Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
File: 323830343a316162303a3a2f33322d3332203d3e203631383736.roa (raw, json)
Hash identifier: 0HxwcvLsSBWLgQV9Trf7mNwIYgtZeekt0QCt4+QSurU=
Subject key identifier: DD:A0:C3:08:CB:4C:0F:92:C4:BE:EA:9B:42:8B:A0:79:B9:A9:37:0E
Certificate issuer: /CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Certificate serial: 2336FB462B33593F189E9B5C5440947CFB4260E9
Authority key identifier: 4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
Signing time: Tue 21 Jan 2025 16:50:58 +0000
ROA not before: Tue 21 Jan 2025 16:45:58 +0000
ROA not after: Tue 20 Jan 2026 16:50:58 +0000
asID: 61876
IP address blocks: 2804:1ab0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:36:fb:46:2b:33:59:3f:18:9e:9b:5c:54:40:94:7c:fb:42:60:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FD2257689EE83DB094839D2005FC336CC9380AC
Validity
Not Before: Jan 21 16:45:58 2025 GMT
Not After : Jan 20 16:50:58 2026 GMT
Subject: CN=DDA0C308CB4C0F92C4BEEA9B428BA079B9A9370E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:5b:4a:b7:76:d4:39:65:ab:d3:0a:4b:62:07:
d3:32:2d:f2:b6:62:e9:cf:63:3e:89:83:04:5f:81:
4c:16:59:38:d0:37:4e:83:f8:40:d2:0b:f0:7e:92:
40:a8:d2:41:97:e2:f6:06:73:9c:5e:c6:ed:b4:cc:
14:88:77:18:68:78:d0:b3:ce:c8:01:0e:31:05:12:
e2:f1:48:82:b5:b5:95:05:ab:bb:19:14:d9:ac:2c:
51:fe:22:4f:2a:74:0e:2a:a7:8d:4d:02:dd:ee:b4:
ac:7f:c7:7d:2d:14:43:6f:51:8d:ea:67:2f:e4:0e:
67:c6:b5:a8:9c:51:23:af:7b:7c:3a:c3:2f:17:60:
99:35:f7:2f:e2:04:fc:67:05:ef:05:1b:81:97:e8:
f5:84:98:cc:90:46:af:eb:22:69:a3:c5:be:cf:11:
e9:45:fd:52:f7:63:c0:63:a6:b5:e3:68:be:50:73:
fc:7b:e8:3e:0a:1f:e6:ad:31:85:60:24:b1:03:96:
63:b7:e3:5f:13:11:40:a3:03:c7:a3:4d:3e:73:39:
65:b8:9b:ca:c9:93:73:b4:25:19:51:61:0e:16:dc:
cf:55:be:a5:d5:5a:08:4b:13:0a:c3:34:e2:f3:78:
2f:49:9c:ed:69:86:ae:fb:be:3c:a2:60:02:96:e9:
b3:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A0:C3:08:CB:4C:0F:92:C4:BE:EA:9B:42:8B:A0:79:B9:A9:37:0E
X509v3 Authority Key Identifier:
keyid:4F:D2:25:76:89:EE:83:DB:09:48:39:D2:00:5F:C3:36:CC:93:80:AC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/4FD2257689EE83DB094839D2005FC336CC9380AC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FD2257689EE83DB094839D2005FC336CC9380AC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6vPVV8Cuz1XC7HGrSkbWnjsQQ3Vg4kwdqdbjjuApxPsV/0/323830343a316162303a3a2f33322d3332203d3e203631383736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1ab0::/32
Signature Algorithm: sha256WithRSAEncryption
e6:a2:ff:45:5b:fe:7b:da:3a:19:18:c1:dc:10:92:4a:d8:c6:
2c:47:f5:c0:94:ad:f2:b8:32:fb:c2:34:15:9e:49:78:8a:2d:
4d:72:cb:1c:f3:0b:c2:e8:c2:5c:8d:28:bd:51:d4:28:94:78:
fb:55:e4:0b:29:c6:16:fe:71:22:ae:86:71:49:26:03:53:fd:
36:2e:66:8d:e1:fb:5d:f1:2c:50:4b:0e:b5:a0:77:4f:8d:1f:
37:93:ea:24:0b:60:58:0c:03:d3:61:19:99:6c:45:6e:f7:6e:
59:da:5a:9f:73:14:8b:7f:cc:f4:db:40:aa:15:62:76:c4:c0:
51:f8:ce:2d:a4:cf:e4:5b:3a:d2:99:72:ba:cd:5e:bc:54:71:
55:78:a4:67:69:13:bb:4c:35:b8:a8:5b:21:92:a8:81:ca:1f:
fa:53:94:1f:09:ff:7e:e4:4c:f9:c6:ea:39:a5:7f:59:52:43:
d2:fe:1c:ab:d6:78:25:b3:f5:0d:b8:10:ac:54:9f:04:a2:a9:
c3:68:99:22:38:59:65:2a:e1:6d:dc:f0:8b:79:50:c4:55:e4:
89:47:0a:13:29:38:fe:09:0d:a6:3c:a2:1f:62:8c:b1:65:4c:
52:8e:45:03:83:ff:66:6e:ef:33:e8:10:52:f6:20:f3:f1:e0:
46:9f:a2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:22:21 2025 by rpki-client