Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
File: 323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa (raw, json)
Hash identifier: jFlPMSFKylfK2DXA/uGHU2L75uI0kY+ix5bS3n0DLGY=
Subject key identifier: D6:69:8B:41:2A:19:71:2C:47:53:62:83:92:FC:C2:0B:D0:20:2B:FA
Certificate issuer: /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial: 18884E42F87458D8906C56D3BA031A853E42D343
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
Signing time: Tue 06 May 2025 12:25:37 +0000
ROA not before: Tue 06 May 2025 12:20:37 +0000
ROA not after: Tue 05 May 2026 12:25:37 +0000
asID: 266983
IP address blocks: 2804:4654:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:88:4e:42:f8:74:58:d8:90:6c:56:d3:ba:03:1a:85:3e:42:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Validity
Not Before: May 6 12:20:37 2025 GMT
Not After : May 5 12:25:37 2026 GMT
Subject: CN=D6698B412A19712C4753628392FCC20BD0202BFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a6:fa:c6:ba:d5:e5:ac:6e:dd:88:a1:2c:e5:
fd:c0:2d:0b:f2:23:fe:d9:fc:73:19:b4:77:d4:c9:
3a:e2:de:af:c8:23:f7:62:77:41:8a:81:f3:53:be:
60:cc:16:b0:df:e2:e4:e3:38:60:2a:ae:83:fe:67:
50:35:c7:c6:ca:b9:be:23:bd:be:e8:d4:26:5d:d3:
13:3e:8f:12:00:23:df:51:e9:1a:9b:73:23:67:1b:
27:74:c3:19:6b:7b:e1:99:3a:38:c5:2b:ce:cf:cd:
27:fd:8e:8b:a6:aa:16:30:bf:12:80:63:10:f5:15:
7f:1d:a6:4a:b2:92:20:ce:3c:b5:31:b2:c8:7e:34:
bb:9d:85:11:85:28:84:59:2e:62:60:5e:20:17:f9:
08:1f:8c:9a:2a:ae:3b:60:64:ed:d7:83:36:b5:dd:
45:cf:cc:de:1f:cf:76:c8:ff:4c:f0:67:f9:a8:31:
70:53:94:6e:1a:11:9c:59:91:ab:7d:a4:02:1b:53:
a1:17:b4:9f:e2:2c:9b:1e:df:2e:fd:a1:71:c7:b9:
e8:1b:df:a6:fa:18:52:8d:b6:fb:6d:95:c0:cd:45:
46:f2:fb:6b:a9:b3:d3:91:75:1f:26:50:10:86:64:
98:d4:2e:29:88:47:65:09:f1:28:a2:e2:0b:b0:b1:
b7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:69:8B:41:2A:19:71:2C:47:53:62:83:92:FC:C2:0B:D0:20:2B:FA
X509v3 Authority Key Identifier:
keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a383030303a3a2f33332d3333203d3e20323636393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4654:8000::/33
Signature Algorithm: sha256WithRSAEncryption
01:5e:f7:96:8f:58:72:ed:ee:01:74:02:6f:58:d5:c6:2b:90:
b7:b5:2a:5e:46:e8:ac:84:3a:bf:dc:b2:f1:4c:85:fc:41:cd:
60:0a:a7:d5:be:49:5c:27:4b:75:36:dc:c3:44:6d:40:3f:e7:
37:e1:3b:0e:0b:ee:1e:85:64:87:f4:11:6b:7b:d6:a7:30:7c:
8d:04:14:f1:60:e0:9f:67:eb:29:bf:31:3f:68:71:18:94:d7:
26:ca:48:85:2e:b3:9c:74:76:04:c8:2b:b2:ed:f3:5f:4e:53:
92:c4:45:08:56:0b:25:e3:f6:58:ba:87:b4:14:c2:c8:a9:b0:
40:a4:f5:52:f4:7b:33:03:91:cf:14:0d:24:99:d9:9b:17:a0:
5c:39:b6:b9:f0:75:ec:01:18:b0:63:c3:22:54:c1:ce:5d:68:
2c:6c:be:26:78:09:a1:61:73:00:4c:60:e0:82:79:54:8a:7f:
ca:46:a8:7c:9b:46:88:e3:a5:26:07:c6:c0:dc:4b:46:8e:58:
63:65:cc:66:85:f4:23:37:14:bc:6a:dc:76:d6:97:f9:68:4e:
2c:e8:c7:ac:06:48:4c:62:de:54:d2:56:82:de:2e:43:45:7c:
10:6b:f4:e2:b7:d4:e1:7f:72:b9:d7:ee:ed:fa:fa:6f:77:fc:
f2:96:83:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 13:25:50 2025 by rpki-client