Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa
File: 323830343a323734383a3a2f33332d3333203d3e20323633383931.roa (raw, json)
Hash identifier: 2PavSs/XlyAnstVNXVfHqNUh15pZH0dOS5gkVJPXKtM=
Subject key identifier: 97:6D:D5:D9:68:29:01:52:1D:52:B8:B6:88:6D:65:6A:1E:87:A4:D2
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 2B44E09909107770E6D1115685C02E9B8C6B25AE
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:50 +0000
ROA not before: Thu 20 Feb 2025 11:38:50 +0000
ROA not after: Thu 19 Feb 2026 11:43:50 +0000
asID: 263891
IP address blocks: 2804:2748::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:44:e0:99:09:10:77:70:e6:d1:11:56:85:c0:2e:9b:8c:6b:25:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:50 2025 GMT
Not After : Feb 19 11:43:50 2026 GMT
Subject: CN=976DD5D9682901521D52B8B6886D656A1E87A4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:07:6a:c4:82:f2:cf:9b:a3:fb:d7:d1:e9:07:
67:b8:eb:d8:a3:a2:f1:6f:fc:9c:c0:3e:d6:4b:b2:
16:4f:82:c2:4d:b8:a0:0a:4d:15:b7:1b:a0:77:4f:
40:53:b9:b2:ff:7c:51:f9:91:df:92:58:a3:f8:63:
32:49:0c:33:7e:4d:46:10:6c:38:c0:48:70:6e:ce:
9c:26:df:c6:5d:6e:63:9e:e2:a0:38:48:f3:2f:14:
6a:3c:5c:fd:7f:98:a0:d8:a8:e3:5d:4f:26:6b:47:
9d:71:3e:71:a7:5d:c5:f7:03:2d:e8:38:78:06:a0:
03:78:05:cc:88:e7:2e:25:ea:2e:c4:c3:b8:f5:3f:
42:3b:00:e1:6a:fa:43:05:95:89:bd:1f:dd:2e:c4:
cd:2b:b8:79:4f:40:0d:ad:d0:6d:5f:42:17:4d:40:
ef:d7:a3:c2:34:78:60:f0:05:6e:72:cf:af:35:d5:
55:f5:d8:ea:1b:46:0e:58:c9:31:20:c0:ac:7c:83:
6a:56:b3:ab:d0:96:37:e4:c5:b6:aa:73:c4:a3:f9:
20:9e:1e:8b:38:b7:cc:78:7d:59:4d:c6:6d:54:e2:
c3:41:19:0a:02:03:67:13:21:f8:15:65:a0:db:12:
30:42:a6:41:cb:31:30:2c:16:35:96:04:a1:d5:4d:
6f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6D:D5:D9:68:29:01:52:1D:52:B8:B6:88:6D:65:6A:1E:87:A4:D2
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a3a2f33332d3333203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2748::/33
Signature Algorithm: sha256WithRSAEncryption
aa:56:a6:40:e2:86:e4:59:b5:39:d6:9f:50:57:d9:df:37:ed:
e3:39:27:ae:7b:89:6d:4c:a7:1a:da:7f:ed:aa:88:be:f4:4c:
a6:d9:8e:c0:e7:0a:2d:64:96:c6:49:3b:09:56:14:c4:ed:78:
93:13:95:f6:4c:e3:97:2e:b7:bf:53:5c:a0:52:e0:e2:c5:43:
d6:32:4c:2b:59:b3:dd:7d:1e:7d:a6:4c:21:61:cc:99:de:14:
41:a7:c0:49:db:77:c4:84:7d:03:1f:cd:c3:97:9a:5d:28:95:
e4:20:73:72:44:ba:a8:75:b9:1a:05:fd:cd:5a:31:9f:6a:c5:
35:e8:07:76:34:2f:25:fd:76:c1:dc:d6:cd:cd:ab:58:ae:83:
fd:cf:e5:ac:79:96:f7:6b:64:64:46:19:02:c0:19:ce:d4:58:
50:f7:a5:88:27:c9:0e:02:22:57:cb:be:f3:10:0b:d1:e1:c6:
26:db:df:32:93:c0:d5:8b:26:82:dd:29:d1:36:bc:6e:74:d5:
9d:8a:bd:de:cd:7f:2d:e8:e9:0e:13:e8:eb:f8:cc:6b:00:60:
59:84:48:2a:a7:e9:7c:6b:d1:fc:f4:5a:a4:26:10:53:e7:f0:
e2:ec:f3:d2:ea:29:6e:57:bd:e3:a4:de:6b:47:c2:4e:1e:22:
c8:6a:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:13 2025 by rpki-client