Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa
File: 323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa (raw, json)
Hash identifier: GTwt3YduDnOj+eDFBZ2onN74ROcC/QgjuDWSJMtkuwg=
Subject key identifier: 52:4D:C3:49:3E:BF:6D:4C:22:A0:42:31:7E:75:55:C1:C0:A5:94:0F
Certificate issuer: /CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Certificate serial: 56BD4E6999783410BBDE954D9757B5BD440DC287
Authority key identifier: 96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa
Signing time: Tue 25 Feb 2025 19:17:28 +0000
ROA not before: Tue 25 Feb 2025 19:12:28 +0000
ROA not after: Tue 24 Feb 2026 19:17:28 +0000
asID: 265491
IP address blocks: 2804:34f4:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bd:4e:69:99:78:34:10:bb:de:95:4d:97:57:b5:bd:44:0d:c2:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=963A564A40CD8C84E5D11B9970B53BA3A441CF46
Validity
Not Before: Feb 25 19:12:28 2025 GMT
Not After : Feb 24 19:17:28 2026 GMT
Subject: CN=524DC3493EBF6D4C22A042317E7555C1C0A5940F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:46:90:b1:69:ce:9f:69:42:c2:e3:95:a8:de:
8b:6e:fe:76:ce:05:52:bf:7a:6c:d9:42:eb:68:a4:
24:b1:36:d5:3f:94:95:69:84:bc:b3:52:32:51:35:
30:83:88:86:29:de:15:35:71:5f:ad:e4:2a:89:bf:
54:db:4a:af:45:92:19:31:00:e0:af:8d:a5:ae:74:
87:b7:17:57:68:bd:5e:99:78:33:3a:de:c8:c6:76:
e9:35:0a:50:79:47:11:f9:70:af:68:52:af:31:b4:
8e:d6:47:b1:f2:62:9f:f3:3c:cc:c8:f6:a3:8b:f1:
49:be:95:4b:6f:79:ba:88:5f:f3:d6:cc:95:0e:86:
67:79:38:3c:f6:92:20:fa:8c:03:60:a8:f5:61:23:
c9:14:2f:5b:19:a9:07:44:ec:9d:6e:38:c4:b8:39:
bf:f1:f4:08:b9:df:a1:3b:04:6e:29:25:ad:c8:fd:
1a:a2:5e:f5:eb:5e:b7:64:a9:75:5c:3e:38:a7:67:
83:ba:e2:b4:ad:d1:d5:cf:c5:10:6d:0f:da:3d:19:
22:f0:a2:aa:16:66:47:44:16:15:74:36:a4:66:62:
93:ff:90:1d:44:ca:ab:77:0a:e5:7d:93:41:73:d1:
68:96:e4:a1:63:b8:ac:cb:fc:01:f1:7f:d8:c7:03:
d5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:4D:C3:49:3E:BF:6D:4C:22:A0:42:31:7E:75:55:C1:C0:A5:94:0F
X509v3 Authority Key Identifier:
keyid:96:3A:56:4A:40:CD:8C:84:E5:D1:1B:99:70:B5:3B:A3:A4:41:CF:46
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/963A564A40CD8C84E5D11B9970B53BA3A441CF46.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/963A564A40CD8C84E5D11B9970B53BA3A441CF46.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8QvPx4PzrLtZsVZaJ7DpK3F8RFVrSbQjqcqQ9x722euD/0/323830343a333466343a383030303a3a2f33342d3334203d3e20323635343931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:34f4:8000::/34
Signature Algorithm: sha256WithRSAEncryption
24:78:56:c7:6f:a8:5e:98:c4:ae:d5:20:9a:cc:7c:ca:b1:44:
01:6e:8d:e9:90:a7:06:98:0b:39:23:98:0e:68:fa:7b:df:13:
6c:00:ac:14:3f:b7:12:e7:05:da:65:c1:7a:9b:22:76:55:a3:
8e:35:55:b8:23:30:1d:68:10:11:b1:90:c5:08:cd:6b:f8:db:
52:94:98:99:f2:96:d0:7e:40:9c:4d:90:20:1d:4e:0c:a7:1c:
a2:9a:a1:c4:89:a1:83:6d:9c:a1:c0:21:5d:fa:cd:62:4c:85:
63:70:8e:e5:fc:c4:88:80:47:d7:92:9c:47:f5:61:73:05:fb:
d5:a8:55:23:66:72:ad:19:9b:c4:e6:8f:9d:a9:33:1f:2a:6a:
dc:b9:9a:d9:b9:d6:d1:bc:d7:ea:9c:02:c0:91:f9:4a:e9:f3:
7d:7f:60:3f:98:a2:71:7f:59:59:ec:a4:45:c6:f8:5a:11:68:
c8:97:77:a9:c1:a7:80:eb:02:91:47:a1:9b:06:e3:f8:32:3d:
53:8a:14:18:f3:04:fe:1a:9b:80:ed:b8:9d:2e:49:e3:96:5e:
e5:50:08:ee:fb:30:98:ea:55:d3:dd:ce:5d:6f:6c:06:9f:9a:
c4:b9:d9:74:cf:83:e4:1f:6b:a0:2a:a3:6c:ec:a1:07:13:92:
bd:a3:ac:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:43:05 2025 by rpki-client