Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d313238203d3e20323636343636.roa
File: 323830343a333834343a643030303a3a2f33362d313238203d3e20323636343636.roa (raw, json)
Hash identifier: s7OiLYIgaV5AstI+XyDUiE5Vcu52GaNWnqwOFc5dPDk=
Subject key identifier: 9B:44:A7:EB:2F:C5:12:12:03:44:38:9A:B2:C6:EE:7F:EE:2C:A5:1F
Certificate issuer: /CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
Certificate serial: 395B41D38E881599D4DF5505F42B52EA36083197
Authority key identifier: 0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d313238203d3e20323636343636.roa
Signing time: Tue 14 Jan 2025 21:05:59 +0000
ROA not before: Tue 14 Jan 2025 21:00:59 +0000
ROA not after: Tue 13 Jan 2026 21:05:59 +0000
asID: 266466
IP address blocks: 2804:3844:d000::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:5b:41:d3:8e:88:15:99:d4:df:55:05:f4:2b:52:ea:36:08:31:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
Validity
Not Before: Jan 14 21:00:59 2025 GMT
Not After : Jan 13 21:05:59 2026 GMT
Subject: CN=9B44A7EB2FC512120344389AB2C6EE7FEE2CA51F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:40:95:8c:b5:b5:a0:45:c3:55:c6:e2:91:
59:7d:26:76:40:2b:fe:95:ed:73:df:83:70:02:e0:
1b:5b:55:cb:6d:76:83:ce:6a:a3:cc:3b:8c:57:71:
bd:75:f5:9c:18:7a:33:6e:ee:8d:81:10:ed:14:8f:
ae:a4:38:00:77:c4:8e:89:44:d7:34:6b:88:bb:06:
ae:01:66:04:df:6e:d5:83:95:cf:25:cd:ca:52:b4:
a3:d5:f3:08:2a:c9:ac:29:82:39:ba:d0:6a:97:07:
fe:9d:43:6c:79:f5:ed:50:88:f6:0f:7e:52:7f:42:
72:fa:fd:d6:31:90:18:c3:b4:6c:78:64:60:32:3a:
3b:bf:d1:91:a0:02:dc:48:3a:6d:f3:48:9b:39:ae:
94:dc:71:d7:d8:16:7e:84:9c:63:9d:2e:cd:53:dc:
ac:b9:a1:a3:d3:b6:f8:7f:d3:e2:de:d9:75:70:6f:
76:c9:5d:d5:d7:aa:d4:ad:64:28:ee:f6:0e:23:0e:
8c:f3:b8:55:57:d2:90:6e:bc:1c:70:26:df:72:0c:
cd:10:cc:eb:6b:82:37:61:2a:1b:9e:9c:6c:c6:38:
dd:61:87:76:1f:6b:7e:cd:75:5e:c2:f3:55:48:4e:
30:69:0a:29:c8:d9:57:44:c3:a3:a4:e0:d5:5b:10:
42:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:44:A7:EB:2F:C5:12:12:03:44:38:9A:B2:C6:EE:7F:EE:2C:A5:1F
X509v3 Authority Key Identifier:
keyid:0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a643030303a3a2f33362d313238203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3844:d000::/36
Signature Algorithm: sha256WithRSAEncryption
3e:8f:5c:9e:98:ab:50:05:53:2c:f5:0c:14:be:64:b3:3c:5f:
5d:04:79:97:36:a3:7f:7b:60:3d:22:9b:6c:1d:8b:f0:71:89:
40:88:d1:b6:1a:72:10:3b:84:78:d8:21:70:b1:c2:08:eb:f2:
08:56:aa:e2:e7:9f:73:35:bc:13:0c:08:6f:ee:53:48:e4:43:
4d:33:04:ab:ea:f1:1d:c1:e0:fb:95:dc:c9:01:d9:cc:49:b2:
c6:52:f2:ca:6d:ce:9a:fe:1a:d1:03:c7:54:62:98:77:cb:56:
50:15:d2:d8:25:95:7e:4c:82:4a:84:c5:86:3f:5c:d0:6a:d1:
e5:d9:11:89:97:df:32:b7:dd:8c:18:d5:c4:a5:a1:a1:ac:2d:
9d:48:cd:d0:78:2e:0b:00:df:e6:8e:fa:ec:9e:9a:a5:fe:9a:
88:a4:3e:45:9f:a0:5e:ad:63:fe:68:b0:44:2b:a7:1b:db:7f:
aa:45:bb:c6:b6:a5:b0:35:a7:f1:46:3a:e8:93:8e:e3:44:24:
15:d2:44:48:d6:28:19:88:81:1a:d6:9b:10:2d:53:44:a4:a2:
82:bf:cd:ca:9c:31:1b:a2:10:d7:26:1f:4f:64:a2:e6:f8:76:
93:d6:f9:78:51:b7:1a:77:6b:29:37:63:64:dd:84:2f:8a:0b:
8e:0c:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:10:25 2025 by rpki-client