Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33322d3332203d3e20323732353733.roa
File: 323830343a383535383a3a2f33322d3332203d3e20323732353733.roa (raw, json)
Hash identifier: QmEsqPGpzVd9AudopZg/8fUIFNkSx+iggO1HA2LLqZk=
Subject key identifier: A8:44:C2:BE:08:12:07:3D:7E:D0:A8:91:33:C7:D3:82:4D:46:4A:4A
Certificate issuer: /CN=609592934A0E33AC57311C220A76D5408AC0153F
Certificate serial: 2F06C0DABD4E3DDE8389FD87AAE842C3FAE6E557
Authority key identifier: 60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33322d3332203d3e20323732353733.roa
Signing time: Thu 09 Jan 2025 19:09:52 +0000
ROA not before: Thu 09 Jan 2025 19:04:52 +0000
ROA not after: Thu 08 Jan 2026 19:09:52 +0000
asID: 272573
IP address blocks: 2804:8558::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:06:c0:da:bd:4e:3d:de:83:89:fd:87:aa:e8:42:c3:fa:e6:e5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=609592934A0E33AC57311C220A76D5408AC0153F
Validity
Not Before: Jan 9 19:04:52 2025 GMT
Not After : Jan 8 19:09:52 2026 GMT
Subject: CN=A844C2BE0812073D7ED0A89133C7D3824D464A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:df:6b:5a:4b:00:03:3f:44:a3:b9:73:ff:af:
f0:a1:66:81:0c:4b:97:75:ef:59:45:9b:31:8f:60:
e4:7e:c3:c2:fc:89:c9:6f:21:68:90:bc:30:63:74:
16:22:9d:d8:cd:23:43:c2:97:d1:b8:c8:f4:52:98:
58:7d:6b:7d:ab:39:7d:83:4f:ac:ae:b2:4b:f4:10:
c7:51:e8:be:46:cb:d7:9e:ff:db:04:29:e6:83:94:
e0:ec:ef:c7:f8:f4:ec:2c:ac:cf:a3:60:44:f8:2e:
22:3c:db:c3:b9:a9:82:d9:14:79:93:ac:f8:66:22:
aa:e3:6a:8f:ae:c4:b3:aa:bb:71:04:0f:d2:04:3b:
52:d4:96:48:c9:1e:f8:47:35:10:e9:75:e7:04:ac:
21:84:1c:aa:08:7b:36:94:b3:c1:30:a6:40:8b:90:
3e:0c:6b:cd:70:9a:d0:4c:3f:4e:32:37:f1:84:e3:
60:ad:7f:be:f5:fc:8e:68:80:de:3a:d2:16:45:95:
da:30:fa:cc:17:ce:9d:32:7a:d7:02:f9:cb:7d:af:
dd:ef:85:63:fe:ec:93:4f:9f:25:03:56:09:c0:2c:
16:e7:fa:3b:a9:fd:10:5a:d4:aa:6e:e0:9e:4d:2c:
7f:67:47:e2:94:1c:3a:b7:05:29:0b:4f:d7:97:77:
57:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:C2:BE:08:12:07:3D:7E:D0:A8:91:33:C7:D3:82:4D:46:4A:4A
X509v3 Authority Key Identifier:
keyid:60:95:92:93:4A:0E:33:AC:57:31:1C:22:0A:76:D5:40:8A:C0:15:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/609592934A0E33AC57311C220A76D5408AC0153F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/609592934A0E33AC57311C220A76D5408AC0153F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8PnSv17tou4fKUYKJXkbBM4VeD6vCkcV2uuws2nxfJ1s/0/323830343a383535383a3a2f33322d3332203d3e20323732353733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8558::/32
Signature Algorithm: sha256WithRSAEncryption
4a:db:24:a4:6e:cc:a4:d3:d1:b9:e9:68:28:34:53:ef:fd:8b:
e3:03:b1:2c:7c:d9:a7:2a:f5:fe:c6:8a:fb:83:14:68:62:ea:
94:ab:e6:60:38:27:07:fc:88:9f:ec:b9:50:18:70:56:9c:67:
f5:95:75:c1:2d:c1:0b:b4:fa:a4:0e:8c:11:46:7f:9c:3d:85:
d6:95:3e:4a:39:03:59:aa:90:44:af:8e:c8:c2:f5:dc:9b:f4:
b0:2b:56:c5:9d:b9:8f:26:cf:57:d0:32:86:15:d3:a8:e7:3b:
4c:04:f6:48:6c:3a:d1:16:aa:dd:d1:bc:d6:05:8d:2f:f3:4d:
43:a2:8d:96:6d:e5:6b:cf:4b:96:5a:a1:78:ab:fe:9d:24:65:
e1:6a:8f:cc:e9:3b:0a:18:55:b8:7b:47:11:8f:e4:f3:83:d0:
a2:2b:35:01:20:31:64:c1:8c:45:02:f4:32:63:89:f3:92:c8:
e2:6a:2d:db:6d:57:06:e9:8b:28:ff:3c:bf:b2:4b:ab:71:ae:
4f:3e:61:9b:87:c0:2d:1f:31:e0:dc:39:3b:f9:46:a1:f5:3a:
2a:e6:23:19:f5:df:9e:4f:54:72:66:25:bf:93:47:78:46:b1:
0a:8f:3d:6f:14:28:77:0e:5e:a5:6e:0c:1f:59:78:23:92:33:
d4:17:bc:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 21:15:22 2025 by rpki-client