Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
File: 323830343a373330383a3a2f33322d313238203d3e20323730383931.roa (raw, json)
Hash identifier: BQtqam0glfaB4sKVd/HkwylRCcsFWgiR/89GBFcJcf8=
Subject key identifier: 1F:4A:85:75:7A:30:3C:31:6A:62:35:21:93:A0:80:57:0C:F5:44:C1
Certificate issuer: /CN=1D3F19360D7AC4E9902F8B30805ADA33235167B4
Certificate serial: 663C2DD7BB3FB7FEFDA955FC8A4FBF7BEB18ACE5
Authority key identifier: 1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
Signing time: Thu 25 Jan 2024 13:06:33 +0000
ROA not before: Thu 25 Jan 2024 13:01:33 +0000
ROA not after: Thu 23 Jan 2025 13:06:33 +0000
asID: 270891
IP address blocks: 2804:7308::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:3c:2d:d7:bb:3f:b7:fe:fd:a9:55:fc:8a:4f:bf:7b:eb:18:ac:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D3F19360D7AC4E9902F8B30805ADA33235167B4
Validity
Not Before: Jan 25 13:01:33 2024 GMT
Not After : Jan 23 13:06:33 2025 GMT
Subject: CN=1F4A85757A303C316A62352193A080570CF544C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:01:3f:bf:e3:c8:06:2c:f1:07:88:51:b7:b2:
a0:90:cb:35:ef:7c:78:7f:bf:62:fc:8f:a9:2b:8e:
8e:c6:12:1b:87:c2:0f:6f:1c:6b:15:b0:37:7a:a8:
00:83:eb:49:fb:24:ef:89:46:c6:34:e0:d7:89:21:
61:b4:85:91:a8:a1:0e:a2:af:64:92:dd:ff:bc:12:
d7:ee:44:34:aa:19:ef:99:e4:59:dc:7c:3c:28:57:
35:7c:c8:21:4b:4a:04:1d:83:36:7a:00:fc:38:08:
3e:27:44:63:27:e8:38:d5:1f:46:f4:0b:4e:43:a4:
11:bd:53:ae:af:83:9e:cf:ce:2b:d3:d1:66:e6:cc:
3b:c4:50:0b:f7:28:3f:0a:26:18:bc:be:a8:a4:f1:
ee:97:c8:9d:36:7e:02:19:17:ee:a9:2a:be:4f:52:
50:b3:c6:9b:64:ef:0d:f2:ff:f9:23:7b:3c:ca:3a:
c3:f2:a9:7b:af:ef:4a:20:4a:cb:ed:05:81:29:5c:
4f:70:a3:32:57:dc:06:c3:03:aa:04:0e:66:41:a9:
f7:78:14:fd:17:8c:ba:12:18:9d:77:5d:f4:2a:d9:
c6:b4:11:89:04:d3:18:3c:05:5a:1e:7c:20:4d:84:
bd:ce:5e:6e:e4:0f:2c:a9:7c:26:d1:01:ac:5f:da:
c5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:85:75:7A:30:3C:31:6A:62:35:21:93:A0:80:57:0C:F5:44:C1
X509v3 Authority Key Identifier:
keyid:1D:3F:19:36:0D:7A:C4:E9:90:2F:8B:30:80:5A:DA:33:23:51:67:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1D3F19360D7AC4E9902F8B30805ADA33235167B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4CfmcvY4WqNvzqyqfTrBtJHpdUF9Ks3hkG1t9fbBKkVv/0/323830343a373330383a3a2f33322d313238203d3e20323730383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7308::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1e:c0:e5:a9:8e:54:a9:42:85:ea:ca:03:13:c8:66:16:fa:
f9:db:46:c1:29:1e:64:d7:dd:28:01:d7:09:57:81:b2:78:2e:
61:96:ae:97:11:32:09:9d:f6:bb:fc:01:5d:d0:f4:ba:5a:88:
40:20:73:8e:de:5e:fb:44:06:02:4e:33:08:4e:0b:38:ef:4a:
a8:6a:5f:8a:b7:59:87:28:35:23:c9:55:3e:fe:96:9a:93:78:
cc:d5:bc:11:a9:8b:2a:17:b5:83:85:12:5b:d1:27:3c:62:56:
db:fd:aa:63:80:af:f3:45:29:48:2e:56:3d:ea:04:95:cd:f8:
6c:bf:03:2f:b9:40:83:30:e6:2a:5f:e6:9d:17:8c:5b:4e:64:
e8:d1:f0:e5:1e:b1:ec:ea:a5:c3:5c:0e:75:ab:c9:f9:c2:12:
ff:16:48:85:d8:61:24:a8:2c:bd:57:64:90:03:06:35:fa:23:
af:43:6f:15:8b:bb:22:1c:01:4b:93:5b:22:02:c7:1f:9d:e4:
5b:3a:c3:19:ee:5e:88:a7:2c:ec:80:e8:d0:81:43:e1:8f:19:
99:c4:eb:52:15:41:35:80:8e:df:1a:62:ce:de:a5:8f:fd:7c:
78:82:8d:ad:df:e3:39:b2:9a:91:83:6c:49:6d:e4:b9:84:a4:
a9:5f:8a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 23:19:09 2025 by rpki-client