Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
File: 323830343a313034343a3a2f33322d3332203d3e20323633363237.roa (raw, json)
Hash identifier: LNe2AGLfEt4K49dn7oZuQLk/24RMQsJnP96aF3dUZmc=
Subject key identifier: 78:14:5D:DB:CE:E3:53:85:40:70:FC:93:07:6B:EB:8F:44:69:6A:93
Certificate issuer: /CN=11A01506231611C87461442475B1401AD5DE38D2
Certificate serial: 0F5114F803F63C212A2FC6D5F473972A81C5F3A6
Authority key identifier: 11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
Signing time: Tue 25 Mar 2025 20:13:30 +0000
ROA not before: Tue 25 Mar 2025 20:08:30 +0000
ROA not after: Tue 24 Mar 2026 20:13:30 +0000
asID: 263627
IP address blocks: 2804:1044::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:51:14:f8:03:f6:3c:21:2a:2f:c6:d5:f4:73:97:2a:81:c5:f3:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11A01506231611C87461442475B1401AD5DE38D2
Validity
Not Before: Mar 25 20:08:30 2025 GMT
Not After : Mar 24 20:13:30 2026 GMT
Subject: CN=78145DDBCEE353854070FC93076BEB8F44696A93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:72:7a:2a:22:9f:e8:0b:a1:2c:89:3b:57:90:
b0:4a:14:4d:c8:ac:1b:d8:c5:60:46:44:e4:43:3a:
6e:cb:11:79:b0:71:71:06:0f:25:04:ff:16:7a:00:
4c:91:d7:bd:a7:0e:ac:b3:06:ba:d8:f7:80:47:64:
b0:38:e2:97:41:54:70:da:17:e9:1d:fd:d1:9c:0b:
bf:74:b2:a3:51:7b:56:a4:a1:4e:67:40:fe:bb:fc:
8e:67:9a:a5:b8:ae:66:bf:35:78:ac:31:57:72:fd:
ff:0a:43:63:fe:ab:a7:66:68:52:e9:2b:c8:ae:ad:
26:16:c3:37:19:f7:82:ca:49:d5:f6:cd:d1:77:0b:
83:e0:b1:11:39:62:a8:e6:8b:d6:a6:dc:72:e5:5b:
7c:5f:15:49:d4:01:8e:4d:32:87:df:f0:6a:47:0c:
f8:54:16:d7:68:fb:4e:57:3f:29:74:06:b1:e7:38:
bc:85:ac:1a:bc:0a:8f:59:86:34:25:d9:17:d0:ac:
72:12:2e:31:48:ce:b6:8e:9e:04:44:d3:b3:d7:02:
53:87:e9:a2:03:aa:8e:88:aa:27:5f:77:72:96:ef:
37:27:f4:66:15:8c:e5:fe:54:03:a6:6e:a2:26:1f:
15:38:67:eb:bf:8f:50:fb:81:d4:85:47:0b:90:39:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:14:5D:DB:CE:E3:53:85:40:70:FC:93:07:6B:EB:8F:44:69:6A:93
X509v3 Authority Key Identifier:
keyid:11:A0:15:06:23:16:11:C8:74:61:44:24:75:B1:40:1A:D5:DE:38:D2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/11A01506231611C87461442475B1401AD5DE38D2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11A01506231611C87461442475B1401AD5DE38D2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3yjGaXpjhPnDEXhRq8h8dQT8u3qbvCzjSmTVv3xTLzWi/0/323830343a313034343a3a2f33322d3332203d3e20323633363237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1044::/32
Signature Algorithm: sha256WithRSAEncryption
94:d6:a7:d5:ea:f3:4b:94:02:1d:51:40:83:fe:7d:53:af:63:
c6:2c:8f:9d:8e:c3:e9:26:b4:f6:df:a9:82:45:05:21:a7:23:
df:8a:b2:ee:ed:9a:7a:df:1c:03:3f:70:5a:10:1a:32:86:50:
0d:3b:2e:e4:ed:76:14:3c:02:75:cd:07:40:d4:ae:7c:cc:c9:
9a:76:10:da:29:95:86:de:ce:e4:8d:f9:df:a0:0e:5d:50:c8:
c5:cc:1c:c6:e2:a5:b6:0f:aa:bd:5a:ba:e1:6a:fa:07:ed:7c:
eb:f8:96:c7:46:46:d2:ba:85:99:61:62:61:09:e5:e5:0f:fa:
aa:77:bd:24:a0:dc:4c:ed:5b:33:5c:71:db:11:9c:ef:34:ea:
34:d1:12:5b:6b:1f:d5:d2:c7:7a:f1:2a:6e:0d:7f:7c:75:54:
dc:c6:21:04:26:78:28:f4:e3:27:86:37:17:26:a1:46:20:99:
00:98:9a:02:bc:d3:48:ff:15:0f:b3:19:be:8b:21:f3:32:c2:
95:42:f0:f2:e0:ec:26:d8:e1:42:68:c0:69:fd:c3:76:d8:aa:
89:8c:22:84:5d:f0:c3:a9:0c:04:bf:58:d6:65:58:d4:fe:b5:
de:d0:04:ee:f9:99:07:9d:7a:89:b8:79:b0:48:b3:1a:a0:8d:
17:97:b6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:06:21 2025 by rpki-client