Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a3a2f33322d3333203d3e20323638313833.roa
File: 323830343a353935343a3a2f33322d3333203d3e20323638313833.roa (raw, json)
Hash identifier: tO/WDVbkN+hG9vbXP0Bkn64vymeWiLgcxsGfahfJExQ=
Subject key identifier: A8:DE:08:43:5A:0B:A9:BE:8F:4D:1C:78:D0:E0:EB:87:82:26:01:A5
Certificate issuer: /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial: 413736AB628DDFA4987DD0F20CB96D4417703C77
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a3a2f33322d3333203d3e20323638313833.roa
Signing time: Thu 07 Mar 2024 16:47:18 +0000
ROA not before: Thu 07 Mar 2024 16:42:18 +0000
ROA not after: Thu 06 Mar 2025 16:47:18 +0000
asID: 268183
IP address blocks: 2804:5954::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:37:36:ab:62:8d:df:a4:98:7d:d0:f2:0c:b9:6d:44:17:70:3c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
Validity
Not Before: Mar 7 16:42:18 2024 GMT
Not After : Mar 6 16:47:18 2025 GMT
Subject: CN=A8DE08435A0BA9BE8F4D1C78D0E0EB87822601A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:af:a9:46:49:ed:71:00:94:6d:1c:29:97:
64:df:b8:1f:4e:f1:19:c4:fe:4b:5d:38:42:5f:00:
ec:af:af:3a:95:09:d8:b8:d1:c8:8d:7b:f1:4e:7a:
d9:c9:31:37:e8:e3:62:53:51:cf:7e:9a:45:66:ea:
68:40:31:56:11:dd:8e:c5:51:a5:17:2d:16:d7:92:
6c:17:23:68:aa:cc:33:7e:73:68:7f:41:de:6a:db:
2e:63:78:77:65:9a:80:90:38:63:2d:c5:19:32:f0:
bc:98:ad:32:0d:b3:b6:ed:3c:93:55:77:b5:d7:23:
b2:a2:61:ad:18:87:93:39:43:ea:6a:40:1c:80:2b:
2c:49:47:98:01:73:d5:7c:00:16:e3:e7:c4:d7:88:
c7:32:0f:91:f6:7b:7f:e5:1d:79:be:b2:89:94:d3:
56:96:df:12:19:23:08:1c:28:a6:bb:4b:32:8e:07:
23:68:23:3d:14:f2:d7:a7:2a:b2:94:e1:56:da:e1:
c3:b5:b5:55:8f:7f:26:7b:ff:20:f1:29:59:d7:45:
90:0d:76:c5:7a:b2:0b:dd:e2:72:7d:25:7f:c1:20:
0f:1b:a1:cd:80:91:c7:78:84:d1:19:d7:71:b5:53:
a5:54:f7:e7:5f:4f:5f:d3:01:e6:37:66:68:30:58:
b8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:08:43:5A:0B:A9:BE:8F:4D:1C:78:D0:E0:EB:87:82:26:01:A5
X509v3 Authority Key Identifier:
keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a3a2f33322d3333203d3e20323638313833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5954::/32
Signature Algorithm: sha256WithRSAEncryption
99:5d:73:69:20:d3:43:65:cf:84:d2:07:58:df:f9:82:61:1c:
1a:27:c0:dc:e0:b6:15:54:22:4a:74:6a:f0:02:57:7c:3d:2e:
d6:79:ac:5a:e4:8c:ee:3c:41:d7:b1:4d:22:9a:57:94:62:f3:
2c:5f:f7:94:24:90:fd:1b:37:03:a7:11:f7:4f:14:cb:34:ed:
60:d6:55:0f:ca:e6:6a:34:a7:71:d5:c1:75:5e:05:9c:12:0d:
a5:d9:f5:9c:3a:0d:7c:ec:4b:8c:43:fd:80:d4:93:3f:6b:6e:
87:26:3b:bc:85:41:90:fe:aa:d8:12:d5:e3:04:2d:52:ce:8c:
5a:7e:53:27:6a:80:af:6f:05:7c:39:d5:49:22:5a:b8:c8:08:
14:ab:59:d9:5e:0a:51:1a:fb:9d:59:a9:5f:55:d7:e9:75:31:
1b:a5:60:ff:43:be:7d:f4:d1:78:3f:ad:c4:16:3e:47:2e:89:
07:7f:12:7a:69:cf:f9:96:c3:0e:9f:bf:cb:03:b1:31:55:b3:
57:0a:10:2b:04:2b:4e:b2:a3:f8:7a:f3:9d:e9:0f:98:e8:7c:
97:de:ea:38:d9:55:38:77:2b:3c:63:66:d5:91:ea:ed:f3:4b:
ca:ab:70:d5:c1:2a:a6:b8:0f:1e:23:b4:68:80:4c:57:e8:d6:
c8:ac:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 03:01:41 2025 by rpki-client