Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa
File: 323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa (raw, json)
Hash identifier: iYQXb3D7VJdAmtZ75LPUk4nCA8FrcSl0FcHXsYzDgzA=
Subject key identifier: E1:57:93:79:4A:C5:51:8C:59:6C:84:A9:10:F4:86:42:AF:BD:BF:0A
Certificate issuer: /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial: 6C1F058B45ACADD2A117886C914A9F1BD573AF33
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 272220
IP address blocks: 2804:1f54:c000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:1f:05:8b:45:ac:ad:d2:a1:17:88:6c:91:4a:9f:1b:d5:73:af:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=E15793794AC5518C596C84A910F48642AFBDBF0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:51:43:ab:71:b6:77:61:e5:17:88:46:46:f8:
8b:7f:32:bd:c0:28:f2:75:f1:88:cd:7d:db:b9:de:
4a:a2:d0:2d:4d:93:08:e9:0c:99:b5:0a:54:14:a6:
6b:6e:8a:e8:b4:93:73:54:b4:24:0d:f7:77:73:0d:
78:8e:4c:d4:a4:b9:f9:df:e7:31:06:71:91:1d:20:
10:ad:a6:7a:06:2a:04:2b:62:77:b3:41:cd:84:24:
cc:4b:e6:14:ef:7f:32:14:92:94:79:74:b7:f7:03:
a3:e8:4b:57:58:7e:41:d3:f7:ed:e3:36:da:28:a0:
d0:81:cf:c2:2b:d0:7a:87:32:0a:f9:b1:1b:17:5a:
91:4d:4a:fb:47:50:41:a3:36:d7:3d:6f:f7:d3:6e:
dc:a9:df:71:0f:2e:94:d3:4b:f0:ae:e5:e8:dc:9f:
67:89:54:12:9c:b5:53:7a:f0:55:83:b4:57:60:01:
3c:ed:b3:6b:86:e3:b4:6b:8b:a3:60:45:77:2d:8b:
80:25:74:52:27:e1:3f:2b:96:96:17:ae:4f:65:87:
f0:7c:b6:1e:27:50:2a:87:05:87:bb:e3:1f:fa:dc:
ce:b5:92:65:4c:18:85:43:2b:56:e3:f7:fc:05:80:
77:5a:f0:ad:dc:1b:9d:50:dd:ab:ab:4f:6e:a6:f7:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:57:93:79:4A:C5:51:8C:59:6C:84:A9:10:F4:86:42:AF:BD:BF:0A
X509v3 Authority Key Identifier:
keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a633030303a3a2f33352d3335203d3e20323732323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f54:c000::/35
Signature Algorithm: sha256WithRSAEncryption
c9:a7:22:41:79:15:d7:06:bf:a7:dd:68:08:2e:4a:1c:b8:f5:
c6:50:0d:29:ad:f3:29:9b:de:5c:ee:e7:35:cb:4d:c6:85:35:
79:ac:19:44:e9:36:2b:b0:a9:75:05:c9:e5:9e:8e:46:31:f3:
a9:77:c6:ce:55:13:f5:08:da:6b:db:5f:dc:ef:04:08:51:e8:
26:41:f3:4f:13:56:4d:ce:85:37:60:e5:ca:6d:69:aa:01:db:
db:76:a5:41:81:5d:d5:69:ab:e8:41:da:3f:63:05:f9:b9:0d:
21:36:08:30:5e:b7:fa:a3:23:30:10:bb:47:15:65:98:a1:c8:
95:03:85:51:f8:81:95:7a:c3:a6:46:24:bc:c9:08:6d:da:f5:
0e:db:56:5f:65:18:5d:83:e8:b8:1d:d1:7f:e9:ee:b9:f6:61:
d8:58:70:29:e0:dd:06:73:9c:bf:7f:2c:ab:21:fe:9b:77:44:
d7:3e:c7:00:65:d9:cf:bf:8e:ec:de:32:c6:72:1d:fa:08:66:
a5:46:50:07:c9:1a:c4:3c:12:79:45:08:e1:d7:87:cc:57:96:
a2:84:35:d0:5a:96:83:bb:15:67:45:68:bb:34:9d:9d:4e:c3:
6e:cc:55:a6:aa:a1:b5:d5:16:c1:6a:da:ec:59:9d:48:5f:47:
e4:ef:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:53 2025 by rpki-client