Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
File: 323830343a363538303a3a2f33322d3332203d3e20323639343935.roa (raw, json)
Hash identifier: o8WKUL0l6TtoMODsslTBVN/aWbaqmB4aXi5Kcc0xJX4=
Subject key identifier: 89:D9:D0:EB:22:0E:A8:3A:CB:54:02:42:53:3D:69:44:FD:08:22:E7
Certificate issuer: /CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Certificate serial: 3C3FFC7D0B77319F1AF9BB2690BC24EE33E0FCD7
Authority key identifier: 14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
Signing time: Wed 03 Apr 2024 19:13:49 +0000
ROA not before: Wed 03 Apr 2024 19:08:49 +0000
ROA not after: Wed 02 Apr 2025 19:13:49 +0000
asID: 269495
IP address blocks: 2804:6580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:3f:fc:7d:0b:77:31:9f:1a:f9:bb:26:90:bc:24:ee:33:e0:fc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE
Validity
Not Before: Apr 3 19:08:49 2024 GMT
Not After : Apr 2 19:13:49 2025 GMT
Subject: CN=89D9D0EB220EA83ACB540242533D6944FD0822E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:68:71:5b:a0:6f:8a:bc:1f:8d:f7:3f:8c:
36:b7:54:32:31:c5:73:52:d2:67:64:44:40:49:12:
2b:93:90:3d:4f:cf:35:15:44:dc:4e:6e:b3:47:89:
ee:19:a4:63:17:d7:e7:d8:49:92:74:cf:a0:51:1a:
86:86:59:cd:34:53:b8:65:d5:44:c7:29:e1:ae:3e:
1a:51:76:f7:c8:54:7b:e0:47:e9:5f:84:3f:e8:d4:
e3:ce:38:17:a9:10:0e:68:d1:e1:f3:c5:a5:c0:1c:
0c:d1:8e:c0:8e:de:5a:5e:79:e5:9c:ee:2b:93:4d:
ab:a9:5f:25:1e:09:9e:3f:5a:40:c7:c1:ba:48:4c:
d3:3c:72:e9:38:74:e3:54:5b:b0:0a:84:53:c6:5b:
c5:5a:3b:71:34:ce:45:9f:aa:a2:a0:0f:ed:a5:db:
4f:bb:83:92:b3:05:59:00:d8:3e:c4:b2:27:9e:b3:
cb:11:32:15:60:c7:b2:26:17:0a:66:40:5b:cd:25:
6d:10:cc:e6:30:bd:43:ca:92:26:7b:d0:31:c2:4e:
a2:f8:33:a2:f2:bd:37:37:1e:f4:89:12:13:ab:8d:
dc:34:51:27:f8:8c:eb:5e:14:35:7b:09:55:d9:7b:
61:d8:32:6c:6c:cd:63:ea:cb:11:ec:24:e5:32:b7:
43:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D9:D0:EB:22:0E:A8:3A:CB:54:02:42:53:3D:69:44:FD:08:22:E7
X509v3 Authority Key Identifier:
keyid:14:78:A4:5D:5A:03:BB:E4:9C:7B:36:C5:30:7A:5C:9B:DB:39:F8:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1478A45D5A03BBE49C7B36C5307A5C9BDB39F8EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/1/323830343a363538303a3a2f33322d3332203d3e20323639343935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6580::/32
Signature Algorithm: sha256WithRSAEncryption
88:12:a7:2f:48:ac:d7:4f:43:d6:35:fa:6e:46:33:18:78:6b:
9b:38:bf:c9:43:7e:4d:4d:c2:ac:72:46:35:6e:6e:3f:b3:76:
3d:76:9f:12:ef:bf:3d:f9:e8:72:06:d7:55:3f:e2:d8:08:35:
3c:03:18:5a:39:64:30:6d:dd:91:e0:59:55:01:1d:3d:ec:12:
18:3c:38:16:88:af:60:5f:2c:7b:4d:9f:31:25:f5:c0:6c:45:
0c:28:03:81:9e:d8:e7:af:87:75:e1:65:5a:f0:59:74:29:e9:
31:b6:53:4a:1f:1b:a6:44:7b:6c:f9:a9:5a:90:bf:1a:9c:8b:
c1:c4:3e:38:fa:e6:71:aa:1c:56:d9:69:db:e4:18:34:e2:4b:
68:85:45:79:8a:84:42:bb:52:54:af:3a:50:e8:3c:b2:b0:af:
a9:f1:58:0d:1e:09:d6:7f:bd:da:dd:b9:f1:28:54:6a:14:94:
fe:04:61:e3:4e:39:af:47:cf:81:db:64:78:21:a9:6b:2c:1d:
0c:cd:bb:2d:34:8d:54:c5:1c:11:7f:48:ef:f8:1d:42:85:7c:
f3:4b:2d:37:d5:04:cb:08:ea:08:d6:60:71:9b:18:74:60:5c:
79:38:82:98:3f:92:dc:99:ae:8a:cc:cf:bc:66:42:10:14:a3:
f6:a7:9b:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 11:52:39 2025 by rpki-client