Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa
File: 323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa (raw, json)
Hash identifier: QzhpgxKzUgGNPSHHob42r4LhWou646wTtAW/ZhY8ySk=
Subject key identifier: 60:E7:F3:99:8F:87:F3:7D:95:9A:81:3D:67:6A:4A:02:30:FD:9E:F8
Certificate issuer: /CN=62542D04D7B086689C6E3FE7D77F27061824D478
Certificate serial: 615CB81AB1764ED1C11A3874F733F674DEA5A888
Authority key identifier: 62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa
Signing time: Mon 13 Jan 2025 18:14:40 +0000
ROA not before: Mon 13 Jan 2025 18:09:40 +0000
ROA not after: Mon 12 Jan 2026 18:14:40 +0000
asID: 268793
IP address blocks: 2804:5ac0:4000::/35 maxlen: 35
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5c:b8:1a:b1:76:4e:d1:c1:1a:38:74:f7:33:f6:74:de:a5:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62542D04D7B086689C6E3FE7D77F27061824D478
Validity
Not Before: Jan 13 18:09:40 2025 GMT
Not After : Jan 12 18:14:40 2026 GMT
Subject: CN=60E7F3998F87F37D959A813D676A4A0230FD9EF8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:72:17:78:5a:ab:8c:c5:37:3e:42:d1:93:9a:
96:c2:7f:85:67:e5:5b:af:0e:3d:13:9e:0a:c3:c7:
30:51:55:c9:67:1c:0e:e3:ef:5d:54:40:46:af:ec:
a3:eb:7f:d4:6c:3e:ee:bf:4a:56:85:70:49:70:b9:
1c:13:a6:2b:bf:80:b6:c2:8a:38:76:7e:3f:5e:36:
8d:4a:1a:cc:93:59:d7:e4:62:e4:b6:db:ab:28:e5:
9a:af:97:f8:33:bd:84:90:0e:41:3e:14:22:60:ba:
e4:e1:43:9f:c4:e5:a7:1a:fa:47:5d:bc:6c:7c:cd:
ed:cf:3b:41:18:7c:e3:78:09:b4:c6:31:9b:62:5a:
31:a7:63:87:3d:e9:dc:69:f9:5f:bb:ce:04:eb:42:
89:de:06:ba:d5:b6:65:0a:0c:75:87:8b:8a:dc:a0:
dd:87:9f:46:df:ad:4e:13:39:43:cf:b6:fc:22:81:
ca:06:8a:f0:13:93:3e:6e:82:d0:2a:36:f1:0e:5c:
49:d9:67:f2:7a:cd:c2:a6:9a:1a:3e:af:af:76:38:
38:84:31:24:31:83:2f:ad:46:bb:47:f3:ab:95:14:
e2:79:f9:64:32:a3:54:09:15:f1:13:e8:77:f0:7e:
0e:37:7f:cd:a5:14:69:a6:62:77:53:d9:54:37:3e:
11:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E7:F3:99:8F:87:F3:7D:95:9A:81:3D:67:6A:4A:02:30:FD:9E:F8
X509v3 Authority Key Identifier:
keyid:62:54:2D:04:D7:B0:86:68:9C:6E:3F:E7:D7:7F:27:06:18:24:D4:78
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/62542D04D7B086689C6E3FE7D77F27061824D478.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/62542D04D7B086689C6E3FE7D77F27061824D478.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzKqiLxu2PqmWqxUZuoBB1kqxr2ufBqMRaHBvshdht9c/1/323830343a356163303a343030303a3a2f33352d3335203d3e20323638373933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ac0:4000::/35
Signature Algorithm: sha256WithRSAEncryption
88:a8:ec:b5:b9:33:b2:9c:f9:85:83:07:da:22:5a:e5:b8:ed:
b3:12:ed:56:84:0a:c2:85:1b:68:41:eb:c8:bf:84:74:ae:8b:
0f:fd:64:e7:f5:e0:f4:9a:90:d7:ab:1c:c0:5f:3a:64:cb:97:
db:1c:ba:59:f4:ca:ce:f7:96:aa:0e:96:fe:24:7b:ed:ab:d9:
34:af:94:9c:56:0a:0a:f3:c2:fa:6a:d8:5b:9a:11:7b:1e:75:
ba:51:7d:8d:1b:20:3f:1f:b6:e6:d1:9d:dd:0c:ad:f2:46:5c:
8b:46:3b:e7:1a:60:c6:f0:a4:44:20:ed:01:6c:ab:ef:be:38:
57:9d:6c:1f:81:4a:cd:8f:28:7f:30:06:88:9a:1b:a5:5a:33:
75:dc:df:9e:b4:c2:ec:cc:38:aa:f6:d4:2b:f3:4f:0f:cd:6c:
48:21:a4:24:30:75:65:8a:92:fb:87:1c:6a:1e:ee:b2:e5:b0:
c8:e8:43:5f:ad:d7:60:1d:e4:0b:19:85:db:50:1e:bc:2c:81:
e4:39:a6:c9:66:ac:f0:94:81:21:cb:34:56:3e:61:58:99:e8:
e8:46:47:8d:61:c7:dd:14:4d:f0:4a:e3:60:f3:1f:e6:a6:34:
50:1d:5c:99:1a:4a:be:fa:3f:0d:48:37:32:53:89:a9:ef:2c:
99:06:95:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:21:36 2025 by rpki-client