Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa
File: 323830343a6261343a3a2f33312d313238203d3e203238363135.roa (raw, json)
Hash identifier: MQRbI9AhkeszzYuID2bZ6ymfXArEsVn3IcvgPWFxXzY=
Subject key identifier: 00:86:65:AD:EA:56:A1:21:D4:30:F4:C5:CD:0B:64:9B:C3:08:07:8A
Certificate issuer: /CN=3F2F047713EE5C35F02ED01388508451431B1C44
Certificate serial: 069DD8A9C4495D23E8CC9B8F831A10307C72CB36
Authority key identifier: 3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa
Signing time: Tue 02 Apr 2024 13:14:09 +0000
ROA not before: Tue 02 Apr 2024 13:09:09 +0000
ROA not after: Tue 01 Apr 2025 13:14:09 +0000
asID: 28615
IP address blocks: 2804:ba4::/31 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:9d:d8:a9:c4:49:5d:23:e8:cc:9b:8f:83:1a:10:30:7c:72:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3F2F047713EE5C35F02ED01388508451431B1C44
Validity
Not Before: Apr 2 13:09:09 2024 GMT
Not After : Apr 1 13:14:09 2025 GMT
Subject: CN=008665ADEA56A121D430F4C5CD0B649BC308078A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:58:86:a3:48:d3:65:a3:58:8f:aa:3c:10:18:
ca:81:eb:ff:58:df:65:93:02:b9:38:a6:b1:5a:81:
9d:08:bf:ee:3f:48:6a:86:fe:07:ac:98:20:5a:3d:
05:41:5c:b6:fe:28:8c:aa:11:1f:93:c4:c8:19:13:
3e:df:41:84:90:6e:32:e5:b5:5a:59:d6:76:f9:f0:
7d:fb:a1:22:f5:bf:11:94:f1:a3:eb:90:de:ea:e0:
32:a5:41:56:74:b0:6c:25:0a:2d:b4:85:5b:a0:a4:
80:00:9d:87:80:9e:c5:2d:1c:78:d2:15:ae:80:15:
89:c4:b6:85:b4:58:91:2c:f6:17:34:8c:22:c6:65:
81:5d:bf:d2:3a:f5:57:f1:bd:f0:d2:cf:0c:40:f7:
e8:c1:db:d3:78:cc:71:90:31:df:89:90:59:ff:f0:
f7:8c:a8:d0:59:9e:92:46:58:0b:76:b7:65:70:82:
a0:ea:eb:f4:ba:c2:4b:1b:bc:17:e6:4f:a8:a0:cd:
65:a5:55:eb:9d:16:79:d4:f3:14:7a:55:19:ba:af:
fc:d1:1a:59:c6:70:0f:1e:ab:2c:d3:c9:37:dc:39:
0b:d7:4a:1b:14:aa:6b:02:e0:7c:55:36:76:55:76:
f2:cc:d9:99:a1:db:f0:93:9e:2f:6f:78:d4:1e:5c:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:86:65:AD:EA:56:A1:21:D4:30:F4:C5:CD:0B:64:9B:C3:08:07:8A
X509v3 Authority Key Identifier:
keyid:3F:2F:04:77:13:EE:5C:35:F0:2E:D0:13:88:50:84:51:43:1B:1C:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/3F2F047713EE5C35F02ED01388508451431B1C44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3F2F047713EE5C35F02ED01388508451431B1C44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7QXkuSgNxB7JALEjy4KVCsLRF9vJNT4nqBMqtcYN2jJ2/0/323830343a6261343a3a2f33312d313238203d3e203238363135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:ba4::/31
Signature Algorithm: sha256WithRSAEncryption
20:f1:4e:cb:60:94:c3:6d:70:30:2e:90:75:cf:6a:fd:2c:cb:
46:4f:46:7a:ae:a3:04:e3:f4:6b:e0:d1:ff:a4:f5:c8:86:9b:
ab:ad:86:a7:01:6a:81:bb:1c:fd:18:ee:58:6e:de:43:7f:df:
28:55:09:5d:87:15:c6:b2:23:69:33:7b:4b:cb:52:c1:a1:c3:
84:4a:a9:f6:4b:0c:ec:e3:5c:6b:4f:a1:92:5e:86:aa:77:f0:
f9:d7:91:a2:0e:c5:89:80:68:1f:d7:99:5b:a0:1c:9b:0d:9d:
9d:c9:5f:ff:14:ca:fe:e8:71:a7:e5:44:9f:03:61:8d:cb:d7:
9a:d1:a8:c2:68:e9:c1:5a:46:a6:23:ec:f4:28:4b:97:07:f3:
1b:92:81:7b:c8:29:f1:be:e6:30:07:7f:e7:a8:df:f4:3b:4a:
ea:81:5d:29:3b:70:b5:ce:b6:ca:21:7a:d4:84:33:94:06:e7:
30:4d:ed:5c:57:73:ef:41:97:eb:1f:d6:d0:d0:20:c5:d7:50:
7f:c2:eb:25:b7:8f:95:90:81:a6:b7:d2:fa:76:bb:f2:9d:0f:
49:e4:70:73:18:a5:fc:e1:33:fe:af:84:8f:8c:fa:a4:ec:67:
be:fc:62:d0:89:22:4d:e0:7f:a2:67:4b:1c:e6:a9:ca:15:36:
43:f6:b2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:24:37 2025 by rpki-client