Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa
File: 323830343a313634633a3a2f33322d3332203d3e20323633323830.roa (raw, json)
Hash identifier: VZn9LAow7O6W9g199BFgEbVbSmNr6lwGD8lpJ00wUck=
Subject key identifier: D2:8E:D5:82:05:EB:E0:23:B9:D2:B3:64:49:37:CD:F5:F8:B1:F8:5B
Certificate issuer: /CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Certificate serial: 0ACAC53E23E9460C1B0CC023F4A6A695A28947AB
Authority key identifier: A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa
Signing time: Thu 06 Mar 2025 16:46:49 +0000
ROA not before: Thu 06 Mar 2025 16:41:49 +0000
ROA not after: Thu 05 Mar 2026 16:46:49 +0000
asID: 263280
IP address blocks: 2804:164c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:ca:c5:3e:23:e9:46:0c:1b:0c:c0:23:f4:a6:a6:95:a2:89:47:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A3F168F0E50A90E41A736FE0D5FA919765E1B5E6
Validity
Not Before: Mar 6 16:41:49 2025 GMT
Not After : Mar 5 16:46:49 2026 GMT
Subject: CN=D28ED58205EBE023B9D2B3644937CDF5F8B1F85B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d6:ed:d8:52:0d:77:e5:6f:5c:dc:61:38:3a:
18:b5:1b:63:44:42:c3:bd:7c:33:08:eb:15:a8:ea:
b7:10:4c:6e:d6:69:2d:ab:ef:17:10:a8:1c:0d:4e:
2a:fc:8b:b0:5a:26:4f:ec:b2:f9:d8:80:bd:23:fd:
60:ca:18:28:c7:b1:38:77:dc:7b:5a:f6:08:5d:43:
50:e8:d1:fb:a4:f4:ef:b2:6e:f9:c7:5f:66:3e:ff:
b9:7a:03:19:14:dd:c2:e1:72:9d:53:22:93:e5:f3:
cf:d1:79:c0:b0:c6:2d:98:5a:b2:92:56:e5:17:e8:
40:fe:4a:05:40:98:8f:e4:fb:f2:c8:57:63:d1:92:
53:54:6f:58:f8:f5:1d:10:f6:19:b8:55:1c:14:11:
a5:9d:c5:88:d9:07:33:6f:68:4b:aa:f7:a4:69:1b:
bb:fd:ea:72:30:b1:cb:6b:c0:09:77:3d:36:63:1d:
a0:23:a0:aa:d2:aa:82:08:72:78:ba:b0:b1:2f:e4:
98:9a:a4:43:ba:9c:23:df:62:a0:9c:33:7c:b6:56:
23:48:67:46:52:86:6f:dd:3f:e7:bd:7c:26:52:bd:
2e:c1:6a:63:bd:64:dd:ce:6e:b4:63:5b:9e:7a:af:
31:d0:ff:80:58:c4:9a:7d:e5:5f:69:9b:28:2b:4a:
74:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:8E:D5:82:05:EB:E0:23:B9:D2:B3:64:49:37:CD:F5:F8:B1:F8:5B
X509v3 Authority Key Identifier:
keyid:A3:F1:68:F0:E5:0A:90:E4:1A:73:6F:E0:D5:FA:91:97:65:E1:B5:E6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A3F168F0E50A90E41A736FE0D5FA919765E1B5E6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6NZcV1LRNFD97phVdTQsvpFsVaCVJPkMcmaGRdLmqZKd/1/323830343a313634633a3a2f33322d3332203d3e20323633323830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:164c::/32
Signature Algorithm: sha256WithRSAEncryption
4a:94:b4:17:98:f1:50:83:24:47:03:ef:0e:fb:17:62:29:56:
83:a9:4b:18:8e:d4:a1:fc:d0:a6:a3:df:51:63:f5:f5:31:14:
c7:f9:c4:fc:9b:27:c7:04:cb:ec:33:8c:ba:d1:89:fb:02:08:
30:4a:de:f8:72:41:9b:16:09:b3:35:ba:4c:50:c4:ae:98:df:
ad:59:ee:ab:3f:40:9d:68:d1:ab:3f:0e:1e:06:13:db:82:f2:
a9:9c:e7:0c:e2:00:0e:a4:0e:29:bb:e9:b4:ce:16:88:33:89:
c9:56:af:7c:b6:1f:36:c3:3d:26:2f:43:32:13:b4:77:1c:60:
1c:5c:b6:7b:4b:f7:88:db:f8:02:18:1c:10:a5:41:aa:9c:59:
b5:c7:0f:e6:d7:de:40:e2:3e:8a:77:1b:80:e2:ec:53:ce:f2:
96:89:bc:db:3f:0b:29:3d:05:38:49:d6:57:b7:48:1c:2e:b6:
21:a4:6b:e4:03:f0:dd:e4:16:7a:05:97:15:31:b9:24:54:06:
72:25:98:42:b8:ea:8f:b7:40:97:2d:be:3b:5c:61:86:2f:36:
cb:f3:99:cd:42:28:0a:3f:af:cf:0a:99:e3:ac:d2:a6:40:f3:
cb:8c:6e:6e:38:be:55:67:cf:bc:50:6d:0a:5d:d4:4a:c3:2d:
6d:c2:58:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:18:21 2025 by rpki-client