9b:2f:f5:cb:e2:29:a7:
cf:ba:79:71:69:47:75:9d:29:9e:4d:5e:0a:d9:d4:f2:09:a3:
ce:6f:ac:31:44:f7:54:33:57:57:8e:13:42:76:99:3f:c2:ab:
d8:fd:48:9a:10:4d:af:57:d6:72:09:78:0c:96:01:b5:45:f3:
5e:7c:5b:0c:af:60:a2:7e:02:dd:86:db:bc:af:e0:99:f1:61:
cd:e4:0e:d6:56:49:ab:c1:b4:d4:41:93:60:2c:f5:ca:ce:2a:
43:75:f8:cc:59:64:3a:c3:26:07:91:b3:97:39:26:01:67:6d:
79:c3:67:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:47:27 2025 by rpki-client