Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33322d3332203d3e20323636343636.roa
File: 323830343a333834343a3a2f33322d3332203d3e20323636343636.roa (raw, json)
Hash identifier: t0rtwgxOpgb6MlbIPiAeXwTEQngMIjFEFsCtDkggooo=
Subject key identifier: BF:2C:39:88:E5:00:86:CF:C6:85:D3:A0:E8:62:45:4F:78:49:0B:08
Certificate issuer: /CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Certificate serial: 10B0B73D70175968331E0E17B4E205C668ADD512
Authority key identifier: 64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33322d3332203d3e20323636343636.roa
Signing time: Fri 17 Jan 2025 11:45:04 +0000
ROA not before: Fri 17 Jan 2025 11:40:04 +0000
ROA not after: Fri 16 Jan 2026 11:45:04 +0000
asID: 266466
IP address blocks: 2804:3844::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b0:b7:3d:70:17:59:68:33:1e:0e:17:b4:e2:05:c6:68:ad:d5:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64024652CD71CE0D3988DAA5555337E88EA6AE45
Validity
Not Before: Jan 17 11:40:04 2025 GMT
Not After : Jan 16 11:45:04 2026 GMT
Subject: CN=BF2C3988E50086CFC685D3A0E862454F78490B08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:47:c3:80:d7:d7:5c:01:84:a4:0e:2a:3c:ca:
5b:59:29:20:03:ea:39:3f:b6:45:c0:b1:56:db:21:
3c:b5:70:16:23:45:68:66:eb:c8:0a:3d:61:f0:82:
3b:d0:7b:7d:2b:6e:ca:e1:30:5f:fa:c9:44:c4:61:
92:47:15:a4:79:ba:cb:59:1c:0f:25:e6:ad:bc:70:
bf:58:86:68:5d:c6:13:c0:52:a4:18:9b:33:3f:0b:
f3:6a:b4:9b:e2:46:2a:95:7e:3c:05:42:da:f8:c8:
39:05:45:e2:65:a9:38:58:86:13:03:e6:33:f7:d5:
37:4c:2d:f5:ca:c8:f7:ad:ef:7d:b8:97:0b:9b:c0:
42:1e:67:80:a1:17:ea:4e:b6:f8:fd:d1:1b:01:3f:
50:1e:fa:12:7b:ab:67:22:2b:4b:42:b0:26:ae:15:
4e:63:67:51:5c:db:87:3d:df:d4:5f:33:98:88:93:
f4:e2:f0:c7:a4:68:70:a8:2d:33:8c:ad:28:28:77:
c8:a2:18:bf:0a:ba:5f:60:83:43:b5:db:a5:57:f3:
0e:55:73:b1:08:bc:18:b5:31:80:2f:ce:54:27:14:
51:8c:b2:32:c6:82:95:2c:b2:e7:c4:60:47:51:a3:
54:c5:1a:79:ea:9e:02:a7:97:dd:dd:c3:6b:77:7b:
ae:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:2C:39:88:E5:00:86:CF:C6:85:D3:A0:E8:62:45:4F:78:49:0B:08
X509v3 Authority Key Identifier:
keyid:64:02:46:52:CD:71:CE:0D:39:88:DA:A5:55:53:37:E8:8E:A6:AE:45
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/64024652CD71CE0D3988DAA5555337E88EA6AE45.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/64024652CD71CE0D3988DAA5555337E88EA6AE45.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33322d3332203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3844::/32
Signature Algorithm: sha256WithRSAEncryption
7b:b0:dd:68:6c:c4:a6:91:7b:60:3b:e8:6e:28:f7:31:5c:da:
f6:b5:67:dc:b3:4d:bc:f1:f9:fe:09:53:fc:b0:b9:75:cf:42:
d6:7c:5d:67:1d:9b:09:2d:02:9e:f8:c1:09:f9:30:43:5b:44:
10:a0:88:5b:c9:03:6d:14:5b:cc:61:53:a0:45:41:60:2f:b2:
96:a4:45:1e:15:ae:71:dd:f6:81:9a:7e:b2:77:49:0e:30:df:
85:23:11:2d:93:8b:d3:d2:d1:33:17:88:8b:2e:7e:39:21:70:
1d:48:d2:c6:36:62:f0:71:57:93:da:1f:52:35:8b:a4:08:69:
b4:d4:b6:45:c8:09:56:a2:d8:72:01:a1:c2:5d:e2:a5:3d:cf:
68:b9:bd:90:6a:54:6b:56:b3:92:91:3c:3b:15:f6:ef:94:a3:
61:3c:15:cf:f4:7c:78:57:78:b6:39:9f:60:89:cd:4b:8c:c2:
15:d6:08:f4:16:51:e5:b9:9f:99:03:60:4a:cd:3c:46:9c:77:
fc:86:04:79:10:86:b5:d5:ea:71:db:d2:1d:ce:2c:0a:0c:34:
ff:b1:e5:e7:bf:64:1f:53:95:6f:39:19:d7:80:ff:90:16:e6:
36:36:c6:d3:01:70:52:98:21:55:14:ff:e0:e7:20:a7:b2:37:
ed:d9:6d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:16:44 2025 by rpki-client