Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
File: 323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa (raw, json)
Hash identifier: RDB8qhHDtEJH43hz9XAz3ZX43R7IUeRH/63LhcdomFk=
Subject key identifier: C7:A2:DC:45:48:D4:4D:FB:C9:8E:3D:3E:17:A2:E1:84:16:51:88:4D
Certificate issuer: /CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Certificate serial: 54CF4F0B56B55DB3C32939113989DB112B50AF15
Authority key identifier: 2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 272220
IP address blocks: 2804:1f54:fe00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:cf:4f:0b:56:b5:5d:b3:c3:29:39:11:39:89:db:11:2b:50:af:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=C7A2DC4548D44DFBC98E3D3E17A2E1841651884D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:55:b5:4e:ff:8b:fc:2f:23:7d:24:6c:3d:
0a:b0:e9:79:19:d6:60:0d:88:e3:96:59:78:d1:91:
b3:fc:0f:fb:8e:57:29:f3:e0:66:48:48:38:f8:c9:
6e:04:8c:df:99:86:11:7e:a9:7a:d4:1d:f0:a1:8e:
46:42:7f:f7:00:56:97:e0:7f:20:b4:d9:24:45:0e:
7b:48:50:1e:97:27:4a:7f:56:53:3f:21:fb:2c:c9:
ac:67:3f:3f:cd:1a:8a:f7:6e:c7:dc:27:1b:9a:f7:
27:62:3d:6e:4d:04:c8:ba:4a:c1:5f:55:aa:8f:d8:
ae:12:c4:94:b8:3c:57:af:26:18:34:35:a3:d9:d7:
59:c3:54:0f:59:05:90:a4:b3:42:9d:df:43:1b:fd:
50:4b:9a:85:9f:6d:9c:1b:dd:64:c1:3e:2a:7e:3b:
51:b2:0f:07:f1:1f:06:9f:d4:0d:10:4d:91:10:be:
15:49:1c:71:c0:7d:c5:a1:93:bc:03:be:f7:5d:1a:
13:dd:d4:1b:87:9b:7b:3b:29:5b:92:81:37:54:6e:
41:4e:8f:2c:eb:0c:7f:42:2e:c4:24:f6:53:8d:46:
95:e9:02:71:b4:3c:57:1a:9a:d2:e1:e1:01:d9:96:
7f:bc:15:97:74:1d:d9:5f:93:f6:1c:13:64:2a:27:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A2:DC:45:48:D4:4D:FB:C9:8E:3D:3E:17:A2:E1:84:16:51:88:4D
X509v3 Authority Key Identifier:
keyid:2A:37:8F:3F:C3:AC:5A:FF:D2:AE:F5:89:39:89:56:7E:2D:C4:0D:B8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A378F3FC3AC5AFFD2AEF5893989567E2DC40DB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BadD4W2AyonpD4FMVoxCECfvseg7xDHikaAjsdtXAcEu/1/323830343a316635343a666530303a3a2f34302d3430203d3e20323732323230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f54:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
60:dc:29:3a:5e:3a:ff:14:ea:b5:00:4c:36:67:41:a0:6e:af:
8e:5c:22:de:bf:20:06:db:b7:7d:1d:a7:6a:8d:24:31:f7:a0:
a9:c9:a9:96:37:13:22:ea:56:c6:b9:c5:41:31:82:34:42:9d:
c5:88:25:10:69:16:58:5b:28:5f:69:da:4f:24:79:8d:dc:d1:
fe:93:40:0f:d0:51:93:e6:2c:93:b5:69:b7:7b:7a:6d:c5:61:
b7:8f:43:e9:d3:37:f5:3a:28:57:c1:11:35:6d:7b:90:48:2f:
d0:5d:88:76:e6:c0:7e:02:d3:58:a8:59:9e:94:1c:e3:e9:fd:
c8:67:1c:f8:84:e3:9a:59:4f:96:70:b5:4a:5e:f2:ef:15:79:
4b:ce:5f:7c:2f:88:7f:b6:34:ef:6f:fa:b3:f5:ff:fe:74:da:
42:d3:a4:ce:08:5c:ee:54:85:ca:01:27:11:a1:49:ec:cf:11:
14:55:f4:f8:b8:f9:eb:ad:ff:35:03:81:2d:f6:67:97:62:25:
82:6a:13:ef:73:5a:d9:38:76:d8:84:39:66:4c:df:d3:a5:cc:
6c:60:25:bd:0d:84:8f:62:99:23:e2:30:d2:47:59:79:ec:e3:
65:5a:6b:ea:56:1d:e9:99:4e:53:39:0e:f5:04:0f:a0:d3:49:
60:ae:51:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:53 2025 by rpki-client