Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d3332203d3e20323634383632.roa
File: 323830343a326566303a3a2f33322d3332203d3e20323634383632.roa (raw, json)
Hash identifier: w1IQF8cTfEnrX8/p1nklGaG9PzaPccBrfuLawPLoO2A=
Subject key identifier: A2:B3:99:D7:E8:E3:9A:D1:6F:D6:59:5F:B6:14:80:08:28:74:F0:C6
Certificate issuer: /CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Certificate serial: 1533F77D7F773EA7AE4E9A4F22986BC5706EBD07
Authority key identifier: 68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d3332203d3e20323634383632.roa
Signing time: Tue 25 Mar 2025 20:35:08 +0000
ROA not before: Tue 25 Mar 2025 20:30:08 +0000
ROA not after: Tue 24 Mar 2026 20:35:08 +0000
asID: 264862
IP address blocks: 2804:2ef0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:33:f7:7d:7f:77:3e:a7:ae:4e:9a:4f:22:98:6b:c5:70:6e:bd:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68990E6100D2FF0A00146743F6D743C3A3C7944B
Validity
Not Before: Mar 25 20:30:08 2025 GMT
Not After : Mar 24 20:35:08 2026 GMT
Subject: CN=A2B399D7E8E39AD16FD6595FB61480082874F0C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:95:b1:e8:8a:d2:31:43:fe:cd:6f:02:98:96:
df:65:da:ae:89:06:0c:89:30:f0:04:e0:b1:3f:24:
0b:e5:ab:a4:29:bf:37:2f:8b:a3:0d:fe:75:6d:cb:
44:b9:fe:7b:5a:93:88:93:07:f5:a7:4a:51:76:9f:
a5:52:11:75:1d:1c:59:ef:d7:af:94:8d:05:ad:ae:
ab:cf:4a:7f:f6:f2:4f:5e:13:21:3d:57:c6:bb:c2:
ea:48:0c:3a:a9:3b:2f:1d:31:2d:7a:1a:bc:ef:c7:
e8:74:31:18:59:8a:1a:4b:4e:39:eb:ff:2a:dc:07:
73:59:8a:b3:a3:c0:01:f5:c4:c9:02:10:03:aa:a6:
8b:3c:bc:b1:f2:42:53:8f:61:19:75:d3:ae:5a:f0:
cf:b6:68:d8:86:90:4c:09:1a:24:d8:ad:42:4c:3e:
39:e4:28:d9:86:ef:6f:50:5f:f6:c4:68:34:20:d2:
f7:30:d6:62:b6:3f:70:57:4b:c3:6d:4f:72:d2:74:
23:27:44:ea:a3:0f:d2:c5:ac:61:de:d3:50:8a:86:
c9:6f:99:35:d0:7f:d3:9b:97:45:56:de:fb:85:5a:
5b:ed:21:e9:11:54:2e:5b:36:02:b6:a8:96:3c:ce:
cd:c6:fb:f7:91:6d:3c:3c:c5:67:d6:08:5c:94:30:
4f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:B3:99:D7:E8:E3:9A:D1:6F:D6:59:5F:B6:14:80:08:28:74:F0:C6
X509v3 Authority Key Identifier:
keyid:68:99:0E:61:00:D2:FF:0A:00:14:67:43:F6:D7:43:C3:A3:C7:94:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/68990E6100D2FF0A00146743F6D743C3A3C7944B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68990E6100D2FF0A00146743F6D743C3A3C7944B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8GXch2noBdkGkjhNM9mugRsgakpK9DptHfQjcH6FWWcm/0/323830343a326566303a3a2f33322d3332203d3e20323634383632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2ef0::/32
Signature Algorithm: sha256WithRSAEncryption
43:43:27:f1:09:58:3f:bf:41:cf:06:1a:2e:39:5b:94:e3:06:
08:b4:71:47:1d:77:53:4d:f1:1c:89:87:3f:8c:84:cd:95:18:
43:d7:1a:f0:97:af:ed:cc:9f:cf:bd:25:b4:da:5c:0d:3c:d0:
5c:f3:99:96:0f:38:e0:e3:6c:d5:8d:00:21:e2:86:a6:6c:74:
9e:b5:a1:50:d7:23:2f:fb:3f:67:f1:69:8e:70:eb:8a:40:a9:
8f:30:37:27:c6:6e:4f:95:32:89:dd:75:ba:4b:29:9f:e8:86:
01:b2:e5:37:74:58:53:47:93:d7:5f:b9:d0:ef:46:78:cc:15:
c4:be:01:39:2d:e8:fe:f6:a1:71:b8:2d:50:40:0c:92:68:c1:
aa:f1:15:3a:ce:f1:4d:57:b2:99:82:16:78:ac:fe:07:2e:c3:
a8:a2:2b:5f:43:dd:f4:be:79:7c:b0:a8:f7:ff:d9:61:55:e1:
f1:df:8e:16:e2:38:e0:3b:9d:dd:64:6d:61:b1:33:fe:67:6f:
dc:a4:1a:92:d8:40:1b:c1:64:43:48:34:e8:71:67:34:e3:b7:
18:b5:9a:f1:bc:40:5e:fa:bf:a4:76:57:12:c7:66:30:1d:c8:
c4:e8:a7:db:7a:67:06:15:72:63:3e:0a:90:42:a2:ac:76:cd:
17:1d:c9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:27:34 2025 by rpki-client