Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
File: 323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (raw, json)
Hash identifier: pTFpAJquA7kf9JYG3qg9VdXN/ZtgtmN73uyusDR1O2A=
Subject key identifier: 5E:30:25:71:A4:6F:73:48:31:B9:94:7F:75:DB:EA:87:75:D0:28:24
Certificate issuer: /CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Certificate serial: 175827A664520DD6110C72527DBCD53EDFC03085
Authority key identifier: 0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
Signing time: Thu 06 Mar 2025 08:15:42 +0000
ROA not before: Thu 06 Mar 2025 08:10:42 +0000
ROA not after: Thu 05 Mar 2026 08:15:42 +0000
asID: 264544
IP address blocks: 2804:213c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:58:27:a6:64:52:0d:d6:11:0c:72:52:7d:bc:d5:3e:df:c0:30:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A7C3257FA1963CEB7CE14E9599DCE92E73662F9
Validity
Not Before: Mar 6 08:10:42 2025 GMT
Not After : Mar 5 08:15:42 2026 GMT
Subject: CN=5E302571A46F734831B9947F75DBEA8775D02824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:8a:1d:73:0f:fc:86:ac:c3:53:18:5a:b9:
bd:65:d8:5a:60:b1:c1:45:3b:09:96:3d:37:61:2a:
ec:af:06:6e:b0:4d:52:a5:c5:19:3b:8f:de:b6:e1:
8c:73:0a:1d:1a:c8:ca:99:3a:c8:53:41:56:0d:d5:
46:19:fe:61:77:4e:1d:4b:eb:63:39:9f:29:4d:8b:
78:90:eb:36:a5:a5:e5:74:9e:d1:08:51:c8:cb:15:
c7:b6:2c:cc:0b:f0:1e:53:2f:3f:f9:75:93:93:cb:
31:d5:ae:8f:62:9e:8a:33:0e:d7:c0:6f:df:89:80:
75:26:5c:6e:45:e9:ca:70:8b:74:66:ef:8e:e9:d0:
c1:e2:90:2e:ec:27:6c:4f:c2:61:8a:77:1b:a2:a4:
b0:8b:58:ba:42:82:f2:70:59:4e:28:c2:0f:dd:48:
64:bc:40:fa:5b:8b:d4:67:48:ca:fc:fc:d0:dc:87:
7d:bb:da:6d:a2:d7:8f:c4:db:ea:ef:b1:2c:c5:01:
10:cb:7c:ad:fc:1b:62:7a:70:80:7d:91:5c:51:95:
25:ca:b1:3c:88:f0:5c:7e:d9:14:2b:40:6a:06:52:
e8:0f:5c:a8:fd:11:a1:69:6b:7e:02:59:f6:ec:68:
95:44:76:92:fa:b5:7c:af:28:bd:fb:4d:20:e7:51:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:30:25:71:A4:6F:73:48:31:B9:94:7F:75:DB:EA:87:75:D0:28:24
X509v3 Authority Key Identifier:
keyid:0A:7C:32:57:FA:19:63:CE:B7:CE:14:E9:59:9D:CE:92:E7:36:62:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A7C3257FA1963CEB7CE14E9599DCE92E73662F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/2/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:213c::/32
Signature Algorithm: sha256WithRSAEncryption
6e:11:f8:7a:90:8a:74:81:c2:d4:18:aa:89:ac:93:5e:f7:87:
18:8b:17:2a:03:5b:46:be:1c:86:a2:16:e7:30:95:9e:78:62:
84:df:01:9b:7f:39:5f:2b:07:39:ad:79:f9:ca:38:93:dd:ef:
3d:5a:6a:cc:0c:67:20:43:34:84:ee:0f:1a:e3:77:6a:16:b8:
14:cd:ea:a0:e1:30:3b:63:0b:8b:3b:3c:d0:f9:70:6e:e9:28:
25:56:ba:c3:56:31:7d:3d:42:40:b2:86:72:ef:47:93:5e:66:
92:aa:55:a7:c7:c2:4f:79:d9:0b:93:9c:4d:a7:cd:1c:9b:2b:
6b:96:88:27:68:b3:67:1e:d5:8e:94:68:74:48:c5:15:5c:a8:
b5:39:f1:5f:cf:15:10:a8:4e:30:d8:cd:78:44:18:88:1f:b1:
45:73:45:e9:54:43:6f:42:ce:80:28:ca:7d:48:18:09:39:29:
f0:03:32:74:f9:df:11:23:f9:15:90:02:73:e7:17:7d:a1:1d:
12:f9:65:98:85:82:7b:bb:e0:e4:ba:03:e5:39:be:07:c7:e2:
f1:bb:6d:d0:8d:25:50:22:81:15:36:b3:1e:98:c4:ec:d8:b7:
7a:b3:80:b1:12:9e:b5:6e:65:01:bc:7d:bd:b7:d7:7e:08:5d:
8d:da:c5:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 19:50:34 2025 by rpki-client