Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a633030303a3a2f33342d3334203d3e20323638323134.roa
File: 323830343a346462343a633030303a3a2f33342d3334203d3e20323638323134.roa (raw, json)
Hash identifier: uF+zJwWlGCj+uRHClJBLcQ9aHyHQJRb0e3Av+pm0vtA=
Subject key identifier: CB:8D:D7:B1:C0:E8:8B:5D:43:18:66:D2:61:62:AB:3B:FE:8F:B6:1D
Certificate issuer: /CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Certificate serial: 063220BA1E7C5E11B4CD5EB3529F6A167B519F47
Authority key identifier: 22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a633030303a3a2f33342d3334203d3e20323638323134.roa
Signing time: Wed 22 May 2024 20:30:01 +0000
ROA not before: Wed 22 May 2024 20:25:01 +0000
ROA not after: Wed 21 May 2025 20:30:01 +0000
asID: 268214
IP address blocks: 2804:4db4:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:32:20:ba:1e:7c:5e:11:b4:cd:5e:b3:52:9f:6a:16:7b:51:9f:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F
Validity
Not Before: May 22 20:25:01 2024 GMT
Not After : May 21 20:30:01 2025 GMT
Subject: CN=CB8DD7B1C0E88B5D431866D26162AB3BFE8FB61D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:32:ae:75:82:b1:f6:5a:73:ad:a2:f8:58:
06:2c:af:63:15:7e:61:b4:31:16:ee:ca:44:ed:4b:
63:3d:b8:b4:26:4e:36:05:fe:b3:14:cd:9e:bb:9e:
d4:3f:99:ba:65:b2:f6:15:31:58:e9:c0:ad:7c:78:
a7:4c:26:44:a8:13:3a:c1:1b:91:d4:23:df:4b:15:
d4:01:86:54:c6:01:a9:10:66:b4:e4:7a:6a:de:5c:
40:6c:d0:e9:f2:d2:a4:85:13:93:8e:ed:3a:62:d1:
a2:56:74:66:b6:63:5e:82:f6:c8:9a:5e:10:b2:c9:
00:6b:61:8c:a1:35:7c:c3:29:75:c0:d4:43:13:9a:
6f:75:eb:a2:1e:07:41:30:98:42:76:07:fe:e9:21:
79:cb:e1:d6:d9:4b:9e:fb:32:7c:eb:e8:91:f2:97:
70:e8:09:d2:c9:9a:0a:61:05:83:32:a3:84:f9:6c:
2c:4e:d1:34:4e:df:f9:a8:5b:6b:53:8f:88:a8:0d:
86:9e:69:13:d5:7c:db:32:de:c5:89:d6:20:8c:a1:
f1:88:02:7b:fa:63:35:ba:31:5e:87:e2:b5:e8:1b:
99:e1:35:3d:10:73:e0:4d:5f:cb:ee:1c:c3:19:34:
f1:12:4c:72:40:60:dc:99:c3:39:cf:c7:9d:3e:8d:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8D:D7:B1:C0:E8:8B:5D:43:18:66:D2:61:62:AB:3B:FE:8F:B6:1D
X509v3 Authority Key Identifier:
keyid:22:37:EA:6D:37:48:7E:BD:A3:CF:A4:E0:F1:F5:95:7C:98:7F:EA:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2237EA6D37487EBDA3CFA4E0F1F5957C987FEA2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vD2Xwp9yq5PdFEAWk2UWCwWDTkRW7VpTGY3rRSwzHmU/0/323830343a346462343a633030303a3a2f33342d3334203d3e20323638323134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4db4:c000::/34
Signature Algorithm: sha256WithRSAEncryption
89:94:87:14:52:94:9a:e3:68:dd:2b:46:c2:35:f0:6b:fa:5b:
e0:88:ea:34:bf:2d:0a:ff:62:63:b2:c2:c7:f7:25:4b:65:21:
3a:6b:1d:11:4f:27:c4:27:5f:7a:ae:f9:bb:6d:1c:0a:34:ae:
b7:86:1a:11:e2:10:40:1a:0e:cd:c0:4f:cd:34:9d:7a:e2:ef:
a9:be:d8:3a:85:fb:02:59:cc:1b:dd:22:c7:0c:06:17:a1:a0:
9a:e8:27:ee:0c:5b:d2:26:74:39:43:b8:a4:23:4b:55:09:0a:
3a:51:ff:ea:fe:9e:ff:ec:41:bb:92:3f:6f:03:f0:a7:dd:d2:
6b:bb:fb:71:6f:e1:92:4b:0b:54:b1:8b:48:6f:56:3a:5b:85:
72:42:c3:b6:bf:ea:eb:fb:16:f5:69:94:60:a6:dc:d6:87:da:
86:b6:e7:83:eb:80:3c:c7:d1:ee:46:44:09:69:10:3f:86:aa:
72:51:df:4b:5a:70:1f:f2:37:30:f4:8a:b0:f1:10:de:77:a9:
b2:fc:26:47:c3:05:6a:ea:1d:61:c7:da:12:93:21:00:9d:0c:
6a:81:74:ca:18:43:c0:ce:9a:8d:43:0b:ef:5f:94:d7:1a:31:
bf:df:c3:15:0f:c9:a7:a3:69:da:d5:19:44:11:9c:90:6d:f0:
ea:03:e4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:42:03 2025 by rpki-client