Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
File: 323830343a353534633a3a2f33322d3332203d3e20323632383939.roa (raw, json)
Hash identifier: uVDs/4om7r9bKNxADKrnj5t08DQPIvLTxuLK6xCgBCI=
Subject key identifier: 5D:71:39:3B:66:04:9B:02:09:95:08:15:CC:12:2F:AC:F4:16:61:E3
Certificate issuer: /CN=68896B9A803F401F71FCF845C4E94131201E4D39
Certificate serial: 3347982065705FE243F5209165ED73AD393E5872
Authority key identifier: 68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
Signing time: Thu 13 Feb 2025 18:27:50 +0000
ROA not before: Thu 13 Feb 2025 18:22:50 +0000
ROA not after: Thu 12 Feb 2026 18:27:50 +0000
asID: 262899
IP address blocks: 2804:554c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:47:98:20:65:70:5f:e2:43:f5:20:91:65:ed:73:ad:39:3e:58:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68896B9A803F401F71FCF845C4E94131201E4D39
Validity
Not Before: Feb 13 18:22:50 2025 GMT
Not After : Feb 12 18:27:50 2026 GMT
Subject: CN=5D71393B66049B0209950815CC122FACF41661E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:dc:35:17:ea:34:4a:ce:11:85:41:97:09:34:
1d:9c:8b:26:ee:2a:79:de:5f:6f:1c:b3:1b:55:0f:
01:20:3b:54:f2:3f:55:78:d6:79:e0:0e:99:fb:a7:
bd:6e:3f:e6:f5:b3:45:99:34:6f:92:6b:01:13:94:
4a:04:5b:a9:6d:3d:f5:af:11:19:c7:6a:40:98:60:
3c:0b:0f:6c:74:3f:79:3a:5f:2f:9a:8b:6f:5b:d6:
d3:30:8b:e4:bb:71:06:10:56:8d:50:39:f9:38:2e:
48:f8:7e:f8:8b:ef:66:43:87:c8:43:38:cd:0e:d9:
7f:9f:a5:52:bc:ce:71:4e:35:9d:34:1a:be:df:48:
24:1f:86:9c:6d:40:13:91:b6:56:33:01:aa:aa:f0:
f4:70:ab:c1:4c:2a:d7:26:4c:13:f5:cb:09:a5:e8:
df:d0:ac:52:92:7f:27:df:62:5d:47:c2:fa:c4:cc:
e6:6d:09:5e:91:e8:c1:ee:a6:6f:0e:9b:0a:34:71:
ba:c2:ac:d6:54:70:4f:f1:93:4d:3a:26:c6:a6:32:
85:ec:71:c4:6a:7d:31:03:f9:93:ce:3b:46:91:a0:
e9:11:6d:21:5e:47:07:ce:5c:2a:2c:98:ac:ba:fe:
59:49:0e:ef:1b:52:e5:ed:82:d4:10:ec:e4:b9:57:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:71:39:3B:66:04:9B:02:09:95:08:15:CC:12:2F:AC:F4:16:61:E3
X509v3 Authority Key Identifier:
keyid:68:89:6B:9A:80:3F:40:1F:71:FC:F8:45:C4:E9:41:31:20:1E:4D:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/68896B9A803F401F71FCF845C4E94131201E4D39.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68896B9A803F401F71FCF845C4E94131201E4D39.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8gzz5TKKNpn3554Gog6UamkabYLrg8PApTW9ucKind8X/0/323830343a353534633a3a2f33322d3332203d3e20323632383939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:554c::/32
Signature Algorithm: sha256WithRSAEncryption
73:9e:00:67:84:95:53:cd:17:a3:3c:2b:e7:bf:70:6b:03:af:
1b:9c:00:ac:fb:f9:69:b5:57:a5:d8:e1:c9:08:20:4c:57:bf:
9b:62:cd:58:03:07:59:39:72:b0:eb:2e:12:82:47:17:99:c2:
86:84:01:7a:a7:a1:f2:74:ed:73:29:48:de:d3:25:00:67:24:
bd:67:1a:41:d8:db:27:f0:63:20:ec:27:c8:cc:95:50:3c:65:
92:94:b2:4f:5b:2a:9c:7b:59:cd:6b:d9:b2:57:c0:d0:74:da:
d9:9a:07:b6:6f:76:3f:01:72:33:7d:02:a2:c9:9b:f1:9b:2d:
3a:c4:4b:59:ab:d6:dd:bd:6d:2d:14:7d:70:85:38:52:fc:96:
81:be:47:63:be:23:0d:5b:c2:93:5a:d3:be:00:81:a1:c0:f2:
17:a3:9e:9e:dd:9d:87:b6:bb:3e:b5:33:77:ce:c6:99:ea:d3:
db:bc:37:04:04:73:5c:7a:aa:54:f5:ef:93:7a:cc:67:bf:48:
63:8c:44:ac:20:be:92:59:2c:9f:ab:f9:18:76:42:ea:0f:e6:
82:9e:c7:ad:0a:51:f5:c3:e2:b3:40:73:0f:e3:c7:11:6f:19:
b1:dc:d8:4f:04:dd:64:a5:cd:04:04:e3:8d:b4:a8:6e:bf:de:
d9:44:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 07:32:27 2025 by rpki-client