Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3438203d3e20323635343732.roa
File: 323830343a333461633a3a2f33322d3438203d3e20323635343732.roa (raw, json)
Hash identifier: tpEQglKyQR4Iy83hQeMBv5g+EcOCRPprr2vmjyIIFpY=
Subject key identifier: 8F:3F:2F:D1:6F:DB:BD:9D:0A:5C:E5:73:F6:89:E2:D7:C0:ED:BF:98
Certificate issuer: /CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
Certificate serial: 3BC8DCF22A96A38EE868EC2D0B741E09F29FF7D4
Authority key identifier: F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
Subject info access: rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3438203d3e20323635343732.roa
Signing time: Thu 28 Nov 2024 16:02:16 +0000
ROA not before: Thu 28 Nov 2024 15:57:16 +0000
ROA not after: Thu 27 Nov 2025 16:02:16 +0000
asID: 265472
IP address blocks: 2804:34ac::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c8:dc:f2:2a:96:a3:8e:e8:68:ec:2d:0b:74:1e:09:f2:9f:f7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9571F71D3A1F065220B153C7C0B22D2A2862123
Validity
Not Before: Nov 28 15:57:16 2024 GMT
Not After : Nov 27 16:02:16 2025 GMT
Subject: CN=8F3F2FD16FDBBD9D0A5CE573F689E2D7C0EDBF98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:69:57:91:58:48:52:01:cf:f9:c1:e3:28:
fc:c3:cc:bf:13:cb:27:d5:67:5f:7a:a5:75:bc:c7:
98:d7:8d:69:0d:b1:c7:9b:0b:81:92:1b:a5:a9:d8:
6a:eb:e0:b6:36:4d:6d:90:54:26:ee:91:3f:fe:20:
8c:b2:ad:67:13:b2:e3:5a:81:38:72:c3:44:41:5c:
f3:45:97:6a:fd:4b:68:f7:30:c4:4a:6f:c1:a7:80:
a6:5c:44:d9:c3:97:18:0c:ad:12:c3:d5:f3:76:73:
a5:f9:16:76:14:10:48:e0:35:52:48:e2:94:83:c1:
d8:db:96:d4:c2:0c:35:a9:19:db:3b:0e:bc:49:32:
51:ab:56:66:fc:22:b7:7b:a5:a4:ec:b0:4a:d9:38:
18:00:bd:e2:4d:f5:f2:ea:89:83:82:e4:ad:02:c3:
ae:49:f8:f6:f8:3b:10:73:92:a2:b9:19:f8:80:79:
c8:80:81:45:d4:1a:22:b9:9c:f9:3d:3c:e5:b4:fe:
bc:2c:e2:ad:88:25:83:2b:69:23:4f:83:3b:e6:28:
15:22:48:60:c0:f6:d0:1e:75:a2:f1:9f:6f:7f:73:
bf:ef:85:45:87:f9:78:20:d2:85:ce:c3:45:f5:65:
db:da:bc:45:e5:92:70:0d:f4:e5:d8:87:72:11:8a:
e1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:3F:2F:D1:6F:DB:BD:9D:0A:5C:E5:73:F6:89:E2:D7:C0:ED:BF:98
X509v3 Authority Key Identifier:
keyid:F9:57:1F:71:D3:A1:F0:65:22:0B:15:3C:7C:0B:22:D2:A2:86:21:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/F9571F71D3A1F065220B153C7C0B22D2A2862123.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9571F71D3A1F065220B153C7C0B22D2A2862123.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3438203d3e20323635343732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34ac::/32
Signature Algorithm: sha256WithRSAEncryption
8a:82:64:a5:f7:70:72:02:62:8f:22:bd:f7:19:1a:a5:3e:ef:
6f:bd:0b:04:b8:33:2b:ef:3f:43:53:f9:63:f2:04:e3:b2:0a:
23:01:66:00:4f:92:7f:64:9a:e2:26:54:0e:9d:89:a9:51:1e:
4a:e8:b5:65:96:75:6c:8f:89:2b:c7:04:72:42:28:c0:6a:39:
f3:2b:a2:60:4c:62:53:da:66:38:ad:ff:59:f5:2f:00:e4:a1:
ac:60:a1:24:96:94:e2:48:54:44:78:61:68:52:ee:73:70:8b:
8b:e9:0f:96:a3:45:c7:3e:78:2b:4e:c8:27:fa:2e:63:2d:b2:
20:9a:34:a2:39:5b:6d:4d:f0:b6:18:c6:e2:3d:97:0f:29:f0:
1f:46:45:47:ae:ac:d4:eb:99:c4:1d:da:f9:1d:19:78:a0:5d:
00:52:6e:e5:20:75:c3:08:b9:e8:15:7d:48:5c:a6:5b:4a:f6:
53:b4:ef:3e:fc:51:18:6d:de:54:4d:9e:58:4e:af:2e:84:70:
9b:fb:7c:61:e7:f7:fe:38:f6:ee:74:1b:d3:46:03:88:b1:06:
f9:49:9e:79:1a:8e:f8:58:9e:cb:62:99:20:00:bc:05:c9:19:
e7:0f:49:94:ab:05:25:a9:a5:e8:0b:e4:55:67:05:cf:88:d7:
d2:72:26:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:27:03 2025 by rpki-client