Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
File: 323830343a3133383a3a2f33322d3337203d3e203131343332.roa (raw, json)
Hash identifier: 7QRZzPNcHdP7+ZlNnFbfiCQWAVpQWnQ2Zx6ATrj4/pc=
Subject key identifier: 95:10:1C:1C:28:20:20:79:FD:58:BD:7F:88:01:DC:9A:5B:A5:EC:79
Certificate issuer: /CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Certificate serial: 4CCEC364FD8E86790B52A23AB81DB09D15164620
Authority key identifier: D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
Signing time: Mon 17 Mar 2025 14:47:02 +0000
ROA not before: Mon 17 Mar 2025 14:42:02 +0000
ROA not after: Mon 16 Mar 2026 14:47:02 +0000
asID: 11432
IP address blocks: 2804:138::/32 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ce:c3:64:fd:8e:86:79:0b:52:a2:3a:b8:1d:b0:9d:15:16:46:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D4011B3B71F651F115EC7A23D76BF65D250F0114
Validity
Not Before: Mar 17 14:42:02 2025 GMT
Not After : Mar 16 14:47:02 2026 GMT
Subject: CN=95101C1C28202079FD58BD7F8801DC9A5BA5EC79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b3:54:b0:56:b9:d1:6c:bb:d2:0d:66:dd:be:
9f:fc:ac:03:c2:93:94:03:ca:85:c3:8e:59:d7:d0:
81:f1:a2:d5:0f:9b:f2:66:11:dd:0a:3d:33:21:da:
c7:13:17:8c:61:b3:6d:54:3a:0a:42:6b:ca:ce:b8:
cb:da:c4:e5:4f:e4:e2:80:83:c7:2a:a7:34:f4:fc:
c5:f4:78:52:a3:60:f4:c1:27:03:e0:fc:99:57:98:
a1:11:c7:1e:e3:07:4c:cf:c5:53:93:33:95:34:91:
8d:a4:f5:5b:74:ee:76:5d:99:28:de:3f:e5:ea:da:
20:c2:72:ff:9d:8d:44:c9:b2:50:92:3d:25:22:34:
67:0a:fc:08:eb:84:2b:c1:e6:ae:53:f3:6b:5c:d2:
81:62:a2:f5:ee:99:a4:e7:f6:1c:ad:67:e0:2c:9c:
b2:27:00:dd:c1:99:84:4c:81:23:d2:58:84:35:40:
b8:b4:29:bd:f7:b9:5d:b5:f8:9d:51:d5:20:bd:59:
0d:d4:74:d1:d7:a5:11:5e:b2:7b:2d:51:e5:6c:9d:
f2:f5:97:06:16:6b:64:99:a3:b7:03:4b:81:1b:00:
f3:4d:bc:0e:68:ef:29:23:f9:e4:fe:cf:a2:ce:7e:
61:a3:ea:b2:4f:92:dc:85:57:ca:11:71:79:b0:c0:
70:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:10:1C:1C:28:20:20:79:FD:58:BD:7F:88:01:DC:9A:5B:A5:EC:79
X509v3 Authority Key Identifier:
keyid:D4:01:1B:3B:71:F6:51:F1:15:EC:7A:23:D7:6B:F6:5D:25:0F:01:14
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4011B3B71F651F115EC7A23D76BF65D250F0114.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6xGhsQPxibTz4ZJVMBPjDMwRtMA8LfvbPvk5zqZMdPjS/1/323830343a3133383a3a2f33322d3337203d3e203131343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:138::/32
Signature Algorithm: sha256WithRSAEncryption
cd:3e:c6:95:d8:6c:16:b2:43:cd:5a:12:9f:c3:68:b7:6f:71:
6a:1f:e9:d9:a5:2c:51:b3:cd:76:d1:ec:44:96:3d:f2:ba:88:
8d:e2:d5:31:6d:6a:f0:f1:e4:05:12:c2:61:bb:76:6e:fc:15:
87:4a:22:f8:73:41:5d:9e:75:89:e8:07:f5:e6:2e:ca:4e:fc:
62:ba:97:b5:39:5b:c1:44:bb:08:ab:db:99:6f:5f:26:70:06:
39:c9:78:a9:5d:44:05:d9:45:de:83:e8:93:b6:b3:1e:ef:19:
5f:ae:33:66:4f:f4:89:08:80:eb:08:1f:b5:33:c7:dc:b5:c1:
85:24:84:f4:67:2d:a5:9c:e1:06:38:76:1d:e1:25:8e:cf:9b:
da:44:1d:ea:c2:8f:f7:41:e7:59:2c:25:7c:dc:46:81:4f:83:
87:e7:80:a6:eb:fd:92:e2:19:10:8b:67:bf:46:fe:ec:fd:a3:
1a:75:8b:c9:72:63:83:43:dc:77:ca:85:ee:59:02:2c:d4:08:
1d:9a:94:3d:bc:a3:d1:cd:25:fd:07:c9:43:d5:23:6b:c4:2d:
89:56:93:81:26:c6:f3:f5:cd:74:26:0d:54:b0:a2:0d:c8:13:
53:a7:8b:bb:e5:19:48:92:cb:fa:96:10:fd:dc:e8:df:9d:8c:
34:5a:e3:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:29:22 2025 by rpki-client