Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
File: 323830343a333361383a3a2f33322d3430203d3e20323635343130.roa (raw, json)
Hash identifier: mIEIpJLytmdvF6l1n0YdH0hZjzYErf96I5HJw9ui8ZU=
Subject key identifier: 05:8E:B5:69:42:D3:1A:FD:D8:B4:54:BE:DF:30:44:CA:AD:82:FB:7A
Certificate issuer: /CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Certificate serial: 47A999AE9CE59F0855A3892A11E2A369D01DE5A5
Authority key identifier: 56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
Signing time: Thu 06 Mar 2025 16:33:24 +0000
ROA not before: Thu 06 Mar 2025 16:28:24 +0000
ROA not after: Thu 05 Mar 2026 16:33:24 +0000
asID: 265410
IP address blocks: 2804:33a8::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a9:99:ae:9c:e5:9f:08:55:a3:89:2a:11:e2:a3:69:d0:1d:e5:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56946D99ABCDBF967F01D2AAA6149A65D77D6D7E
Validity
Not Before: Mar 6 16:28:24 2025 GMT
Not After : Mar 5 16:33:24 2026 GMT
Subject: CN=058EB56942D31AFDD8B454BEDF3044CAAD82FB7A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e4:7f:63:fe:7d:68:a9:94:51:ba:54:06:5d:
23:91:08:90:e1:f6:7a:84:ab:f0:25:f1:d7:d9:f3:
00:52:f2:19:7e:cc:b3:3a:32:84:47:ba:ba:3f:76:
af:8a:ec:fe:71:4a:dd:f3:16:0a:97:15:a2:b4:a1:
ad:a4:ce:ff:75:c8:18:ae:53:79:8c:c4:fa:43:33:
c1:63:0c:32:ed:1f:f9:b9:a3:76:95:78:8f:80:b6:
94:55:00:4c:e6:13:07:f3:21:02:c2:ce:97:8f:e6:
5b:a2:2e:24:13:2b:f8:3f:3c:13:ca:9f:65:d9:b8:
4e:10:1f:af:be:45:8f:89:1d:12:e7:2e:d6:61:a8:
1a:c0:34:1e:9d:d9:6e:f3:87:6f:e1:b9:8e:fa:97:
95:1a:29:b9:85:92:26:51:dc:73:65:49:77:d9:e6:
ad:0e:74:2d:cd:bb:35:a7:0c:25:65:3c:7e:4a:6d:
6e:45:85:cb:0c:4d:af:0b:94:51:fb:62:97:19:0d:
16:db:3d:b9:e5:03:07:c2:cd:cd:76:d8:40:69:cc:
98:51:c2:f2:b8:0c:46:5e:76:55:d1:b4:b9:50:6f:
e4:5f:fb:d5:f3:16:4b:68:ad:22:ab:0c:b1:b7:3d:
fe:05:95:f1:05:ef:76:69:63:40:bb:64:7f:6d:6b:
5f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:8E:B5:69:42:D3:1A:FD:D8:B4:54:BE:DF:30:44:CA:AD:82:FB:7A
X509v3 Authority Key Identifier:
keyid:56:94:6D:99:AB:CD:BF:96:7F:01:D2:AA:A6:14:9A:65:D7:7D:6D:7E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/56946D99ABCDBF967F01D2AAA6149A65D77D6D7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3qZjZLz8z3onqiVKn4YaWELrPTReQUFyGPxqBq227L6w/1/323830343a333361383a3a2f33322d3430203d3e20323635343130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:33a8::/32
Signature Algorithm: sha256WithRSAEncryption
cf:31:cf:f4:aa:ee:50:ac:43:da:44:34:21:d3:43:15:45:85:
a8:60:4c:86:32:a2:c8:c5:d4:01:19:b4:ac:ac:ab:66:b5:b2:
c8:df:7b:01:fd:d1:eb:21:29:0c:cd:2f:46:9a:64:04:a2:6b:
ad:3c:96:f8:53:a4:27:98:8b:90:2a:e5:a8:a3:89:95:7d:e5:
bc:a7:3a:41:13:34:8e:25:d7:cd:fe:65:af:1c:88:63:09:68:
c5:fb:52:8a:5d:e1:9b:40:26:1d:14:8d:b9:1f:02:6c:38:ae:
56:21:48:3e:88:50:6b:cf:2d:04:b3:0d:e8:03:81:25:1b:e7:
37:59:be:fe:bc:f6:3a:a7:2c:06:e9:7f:c7:6a:4d:d3:57:aa:
9c:6e:49:a4:83:87:06:4b:aa:11:bd:c1:ba:fd:ef:18:10:9b:
f8:d0:b6:f5:29:8f:b0:ee:b8:3f:03:e6:f8:a6:5e:9b:de:78:
e5:9d:fb:e0:94:96:dc:68:06:cb:09:9a:65:cc:06:81:42:6c:
15:a7:72:5c:6b:25:7b:1a:55:4d:f4:e4:31:ce:aa:cc:6e:5d:
7e:90:e2:f3:19:0e:15:3b:9b:41:e6:46:a7:1e:03:97:8e:27:
e5:28:9f:28:ed:52:9d:ca:2c:d5:8f:6e:c4:a2:7c:5c:b8:a0:
24:89:32:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:52 2025 by rpki-client