Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
File: 323830343a333664303a3a2f33332d3333203d3e20323636333734.roa (raw, json)
Hash identifier: DLXwjCeMLBvIeKOLzFt3HCcPZ+8cjQuMJE3Kyj0FUk0=
Subject key identifier: DD:A6:E0:23:C9:BC:B2:B4:E2:0E:2D:7E:5C:C8:F2:62:A7:52:D9:ED
Certificate issuer: /CN=0F9708322570D07CA4BE75EF484B6831664FE864
Certificate serial: 32D9F72FB654A7A65F7B683C8FB0FB6DEB057EE2
Authority key identifier: 0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
Signing time: Wed 05 Mar 2025 21:49:43 +0000
ROA not before: Wed 05 Mar 2025 21:44:43 +0000
ROA not after: Wed 04 Mar 2026 21:49:43 +0000
asID: 266374
IP address blocks: 2804:36d0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:d9:f7:2f:b6:54:a7:a6:5f:7b:68:3c:8f:b0:fb:6d:eb:05:7e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0F9708322570D07CA4BE75EF484B6831664FE864
Validity
Not Before: Mar 5 21:44:43 2025 GMT
Not After : Mar 4 21:49:43 2026 GMT
Subject: CN=DDA6E023C9BCB2B4E20E2D7E5CC8F262A752D9ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ee:a1:a9:fc:cf:29:f0:38:74:f3:c2:45:5b:
35:d1:ea:47:8e:75:4b:3b:89:4b:71:ff:db:8f:e2:
cf:ed:bc:9f:f7:1d:bc:f6:46:3e:6f:04:cc:db:7f:
16:a2:98:bd:90:ec:44:88:1c:56:61:d6:ef:96:d0:
2b:fa:2a:a9:22:aa:2d:8b:25:88:96:da:45:b8:35:
76:49:52:47:24:9a:f4:79:f1:bf:0e:2b:19:f6:68:
c2:d9:1e:c5:c1:42:d5:64:bc:29:10:e6:eb:76:51:
4c:db:b1:d9:39:f8:21:65:e0:76:fd:7c:f8:c1:a1:
7a:db:bc:dc:1a:5d:7a:03:76:9b:00:b5:22:37:d1:
f3:8f:f0:9c:c7:b2:cb:2f:53:7b:82:90:2a:26:f2:
8d:3c:cf:36:1a:3e:d6:38:00:af:61:0e:39:9e:bf:
40:c8:7c:29:50:fd:ec:c5:74:e2:fb:bd:49:a7:c4:
1a:c4:48:23:be:02:08:74:f8:8d:73:53:d6:8d:cb:
e2:87:18:cd:9d:43:89:1d:3f:75:86:0b:ad:14:db:
f3:33:24:37:ab:b4:aa:ff:32:ee:25:0c:b9:5a:9f:
ff:64:50:a1:a5:ed:2c:e7:e3:af:46:79:4c:a4:40:
a1:17:32:fc:5d:21:74:19:da:11:5e:9e:a5:48:f3:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:A6:E0:23:C9:BC:B2:B4:E2:0E:2D:7E:5C:C8:F2:62:A7:52:D9:ED
X509v3 Authority Key Identifier:
keyid:0F:97:08:32:25:70:D0:7C:A4:BE:75:EF:48:4B:68:31:66:4F:E8:64
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/0F9708322570D07CA4BE75EF484B6831664FE864.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F9708322570D07CA4BE75EF484B6831664FE864.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5qNovLNMMSNQckTiyzSHiRUh9GeaQC2zzq1duKqFdSS/1/323830343a333664303a3a2f33332d3333203d3e20323636333734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:36d0::/33
Signature Algorithm: sha256WithRSAEncryption
24:3f:20:86:97:05:4b:83:3d:43:31:a2:5b:2f:93:e3:7e:e9:
57:41:cb:9f:95:ac:5d:ae:64:8f:5a:4d:85:ef:95:2a:92:d6:
7b:b2:27:ff:fd:39:5b:2e:69:48:1a:f7:6b:5b:12:e6:7c:d1:
4b:da:07:08:76:30:58:52:20:b1:af:0c:68:70:91:ce:1d:31:
00:55:c8:c6:59:c6:88:2f:fa:5e:e6:cd:6b:61:9f:df:c2:34:
d6:0d:d6:4c:b6:98:51:92:3c:c0:9b:aa:85:da:bc:e4:39:82:
b2:90:1c:d3:f9:ea:e9:63:40:3b:3d:56:b3:42:ff:19:7f:d2:
17:5d:7b:02:b5:3c:10:fb:4d:30:d4:e0:de:37:43:7a:06:83:
6c:ea:50:37:a1:aa:aa:a9:17:dd:ed:48:00:f2:22:1c:5b:71:
9c:cc:6c:54:b5:35:ae:f3:da:2e:5a:90:7f:64:01:fe:fc:8e:
eb:1b:00:a7:15:96:3b:50:e6:fd:8a:04:65:b8:79:d2:c3:56:
7f:47:09:3c:49:5a:2e:dc:fc:21:45:4d:6b:5b:9c:7d:b4:8f:
ff:fd:f4:1c:31:86:ed:1b:37:f1:92:f5:db:9d:74:2a:58:35:
d3:45:d6:99:61:1b:39:22:19:e2:2a:cc:1b:bb:11:4f:44:3d:
27:c2:7b:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:45:07 2025 by rpki-client