Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33342d3334203d3e20323636393833.roa
File: 323830343a343635343a3a2f33342d3334203d3e20323636393833.roa (raw, json)
Hash identifier: CJbQbVpvNUOCmIJjX132ofFNfhjZle38lAbYce/ALZQ=
Subject key identifier: A9:50:CE:5B:71:40:AD:C5:7B:5D:22:44:2D:C0:1C:DF:83:8E:86:4F
Certificate issuer: /CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Certificate serial: 09BD0E14B9BEC29FC62117A17C021CD11C8B0604
Authority key identifier: 3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33342d3334203d3e20323636393833.roa
Signing time: Tue 06 May 2025 12:25:36 +0000
ROA not before: Tue 06 May 2025 12:20:36 +0000
ROA not after: Tue 05 May 2026 12:25:36 +0000
asID: 266983
IP address blocks: 2804:4654::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:bd:0e:14:b9:be:c2:9f:c6:21:17:a1:7c:02:1c:d1:1c:8b:06:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F
Validity
Not Before: May 6 12:20:36 2025 GMT
Not After : May 5 12:25:36 2026 GMT
Subject: CN=A950CE5B7140ADC57B5D22442DC01CDF838E864F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:33:54:93:91:49:71:9e:76:7d:51:ad:01:24:
7b:ff:38:a6:73:f1:0a:f0:81:bd:71:6f:93:c0:8e:
bd:6b:60:75:7d:50:36:23:f7:ec:93:59:af:d4:8a:
8b:26:cb:17:7c:0d:de:9a:4a:a5:3b:9e:ea:c6:b3:
ed:e2:cd:56:12:4c:c4:07:d6:0f:f1:d7:37:f7:2d:
bf:24:84:91:8e:73:98:14:64:21:99:a2:ca:54:bd:
71:92:eb:86:a5:3b:e8:fb:e4:5c:f5:ae:1b:49:b9:
ac:06:bc:86:b7:16:32:ff:ca:1d:25:7e:b6:67:b8:
e7:bd:ee:fa:24:1d:5e:0c:e9:87:37:b2:de:23:73:
03:62:1e:9d:a7:06:b6:8a:ed:25:1b:ac:ee:15:2e:
7e:1d:c5:c0:02:80:ad:3b:af:58:7f:7d:00:16:86:
99:ca:e0:1e:b7:a0:6e:87:bc:6e:70:22:e8:1b:3d:
eb:62:d7:cc:e3:7c:91:2e:1f:29:a0:96:60:08:a8:
0f:9a:dc:6f:e4:30:cc:e5:e9:2f:e4:fe:d5:0e:8d:
3c:5d:2b:de:ba:c6:5a:c2:7e:b3:35:e4:87:4b:f2:
06:2e:69:3c:58:de:52:bd:07:0b:18:80:69:a8:79:
a0:87:9b:56:eb:5e:94:49:f6:98:c5:61:f9:2c:14:
74:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:50:CE:5B:71:40:AD:C5:7B:5D:22:44:2D:C0:1C:DF:83:8E:86:4F
X509v3 Authority Key Identifier:
keyid:3D:C3:91:5B:16:1F:2F:1D:4A:EF:DF:6B:F5:81:EE:C0:95:B3:D6:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3DC3915B161F2F1D4AEFDF6BF581EEC095B3D60F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CMJhtV8NdmGXqtXZyZLuhAwQZkXNMoBPPi2C7cxHYVYh/0/323830343a343635343a3a2f33342d3334203d3e20323636393833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4654::/34
Signature Algorithm: sha256WithRSAEncryption
10:42:35:f2:35:42:3e:1b:54:40:10:9d:18:29:29:8f:38:ca:
06:ac:9d:61:8f:58:a2:26:96:a0:13:c4:0c:37:24:be:64:18:
a4:f2:e7:b7:80:00:08:65:27:e3:c6:7e:6c:10:69:63:57:1a:
c8:05:a0:38:49:ac:36:c4:e4:7f:9a:e2:a2:7e:ca:35:f3:05:
67:e9:73:58:e4:a8:59:99:05:5a:53:77:37:9b:a4:f5:4f:eb:
7d:72:3d:13:1a:81:ef:70:d0:7a:29:22:2f:27:9b:7d:b7:ba:
02:83:f9:cc:f1:5f:07:af:f5:2b:25:8d:84:c8:90:f6:06:ce:
2e:bb:2e:26:21:98:29:45:33:a8:80:6f:f1:59:45:21:df:fa:
c7:e6:68:01:3e:c2:e2:0a:2a:0e:e4:57:89:ba:4e:e4:0e:6d:
c8:d6:d1:0a:20:52:2a:cb:06:e5:dd:14:cf:2b:a7:15:5c:8f:
d5:96:93:1f:a8:98:e3:7e:2f:c2:9b:02:61:07:c4:e2:3b:21:
da:11:2a:12:18:9d:9f:ce:fa:3a:10:a9:f7:f2:56:3d:0a:11:
97:91:88:ae:b9:b1:95:8a:a7:21:ad:bb:56:d0:12:36:4e:29:
3b:3c:28:40:23:3c:5b:c8:a0:2a:5a:eb:96:a1:73:30:c0:e6:
84:ac:7e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 05:29:14 2025 by rpki-client