Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3332203d3e20323633363234.roa
File: 323830343a313033343a3a2f33322d3332203d3e20323633363234.roa (raw, json)
Hash identifier: KsbiQpVjEYmPOpiHsomSH5q3I5h37J4QaQGV7JU63m8=
Subject key identifier: E8:2F:40:48:8B:C9:51:48:6C:0D:97:05:38:1F:8A:AD:BD:E0:7E:60
Certificate issuer: /CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Certificate serial: 03BAEBC28409783E8DEF2720E67F71E92900AD63
Authority key identifier: 64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3332203d3e20323633363234.roa
Signing time: Mon 06 Jan 2025 16:35:03 +0000
ROA not before: Mon 06 Jan 2025 16:30:03 +0000
ROA not after: Mon 05 Jan 2026 16:35:03 +0000
asID: 263624
IP address blocks: 2804:1034::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:ba:eb:c2:84:09:78:3e:8d:ef:27:20:e6:7f:71:e9:29:00:ad:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47
Validity
Not Before: Jan 6 16:30:03 2025 GMT
Not After : Jan 5 16:35:03 2026 GMT
Subject: CN=E82F40488BC951486C0D9705381F8AADBDE07E60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:f2:60:7f:1f:f0:d7:9a:93:d6:78:67:7c:
d9:00:b4:1c:ed:97:92:6d:d9:7b:1a:f5:f9:fa:66:
46:59:5a:4e:cb:e4:78:af:26:7b:7e:b5:d0:38:e4:
00:d5:47:75:0f:52:2d:b8:bb:f6:05:dd:69:c0:7b:
1f:a2:96:e6:e1:91:6e:8c:99:c4:b3:1e:09:39:1a:
40:ec:d1:fc:70:32:7a:ec:51:e5:e8:f0:44:b3:49:
86:0c:b8:38:51:a4:4b:fc:32:27:e8:6e:b8:b7:2a:
cf:fa:24:d5:18:72:83:e4:cb:c8:61:a1:90:7f:f5:
ea:50:71:d6:21:14:c8:9c:0d:ca:9a:34:83:78:81:
f3:31:af:7e:f6:49:4e:6d:b0:c9:cb:86:27:ae:69:
3e:0f:12:1c:d4:e8:45:f0:9f:1e:d0:59:6b:d9:ec:
c3:35:9e:55:6f:a6:55:e3:46:47:8a:7f:5a:04:fd:
07:cd:3f:67:5b:ba:82:f4:a3:06:65:30:42:0a:2b:
66:3d:48:ed:d5:ec:36:be:03:92:a5:de:64:28:7b:
93:59:ac:c4:41:e2:75:8c:5a:65:03:bf:ff:f9:50:
46:cb:fc:43:e2:de:56:3b:e2:67:74:cd:0e:e7:1a:
5a:c8:eb:a4:a7:4f:a3:ea:e4:f6:d1:51:4a:97:7b:
5d:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:2F:40:48:8B:C9:51:48:6C:0D:97:05:38:1F:8A:AD:BD:E0:7E:60
X509v3 Authority Key Identifier:
keyid:64:2E:A2:7E:A1:27:6F:A1:CA:55:EF:3F:D8:87:CF:C6:DD:A0:5C:47
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/642EA27EA1276FA1CA55EF3FD887CFC6DDA05C47.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AZJdQuFc5C35gxdFWDqs3zEdVLS5qeKJyQdpYADKFAig/0/323830343a313033343a3a2f33322d3332203d3e20323633363234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1034::/32
Signature Algorithm: sha256WithRSAEncryption
27:27:25:51:93:64:a2:80:cc:21:78:65:54:d0:75:26:a9:e2:
4c:bb:45:bd:25:d9:c5:1b:ad:90:cc:8f:c8:d5:53:4b:22:22:
43:e1:9b:1f:8c:b6:06:cd:7a:9d:16:79:89:a6:7a:2f:fe:53:
a4:fe:0d:c8:44:90:d0:b0:34:03:aa:54:01:0e:f0:a3:53:1b:
ed:9a:df:89:67:1d:67:e5:88:44:ce:f9:cf:30:f8:e0:6f:41:
18:bc:73:23:ca:06:ff:12:5a:9c:3b:c5:74:44:a6:cb:a8:93:
f6:fd:2b:ab:8b:4d:dc:97:05:2b:39:44:a9:8a:00:f8:80:f5:
b9:07:9b:62:c6:1d:a0:5f:8f:64:6b:8b:37:25:f2:04:aa:78:
64:1a:6b:75:f1:97:61:11:96:65:2e:95:53:3c:ea:30:ba:a6:
83:98:cb:5b:29:03:af:3a:a8:2a:98:59:cd:42:29:56:c5:3e:
00:70:17:03:ae:8a:bf:77:b1:4a:0a:6a:b0:a5:3d:e2:21:9f:
cd:de:9e:68:8d:f8:50:78:c1:4a:d9:c5:0d:12:cb:67:52:6f:
cd:bc:c9:12:3e:b5:6d:83:b3:12:63:fb:ab:e1:32:10:28:a8:
fc:69:7d:ca:4f:7d:44:0d:b7:6e:ba:b5:46:1e:7f:e5:a9:a3:
13:2e:46:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:53 2025 by rpki-client