Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa
File: 323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa (raw, json)
Hash identifier: k8t9YHu5MSFLNMzZSTlBcswXAyzjRYSSWCxu4rkBF9Y=
Subject key identifier: 1E:2A:0E:3A:FF:E8:57:49:42:9B:78:64:31:E8:C0:9A:55:24:46:38
Certificate issuer: /CN=157F6108533B10B33C69A854D184113D2CC781E1
Certificate serial: 6981468D88247705534C401E200C810ABCA5AEDA
Authority key identifier: 15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa
Signing time: Sat 28 Dec 2024 12:38:05 +0000
ROA not before: Sat 28 Dec 2024 12:33:05 +0000
ROA not after: Sat 27 Dec 2025 12:38:05 +0000
asID: 263413
IP address blocks: 2804:15d4:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:81:46:8d:88:24:77:05:53:4c:40:1e:20:0c:81:0a:bc:a5:ae:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157F6108533B10B33C69A854D184113D2CC781E1
Validity
Not Before: Dec 28 12:33:05 2024 GMT
Not After : Dec 27 12:38:05 2025 GMT
Subject: CN=1E2A0E3AFFE85749429B786431E8C09A55244638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b3:0d:43:66:0b:df:b4:d8:56:0d:b0:37:23:
f2:c7:26:1d:74:5c:bc:b8:e5:4f:51:f8:22:5d:85:
ab:56:00:57:9c:8c:65:b3:c2:44:55:a9:94:e2:95:
fb:28:f6:53:04:9c:dd:e6:1b:ce:74:4f:17:de:84:
87:05:eb:77:f5:5a:ce:a5:f7:a3:74:49:cd:96:b8:
15:0c:32:a7:28:05:47:d5:bd:8a:50:8c:d8:d4:9c:
c0:83:0f:e3:0b:65:6e:4a:e0:29:7d:27:8c:92:b4:
db:e8:4a:41:aa:d6:cb:42:32:fa:bb:bb:c5:53:87:
a3:76:cf:80:a7:52:da:dc:9f:fb:31:c5:b0:0e:80:
72:4e:e7:43:4a:27:91:e5:96:be:80:18:c0:43:67:
16:81:03:aa:f5:bd:dd:bf:ce:50:89:24:71:06:40:
30:5f:f7:1f:05:03:5d:b9:39:ac:75:d2:11:3d:15:
2b:72:be:c5:1e:7a:70:2e:0a:7e:f9:05:d0:a0:12:
91:f7:fa:f1:55:1a:37:4c:cc:74:e3:74:b3:d1:1f:
11:cb:26:e7:24:03:26:ab:4a:d8:21:ea:55:11:01:
40:85:e3:37:8b:c4:b4:c9:cc:4e:ca:1f:5b:e8:6c:
6e:4c:7c:db:8a:35:4a:a3:e8:59:74:08:84:69:47:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2A:0E:3A:FF:E8:57:49:42:9B:78:64:31:E8:C0:9A:55:24:46:38
X509v3 Authority Key Identifier:
keyid:15:7F:61:08:53:3B:10:B3:3C:69:A8:54:D1:84:11:3D:2C:C7:81:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/157F6108533B10B33C69A854D184113D2CC781E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/157F6108533B10B33C69A854D184113D2CC781E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9SF3ELzzbBNW2b1uf6GK8c5oSGQAtxHXCQoNZnvBarQE/0/323830343a313564343a343030303a3a2f33342d3334203d3e20323633343133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:15d4:4000::/34
Signature Algorithm: sha256WithRSAEncryption
1f:d5:f7:ba:ee:d7:b5:a9:eb:d1:8c:a5:25:7e:8c:a3:ad:79:
32:b5:78:b7:11:b1:86:ee:94:f7:d8:58:cd:b4:48:44:1b:3d:
50:f0:08:44:03:4f:d8:9e:2c:a9:47:d1:46:d3:07:c5:7b:2d:
8b:65:3a:73:e3:16:29:89:b8:9d:dd:15:fc:82:60:1e:c3:dc:
e9:54:d2:4f:b3:bf:f0:ed:1e:ab:50:17:3b:fc:46:57:67:89:
e6:1f:43:c1:27:d2:df:b0:3a:97:4a:48:fc:2e:ff:07:cf:ea:
61:65:93:db:5a:12:03:a9:9a:dc:0a:e8:9d:77:cd:2e:ae:19:
99:ce:5b:00:71:6b:4e:9d:40:c6:d7:70:da:12:15:4e:74:af:
70:39:6e:9a:c6:01:4f:e2:c4:aa:56:3a:44:98:86:3e:b4:de:
40:2b:a3:0d:e1:5e:b1:e7:bd:c7:ff:c6:69:aa:81:79:6a:0a:
d1:ff:01:ca:59:c2:8c:1b:db:22:51:89:b6:e3:42:9a:a6:31:
6a:3b:65:3a:d1:56:b7:26:bc:a1:7e:a6:78:62:97:97:d0:64:
07:b4:33:2d:39:3f:03:9e:6f:0a:21:e8:73:b1:e9:b2:d1:4b:
63:b2:6e:6e:1e:48:3f:da:fd:5f:11:d6:0c:f2:fc:24:af:23:
21:0a:6d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:03 2025 by rpki-client