Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a383030303a3a2f33342d3438203d3e20323636303935.roa
File: 323830343a336138633a383030303a3a2f33342d3438203d3e20323636303935.roa (raw, json)
Hash identifier: T46+42W4OOxdOYgwRTkjjOsZ745VmW/lTOSTe208awU=
Subject key identifier: C0:94:38:41:62:71:DC:29:CE:FD:8C:3B:5B:39:B7:76:DC:B0:88:8F
Certificate issuer: /CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
Certificate serial: 46D20B76102E3AB9D305116DAB3F9E8897708A36
Authority key identifier: 77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a383030303a3a2f33342d3438203d3e20323636303935.roa
Signing time: Fri 03 Jan 2025 14:22:10 +0000
ROA not before: Fri 03 Jan 2025 14:17:10 +0000
ROA not after: Fri 02 Jan 2026 14:22:10 +0000
asID: 266095
IP address blocks: 2804:3a8c:8000::/34 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:d2:0b:76:10:2e:3a:b9:d3:05:11:6d:ab:3f:9e:88:97:70:8a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0
Validity
Not Before: Jan 3 14:17:10 2025 GMT
Not After : Jan 2 14:22:10 2026 GMT
Subject: CN=C09438416271DC29CEFD8C3B5B39B776DCB0888F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7e:b6:5c:f3:43:ff:86:f1:e1:7d:f0:df:45:
e2:96:62:0d:66:83:ae:1c:0e:50:0d:b1:c9:bc:1a:
7d:38:90:d2:3a:e7:fd:1d:cf:66:b9:08:ad:61:2f:
56:cd:74:17:88:aa:a3:2a:be:ae:f4:fc:4e:6c:9f:
9c:31:dc:1b:50:0b:e9:59:03:8e:3a:cd:9e:ce:af:
12:6a:ce:67:33:13:e6:e7:90:90:49:f0:e6:79:d8:
ff:16:8c:21:bd:bf:8b:76:a7:ec:49:9c:47:e0:c9:
3e:5e:6f:c8:22:4f:c1:a0:96:64:4d:1c:10:de:4d:
53:9a:a8:6f:40:9c:1f:fc:28:e5:64:04:22:21:f6:
79:74:e8:22:70:5c:f9:4e:9f:4b:9c:06:d3:92:7e:
b2:7d:8d:6a:c9:09:9c:e7:db:8e:ac:23:5a:2a:46:
26:ce:c5:c9:f9:77:3b:b6:d0:b4:98:7a:9c:72:e2:
7b:0d:44:1f:63:ca:03:39:d5:6c:69:ba:8d:23:95:
0a:6b:ea:7f:f6:1c:ba:75:fd:cc:17:21:87:f3:31:
c6:bb:03:d9:13:1c:20:e0:32:ab:60:5d:56:ec:18:
1f:0a:0f:f9:e6:13:46:40:7d:d0:86:8b:f7:55:72:
e6:aa:25:6b:dc:11:80:b8:08:7d:0b:2e:b9:4a:bc:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:38:41:62:71:DC:29:CE:FD:8C:3B:5B:39:B7:76:DC:B0:88:8F
X509v3 Authority Key Identifier:
keyid:77:1D:E8:CD:05:B7:DC:3B:A5:A3:29:B2:F1:10:E4:AD:8D:6C:7B:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/771DE8CD05B7DC3BA5A329B2F110E4AD8D6C7BE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7mMz55PvPt527J9CzXAUhdbG2wBkwV9yZPQGbkFJoM2A/0/323830343a336138633a383030303a3a2f33342d3438203d3e20323636303935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3a8c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
aa:8b:a1:1b:c5:68:48:2c:ac:9f:90:59:76:9c:2c:c7:68:8f:
12:42:3b:3f:85:07:a1:c6:d9:15:58:4a:81:92:db:73:3b:d9:
3c:c5:7f:a1:99:cb:95:b0:0b:6c:7d:02:f5:10:ac:e2:08:06:
ab:1b:cc:df:4d:1b:71:5a:22:e6:4d:be:4c:29:0b:5a:9d:1b:
d9:d4:fb:bc:18:72:aa:fa:fa:cd:57:84:f8:d3:c4:32:14:cb:
d7:80:53:b6:8a:72:f2:f1:6d:16:2e:64:db:c8:f9:80:87:56:
19:9e:1d:a8:53:ae:7d:d9:03:cc:d6:d5:dc:50:95:75:5b:c6:
56:ae:3c:7b:32:13:ad:bc:99:44:ea:cb:5c:22:cd:32:ea:9d:
a9:9a:0f:2a:8e:64:8a:5c:cc:cb:54:81:bc:59:c3:ca:ca:52:
14:94:96:a4:1e:42:6a:e2:56:23:cf:fe:67:a2:82:49:b8:27:
05:39:db:39:10:46:88:8b:ea:ea:2c:36:51:21:d4:83:18:67:
88:6b:e0:99:fe:bd:85:e2:6c:b5:02:2c:12:05:be:53:b8:11:
63:d4:01:a9:f4:29:d5:70:e2:b6:4b:e2:02:9f:04:fb:c2:b8:
0a:9b:11:4f:24:a9:82:55:d1:6e:02:4c:a1:36:7f:3c:b7:0f:
fe:62:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 04:36:42 2025 by rpki-client