Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa
File: 323830343a363461383a3a2f33322d3438203d3e20323639343338.roa (raw, json)
Hash identifier: BxYhGpy/LWOpJvNQSfqL15y5fhKcaK1WcUbPQbJTbVo=
Subject key identifier: 91:9F:F5:0A:BB:9A:04:5B:C3:D8:52:81:8F:C8:4A:BE:1D:76:5C:3F
Certificate issuer: /CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Certificate serial: 1EF4571FF3C60F26F1DAB8B2CFF386CDE836799E
Authority key identifier: DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject info access: rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa
Signing time: Thu 06 Mar 2025 20:28:03 +0000
ROA not before: Thu 06 Mar 2025 20:23:03 +0000
ROA not after: Thu 05 Mar 2026 20:28:03 +0000
asID: 269438
IP address blocks: 2804:64a8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:f4:57:1f:f3:c6:0f:26:f1:da:b8:b2:cf:f3:86:cd:e8:36:79:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFAD4430E103F584B4F38EA4C2E1788C436A9021
Validity
Not Before: Mar 6 20:23:03 2025 GMT
Not After : Mar 5 20:28:03 2026 GMT
Subject: CN=919FF50ABB9A045BC3D852818FC84ABE1D765C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:d8:f7:ed:13:a5:a4:c8:91:a7:3c:8e:f7:
17:5c:79:af:8a:cd:0f:f6:40:c6:d2:d9:07:e7:90:
37:2c:7b:3a:b3:dc:3c:40:9d:06:46:d8:ff:e7:75:
b5:6e:9b:9e:62:8d:64:75:62:7d:d5:63:8a:b2:fe:
f1:73:c3:1d:91:5f:55:2a:75:9a:d0:88:ff:e9:98:
e9:22:76:13:3a:a5:e6:d4:9e:73:91:a7:4a:a8:f4:
ec:17:72:f0:fa:1e:13:14:d6:aa:0e:44:be:b4:b7:
a6:aa:76:f7:b0:ab:49:ae:1c:15:a1:5a:d4:81:0c:
b7:8b:1b:43:c3:29:e6:f6:d9:6a:e3:24:80:a5:58:
36:be:6f:ed:6f:71:0b:57:ae:18:43:cd:28:ad:40:
a3:05:88:77:e1:69:95:7d:ba:52:c5:1e:d0:8f:aa:
e6:78:e4:90:16:8f:01:84:81:49:f2:e0:8c:f7:91:
4c:0b:c7:80:4b:28:f5:f9:50:ac:d5:6f:be:b5:cf:
be:31:71:93:04:88:f2:73:4a:27:ba:6c:33:bc:11:
dd:91:ac:bb:26:65:84:fd:eb:1f:65:f4:df:8e:51:
0b:75:d9:00:dc:8f:87:46:80:0a:2e:25:af:72:47:
9d:e7:10:8a:65:01:cc:d2:e0:1e:80:cf:14:0d:d3:
4a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:F5:0A:BB:9A:04:5B:C3:D8:52:81:8F:C8:4A:BE:1D:76:5C:3F
X509v3 Authority Key Identifier:
keyid:DF:AD:44:30:E1:03:F5:84:B4:F3:8E:A4:C2:E1:78:8C:43:6A:90:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFAD4430E103F584B4F38EA4C2E1788C436A9021.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/85qDhna7yesWHaAiBkVEZZmqyjFAcccrYSjbRGfKpycE/1/323830343a363461383a3a2f33322d3438203d3e20323639343338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64a8::/32
Signature Algorithm: sha256WithRSAEncryption
74:46:65:b4:2a:e4:89:a3:c1:e3:11:63:08:27:cc:05:ff:18:
91:98:93:4c:ad:f3:6e:d1:24:8a:f8:9d:44:48:97:7c:ef:34:
83:5e:90:a2:13:e8:7d:3d:a5:53:bb:b1:43:f4:ed:e5:39:4f:
49:70:61:8f:52:c6:9e:2c:a6:be:7f:98:6f:a4:13:ea:92:44:
b4:eb:3c:38:11:f9:68:62:39:cc:20:4f:93:c2:a1:3b:ea:c8:
0d:4c:fb:54:8b:1f:c0:62:06:04:69:11:f6:e2:b6:c9:e0:50:
7c:d0:41:eb:2e:a2:87:88:e2:9a:64:02:01:b7:a1:3f:fb:2c:
46:34:53:13:2d:df:77:51:4e:3e:f7:6e:84:af:24:96:1f:10:
81:49:14:dc:93:e0:e1:fb:1a:47:ff:e0:fb:b1:7f:a9:6a:a8:
5e:7a:3c:02:c8:2a:b3:d0:c4:ee:0c:23:2d:90:70:94:30:dd:
d4:3a:a4:df:2b:54:09:d5:3e:b5:df:bf:c6:eb:49:e7:36:f4:
d7:cc:81:9d:67:14:0b:a4:0f:4a:32:ca:fd:42:66:5e:0f:ab:
21:35:ba:ef:9b:30:e5:fb:e5:db:d2:8a:d6:7d:3b:99:51:39:
26:6e:25:8b:8c:73:02:fd:9a:40:e1:d4:3d:38:b8:90:27:1e:
0a:50:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:23:33 2025 by rpki-client