Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3333203d3e20323730373337.roa
File: 323830343a373039633a3a2f33322d3333203d3e20323730373337.roa (raw, json)
Hash identifier: FEW15OyC7boiXLBVNANxop3UGYDXBHAZQYYVw21Oacw=
Subject key identifier: 11:A4:C4:E6:FF:B4:2E:6B:55:0E:9E:9D:24:9F:CC:65:3C:D2:19:0C
Certificate issuer: /CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Certificate serial: 63848B079ACA378778786E08E669B2AF6BE394AE
Authority key identifier: 29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3333203d3e20323730373337.roa
Signing time: Sun 29 Dec 2024 13:35:32 +0000
ROA not before: Sun 29 Dec 2024 13:30:32 +0000
ROA not after: Sun 28 Dec 2025 13:35:32 +0000
asID: 270737
IP address blocks: 2804:709c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:84:8b:07:9a:ca:37:87:78:78:6e:08:e6:69:b2:af:6b:e3:94:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29C31657A960C2E935AE54CDF5F84A913CCF19AE
Validity
Not Before: Dec 29 13:30:32 2024 GMT
Not After : Dec 28 13:35:32 2025 GMT
Subject: CN=11A4C4E6FFB42E6B550E9E9D249FCC653CD2190C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:8c:7b:5b:ed:5a:66:ae:09:48:77:95:ed:d0:
2e:92:da:f4:39:2e:86:2e:1f:21:b3:00:cb:a7:8d:
25:8b:61:dd:3e:b0:0a:48:df:ec:c5:ca:ca:a5:29:
32:29:76:88:ff:9f:76:25:a5:24:07:35:9e:bb:dc:
ba:be:c4:e7:eb:63:d4:c3:f4:37:84:d3:23:6c:0d:
7d:a7:b5:49:a7:68:08:6b:dd:e1:43:a9:79:41:e6:
ba:41:b3:db:fa:b5:ef:14:95:1e:ac:eb:0d:21:d2:
20:73:ba:b1:4c:20:4b:cf:c1:7f:cf:9d:ac:cc:d7:
bf:3b:6a:e3:9e:eb:5c:49:bc:e9:13:1e:e3:53:c4:
fa:26:ae:0d:b2:29:8f:bd:73:90:7b:9a:68:ca:75:
00:a8:90:47:61:c7:f1:d9:b9:69:3a:0d:b2:aa:a1:
be:77:b7:e9:fd:3c:92:e5:b8:2a:bb:1a:b6:92:53:
4b:b6:79:9f:12:eb:5e:56:a5:03:42:cf:08:99:85:
2d:60:92:4f:54:40:03:d0:d3:66:6c:8b:2f:f4:6a:
a5:ba:18:ca:a1:39:fe:50:aa:92:ba:72:f3:81:c4:
71:67:a9:e0:df:45:4a:34:c7:3a:48:de:73:49:27:
c1:50:a3:d5:58:8e:2c:4f:5a:9c:25:a0:7b:04:19:
d6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A4:C4:E6:FF:B4:2E:6B:55:0E:9E:9D:24:9F:CC:65:3C:D2:19:0C
X509v3 Authority Key Identifier:
keyid:29:C3:16:57:A9:60:C2:E9:35:AE:54:CD:F5:F8:4A:91:3C:CF:19:AE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/29C31657A960C2E935AE54CDF5F84A913CCF19AE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/29C31657A960C2E935AE54CDF5F84A913CCF19AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4oKDjTtuVfRxybQECZfMRov5Z6DpryF7MyQN17v2sZKk/0/323830343a373039633a3a2f33322d3333203d3e20323730373337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:709c::/32
Signature Algorithm: sha256WithRSAEncryption
74:1b:91:55:c0:24:91:d6:ae:19:d5:5a:34:28:d7:ef:32:89:
23:9d:a6:ce:fa:78:a5:92:78:cf:31:58:c4:0b:e9:a0:30:bb:
8b:c2:88:22:26:17:a2:c2:fb:56:88:67:a3:2a:10:36:1f:82:
78:ea:f2:9c:9d:df:04:b9:c8:0d:46:3b:11:85:ac:c0:ce:e5:
61:97:e8:99:b9:28:d2:e3:ed:24:f2:cf:e2:7b:30:5a:d3:ae:
31:72:63:17:ca:34:95:1a:10:ff:97:b2:64:92:aa:6c:97:51:
a0:43:d7:79:bb:7d:2d:e4:7c:4d:9b:c1:d7:bf:79:6f:ee:d8:
35:8a:f4:e8:09:8b:c6:ef:7d:04:9b:fa:88:31:22:6e:5f:e3:
da:2f:f3:d9:40:31:a0:ee:56:da:52:d6:00:58:47:03:2b:62:
eb:34:4f:0c:01:f9:76:ad:bb:f6:5a:62:81:e1:80:c8:3b:8d:
cc:4b:52:3e:4a:3c:8e:fd:63:cf:32:e9:6e:de:b4:66:64:42:
78:4c:68:ad:f8:98:ec:21:dc:c6:25:ac:ea:70:16:be:28:a0:
d4:d6:f8:03:16:5b:ce:2b:30:ac:4e:94:0a:33:88:66:cf:26:
18:89:0d:3c:6f:55:cb:39:6e:18:30:06:a1:02:1a:68:8b:34:
66:12:15:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:54 2025 by rpki-client