Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33342d3334203d3e20323634313431.roa
File: 323830343a316530633a383030303a3a2f33342d3334203d3e20323634313431.roa (raw, json)
Hash identifier: 3lwXUjeOgYAwvLhXCYxoAn0X/SLWbmzN37Wc7ids7Og=
Subject key identifier: 82:4E:6D:81:03:98:AF:46:16:72:75:AD:65:5A:CA:52:9C:09:EC:42
Certificate issuer: /CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Certificate serial: 662118970F8D3CDC4CB25144B1BD902549EBBA5A
Authority key identifier: A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33342d3334203d3e20323634313431.roa
Signing time: Thu 02 Jan 2025 19:26:58 +0000
ROA not before: Thu 02 Jan 2025 19:21:58 +0000
ROA not after: Thu 01 Jan 2026 19:26:58 +0000
asID: 264141
IP address blocks: 2804:1e0c:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:21:18:97:0f:8d:3c:dc:4c:b2:51:44:b1:bd:90:25:49:eb:ba:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A2B96F8B53B06EE448A51709B8D230AE49DBF30D
Validity
Not Before: Jan 2 19:21:58 2025 GMT
Not After : Jan 1 19:26:58 2026 GMT
Subject: CN=824E6D810398AF46167275AD655ACA529C09EC42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:64:f7:fe:22:66:db:6d:d9:cc:0b:36:44:d1:
bf:1e:38:f6:57:25:70:bd:cd:43:9e:74:b8:d0:e3:
2a:a2:71:25:0b:95:e7:86:8d:08:06:6a:38:21:0f:
16:e1:0a:ed:23:12:9f:1c:f3:65:56:46:d8:a6:40:
f3:88:92:c4:09:b3:ff:51:3f:64:17:56:46:9e:a6:
ba:35:93:39:90:9d:aa:cf:d5:fd:ea:19:32:1d:48:
69:1a:4c:6d:16:f0:13:b7:53:ba:c7:21:61:ea:8d:
dd:23:29:f3:e3:35:4c:75:6c:36:96:b9:cd:79:fc:
ef:10:df:d8:68:75:21:be:b7:70:73:ca:1c:5e:9b:
8a:0b:69:b2:ef:66:fd:86:50:ab:a6:a3:3d:a2:b3:
5d:cf:0c:36:4e:47:dd:82:d0:9b:9d:45:c9:8b:7f:
3b:58:c9:65:30:3a:b8:ce:20:e6:e9:16:35:76:4d:
ed:67:2f:5e:ed:ab:3f:ba:41:84:96:ce:2b:80:9a:
d1:20:fe:5b:ae:cd:1b:7d:bd:de:f7:d5:2b:ae:ff:
58:7a:34:70:f6:f0:82:fe:87:a8:88:3c:31:ea:a1:
7a:93:b2:6b:fe:ef:a2:6c:c2:72:bb:5c:81:69:bc:
9e:58:a9:89:6a:66:c5:c5:02:93:49:42:2c:42:cb:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4E:6D:81:03:98:AF:46:16:72:75:AD:65:5A:CA:52:9C:09:EC:42
X509v3 Authority Key Identifier:
keyid:A2:B9:6F:8B:53:B0:6E:E4:48:A5:17:09:B8:D2:30:AE:49:DB:F3:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A2B96F8B53B06EE448A51709B8D230AE49DBF30D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/B5kAUYjppKji9cVcMdNTxwNvdkYo13z2jFuyZo58uXfi/0/323830343a316530633a383030303a3a2f33342d3334203d3e20323634313431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e0c:8000::/34
Signature Algorithm: sha256WithRSAEncryption
44:7d:60:cf:dd:2c:09:8d:7c:90:fb:35:68:10:57:25:89:f6:
63:4d:43:7d:6a:24:df:ff:3c:ff:29:7b:9b:37:be:a5:fb:77:
ce:17:65:71:a6:fb:b7:85:8f:69:7c:50:e1:54:dc:6a:86:8a:
33:86:fc:e0:9e:82:d7:ed:49:f0:cc:dd:0b:35:27:6c:b8:94:
42:0d:c2:7a:66:5f:65:53:d9:29:15:93:b2:1f:0e:ed:a5:e8:
46:02:69:2e:39:08:f9:5b:ef:5d:d8:56:47:8d:28:96:f3:ce:
1c:92:f5:c1:ab:86:70:6c:bf:8e:12:70:0d:4b:ec:af:e0:7f:
89:7d:b9:a9:bc:4b:e9:e5:86:e3:1d:dd:47:cf:f8:9f:72:e2:
38:77:54:92:d7:e4:29:b4:13:e8:72:2d:05:2e:fa:a9:3f:7a:
e8:49:60:f1:4b:89:1d:aa:09:0d:aa:c2:13:e9:17:19:20:98:
1f:ec:9b:0d:f0:9e:7b:08:a5:94:3f:40:4a:6a:2b:ef:7e:9f:
12:ab:70:9c:fd:f1:94:74:d2:e1:40:20:d6:72:6c:09:b1:a5:
76:31:e5:12:8d:fa:7d:97:36:34:9f:c3:77:84:42:63:c8:24:
52:dc:b3:bd:6f:86:f2:cb:1b:c4:00:f4:96:66:7a:ee:af:27:
4d:7d:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:41:11 2025 by rpki-client