Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
File: 323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa (raw, json)
Hash identifier: fNZ/9r46FClcYJgFPwN7V/mAYWUg10WZ4IB5KtcTfcI=
Subject key identifier: 40:86:55:3B:FB:1E:90:2A:3E:64:34:A3:35:E8:87:7E:08:67:78:8C
Certificate issuer: /CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Certificate serial: 6F08E8B5AEBE9D75A8D1DC63E0C84749B004E6EA
Authority key identifier: 2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
Signing time: Fri 14 Feb 2025 17:48:28 +0000
ROA not before: Fri 14 Feb 2025 17:43:28 +0000
ROA not after: Fri 13 Feb 2026 17:48:28 +0000
asID: 266544
IP address blocks: 2804:3da4:1000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:08:e8:b5:ae:be:9d:75:a8:d1:dc:63:e0:c8:47:49:b0:04:e6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D1BC37D847D51FC76776A8E2A32C851B391DDEF
Validity
Not Before: Feb 14 17:43:28 2025 GMT
Not After : Feb 13 17:48:28 2026 GMT
Subject: CN=4086553BFB1E902A3E6434A335E8877E0867788C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2c:fc:9c:e1:17:2c:d8:b9:b0:d2:03:57:99:
5f:72:b1:cd:00:de:4f:8c:72:4b:b5:4f:77:e7:32:
d5:96:cd:4a:8d:7d:7c:93:40:6b:3e:4c:6e:db:1c:
3a:ba:b0:94:fc:3d:53:03:99:f7:45:a7:bc:3a:0a:
5c:23:ca:8e:d9:81:e3:64:7e:2c:4b:00:a3:08:39:
f3:fa:73:28:3f:2d:71:d0:6b:8e:5d:de:bc:62:10:
d6:3c:a8:b1:62:2a:c9:fc:05:37:4c:1f:dc:34:1f:
f0:a0:6e:92:75:62:fd:4e:c2:65:38:d5:d7:28:23:
38:42:16:13:03:c4:17:17:cf:f2:a5:86:66:17:37:
38:63:26:ed:60:54:e6:34:20:74:5d:31:5d:76:3a:
39:64:5b:b3:c2:ca:7e:cb:08:a2:a8:ae:b1:d2:da:
55:29:56:2e:4f:52:dd:08:df:67:4e:8d:a1:1b:55:
36:1f:ef:f1:44:82:15:40:6c:51:4b:29:33:ac:6e:
bf:d1:4f:05:b9:35:95:36:7d:d4:16:9d:ed:24:e1:
cb:c4:9a:de:3f:a2:04:4f:e4:20:0c:59:08:f9:81:
5d:ed:74:95:84:ff:61:e0:b1:0d:ed:5e:87:ff:fb:
23:c2:41:d2:7f:a1:5f:ec:47:48:63:0c:0f:46:5b:
11:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:86:55:3B:FB:1E:90:2A:3E:64:34:A3:35:E8:87:7E:08:67:78:8C
X509v3 Authority Key Identifier:
keyid:2D:1B:C3:7D:84:7D:51:FC:76:77:6A:8E:2A:32:C8:51:B3:91:DD:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D1BC37D847D51FC76776A8E2A32C851B391DDEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5X5L7VeHcHtN19pEZrWuL6Gif3DvMRo3AQSJ9gLY6xLn/0/323830343a336461343a313030303a3a2f34302d3430203d3e20323636353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3da4:1000::/40
Signature Algorithm: sha256WithRSAEncryption
41:58:88:48:25:4e:d1:b5:c8:6f:12:9e:3a:83:59:49:bb:1e:
47:8a:57:b2:c9:07:b6:29:ea:2f:38:63:69:bc:71:ee:a9:06:
2a:fd:bc:02:f1:f7:e3:c3:8a:ce:6c:3c:a6:70:f1:cb:8c:78:
10:d8:a0:7c:f6:9e:bd:07:db:b9:03:9d:82:5b:25:67:27:eb:
68:6f:50:5e:a3:dc:6f:10:ac:35:1d:b4:14:e7:38:68:4c:ef:
c4:a1:7c:e1:a0:70:f5:54:73:bb:ce:f9:2b:ae:b4:33:5d:8f:
d3:23:7f:da:a5:c7:93:7f:c6:52:17:3a:77:dd:b8:a2:9e:93:
49:5e:df:32:e9:cd:ac:47:f4:41:21:f7:eb:cf:d1:91:e3:94:
b0:c7:f1:bb:7c:14:9c:83:73:a0:3d:38:ad:82:83:da:88:b2:
01:35:4b:e2:0d:8b:04:30:ed:79:2e:04:88:38:6c:a9:5d:0c:
86:05:4a:59:77:86:61:59:1f:e9:7c:43:d9:c5:5c:f4:79:b9:
a8:98:90:ce:71:d0:9a:46:78:d0:f7:aa:ac:a2:ec:02:62:b5:
76:1b:75:c8:92:20:bf:89:43:b2:ee:3d:75:6b:0b:66:e4:09:
21:7a:2f:d5:4b:31:4d:b9:9d:a7:5b:a9:f4:04:b7:52:b8:31:
d5:b0:ae:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:26:55 2025 by rpki-client