Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
File: 323830343a383666343a3a2f33342d3334203d3e20323732363737.roa (raw, json)
Hash identifier: 8AAR0xUIu4J+HKbCCX/zgMfpXO/F9BzLHhea6iVl+3g=
Subject key identifier: D8:D3:E5:F1:BE:65:46:89:DF:E4:5C:1D:C3:C5:37:92:C2:DF:21:71
Certificate issuer: /CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Certificate serial: 7A8CE5C20E99C90C666A2D2CBD91DE678E7FDAFE
Authority key identifier: 82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
Signing time: Fri 24 Jan 2025 23:57:19 +0000
ROA not before: Fri 24 Jan 2025 23:52:19 +0000
ROA not after: Fri 23 Jan 2026 23:57:19 +0000
asID: 272677
IP address blocks: 2804:86f4::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:8c:e5:c2:0e:99:c9:0c:66:6a:2d:2c:bd:91:de:67:8e:7f:da:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672
Validity
Not Before: Jan 24 23:52:19 2025 GMT
Not After : Jan 23 23:57:19 2026 GMT
Subject: CN=D8D3E5F1BE654689DFE45C1DC3C53792C2DF2171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:48:ad:0b:a2:47:c9:78:9b:93:55:76:52:
24:bd:ea:fc:35:3b:63:5b:cf:c0:ec:f8:46:b3:61:
d6:a6:f9:5a:3f:a8:0a:0b:25:6c:1e:ce:09:7d:f8:
bc:dc:61:96:a7:12:84:bc:03:3f:af:ff:a7:89:05:
bc:80:38:4f:81:b1:4c:87:c7:a6:2b:0a:ec:ec:20:
77:85:b5:23:f7:49:f1:05:a0:4a:51:da:cb:09:c3:
6c:c3:b0:8c:52:5b:7f:57:9e:6b:46:4b:57:9e:9e:
d2:fc:4e:1b:a2:ec:f9:13:6f:f2:97:26:7b:e2:8a:
bb:11:ee:04:22:f3:3e:0f:57:ea:e6:16:5b:69:f7:
f6:35:c7:1c:68:ee:5f:2a:1c:73:db:80:8f:d9:2e:
dd:75:50:05:d4:fd:7e:2b:c3:bb:9b:ed:20:ee:1c:
7e:42:c3:22:60:6c:8c:ad:d9:bf:fe:c0:9b:db:8c:
16:0f:74:64:de:e8:ae:4d:25:0d:60:ed:ec:93:b4:
e1:01:21:8e:44:be:dd:d4:bc:57:8c:49:03:2f:93:
11:fd:b7:38:30:43:d4:a9:29:e4:68:00:62:27:28:
a5:74:93:39:81:44:8b:5f:f5:13:bf:54:ba:aa:c4:
1e:26:54:26:7f:4e:dd:14:c9:60:d5:5b:f5:05:d4:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:E5:F1:BE:65:46:89:DF:E4:5C:1D:C3:C5:37:92:C2:DF:21:71
X509v3 Authority Key Identifier:
keyid:82:38:78:2B:EB:9C:FE:9F:D5:A1:A3:D7:9C:EF:AA:A3:47:B3:16:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8238782BEB9CFE9FD5A1A3D79CEFAAA347B31672.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3mJW9b3ywV2jMsRMX5RV2R93AVf727LCgjUDsjhZpJRT/0/323830343a383666343a3a2f33342d3334203d3e20323732363737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:86f4::/34
Signature Algorithm: sha256WithRSAEncryption
8c:e0:dc:8a:ca:55:e3:bd:40:fa:e8:fa:e2:73:5c:7b:c7:61:
5a:23:e6:fb:40:6f:3c:98:53:ad:d3:ba:c6:cd:b6:70:97:9c:
52:ac:39:bb:27:25:de:e9:23:17:59:b0:6d:47:93:b7:66:90:
7d:eb:1c:ed:c5:21:1d:57:e2:58:68:a5:a7:e7:36:04:e1:d5:
ab:64:95:4f:ad:bd:6e:b0:e4:0a:c3:33:23:75:d2:85:11:83:
7f:b1:78:14:d3:64:6b:e6:aa:8b:8a:ef:1a:65:23:38:55:c1:
4f:46:56:9a:33:6c:de:15:6b:81:d9:72:8b:60:ad:f0:be:c7:
b4:ab:b9:47:b7:19:18:3f:66:ee:a2:77:6a:cd:fb:86:8d:c7:
a4:a5:0b:c1:54:9b:64:51:4d:1a:95:bf:e6:d1:d5:99:e9:74:
93:05:c2:ec:3a:1c:4c:ea:71:ce:8c:d1:ef:9f:7f:8c:8d:37:
05:30:32:1d:3f:d6:59:ed:4b:c1:0c:f4:14:0b:d4:f5:94:5b:
d7:ad:bc:ba:8d:81:71:fd:ad:a7:42:8b:7e:e4:31:4c:c4:b7:
65:0f:0d:da:17:2c:cd:7b:10:be:37:fc:53:da:55:78:d7:c6:
78:d4:d6:b7:a8:2d:a8:5e:be:96:01:4e:2a:e7:f3:be:6f:8e:
27:10:d1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:20 2025 by rpki-client