Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3332203d3e20323635343130.roa
File: 323830343a333361383a3a2f33322d3332203d3e20323635343130.roa (raw, json)
Hash identifier: EehbbrVUKmbpkBb4kpGY1+3PEtPDQvb27abaVhWjiCg=
Subject key identifier: F3:18:08:53:22:71:CA:0D:15:22:20:9D:AD:74:69:43:41:46:2C:DC
Certificate issuer: /CN=54C4052D39431D563CCB2D911DC264CD61964490
Certificate serial: 7EC3EB217DE1AB337DAEB637AA1433B267F21ECB
Authority key identifier: 54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3332203d3e20323635343130.roa
Signing time: Thu 07 Mar 2024 16:26:38 +0000
ROA not before: Thu 07 Mar 2024 16:21:38 +0000
ROA not after: Thu 06 Mar 2025 16:26:38 +0000
asID: 265410
IP address blocks: 2804:33a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:c3:eb:21:7d:e1:ab:33:7d:ae:b6:37:aa:14:33:b2:67:f2:1e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54C4052D39431D563CCB2D911DC264CD61964490
Validity
Not Before: Mar 7 16:21:38 2024 GMT
Not After : Mar 6 16:26:38 2025 GMT
Subject: CN=F31808532271CA0D1522209DAD74694341462CDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:9f:46:0c:95:a6:40:0c:49:a4:4a:63:d6:ba:
b6:af:78:92:84:04:b3:42:42:44:10:2a:59:54:7a:
06:94:49:c7:3b:fe:a8:16:05:85:28:20:88:d5:b1:
f2:cf:b1:54:ea:fa:da:a2:85:c3:c3:08:82:69:7e:
6e:99:90:dc:ca:e6:7e:14:90:9a:6d:e3:cb:be:ad:
54:77:0c:18:ae:5a:90:29:54:1e:72:c3:28:5e:8b:
87:99:f1:6c:1c:05:3e:a5:a0:6c:27:05:0d:1b:d3:
af:56:62:c1:49:c3:0f:f4:28:17:18:14:b7:24:c4:
9a:bf:6b:a7:3a:7f:98:6f:fa:96:10:ea:70:75:20:
25:9c:2d:e7:ad:5c:f1:64:74:28:64:d3:12:06:0e:
09:0c:44:49:a9:ce:a4:23:f1:fc:4e:c3:bd:ed:f2:
bd:50:76:b1:01:37:65:fc:fb:52:bc:a3:db:34:b9:
95:a6:8d:64:79:8a:e5:df:e9:1f:e6:44:bf:4b:88:
8f:1c:03:55:63:42:56:5f:6f:ff:23:bb:24:b2:38:
87:9c:3f:98:b3:9c:d8:d5:8a:59:04:96:e2:4b:89:
29:b0:32:15:b6:8a:22:14:3e:d0:48:e2:13:f7:91:
c6:53:0e:d6:12:73:ca:13:87:9d:b2:b3:28:09:66:
77:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:18:08:53:22:71:CA:0D:15:22:20:9D:AD:74:69:43:41:46:2C:DC
X509v3 Authority Key Identifier:
keyid:54:C4:05:2D:39:43:1D:56:3C:CB:2D:91:1D:C2:64:CD:61:96:44:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/54C4052D39431D563CCB2D911DC264CD61964490.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/54C4052D39431D563CCB2D911DC264CD61964490.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/0/323830343a333361383a3a2f33322d3332203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33a8::/32
Signature Algorithm: sha256WithRSAEncryption
13:57:c0:0f:f3:15:9c:b1:04:73:3e:27:cb:3b:67:1e:37:55:
b8:3c:e2:ec:10:03:cb:0d:e2:a9:0b:d1:7f:fa:fc:b9:52:06:
f1:5b:90:29:89:0e:62:78:e4:a2:4c:4d:fc:45:1b:04:f3:fe:
be:04:a9:7b:e3:29:77:cb:5f:33:3f:d9:95:de:b6:5a:4d:a6:
55:8d:cf:dc:0a:ec:87:c9:e4:40:8b:4b:64:52:f5:98:e5:14:
66:81:9e:bf:7f:c0:6e:5f:a0:97:82:69:05:bf:c1:fe:79:a6:
a8:03:7a:7a:15:e0:c5:b8:2a:4a:13:f1:f8:41:cb:db:1f:b6:
24:1d:88:7b:31:b3:9e:13:14:da:e1:82:97:7e:47:21:c0:dd:
bb:60:a6:24:2e:96:46:e6:64:73:24:cf:7a:5d:e2:06:bc:60:
ea:22:31:92:c2:0d:09:7c:8b:eb:fe:9b:8f:0f:75:fc:15:09:
3e:9d:18:bc:6b:57:ce:49:a6:95:a3:db:af:d1:98:89:60:af:
ab:f8:c3:47:80:75:75:d8:26:4d:da:7c:8c:38:22:4d:8f:87:
17:f1:d1:e3:5c:22:3b:22:fd:5a:aa:fe:d1:9a:4c:21:83:20:
7d:cf:c7:96:d5:4b:b3:a4:68:78:92:cb:4c:6c:de:ff:60:b9:
1a:82:0f:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:32:59 2025 by rpki-client