Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d313238203d3e20323636323332.roa
File: 323830343a336363303a3a2f33322d313238203d3e20323636323332.roa (raw, json)
Hash identifier: +OHGvWUVS0SC1MV4NZOm5eCcm25q9n9u5ywHdGlm8/E=
Subject key identifier: B8:F9:E4:18:C0:91:C5:A2:A8:54:13:09:1B:22:B6:C1:27:95:07:EE
Certificate issuer: /CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
Certificate serial: 75DD7DCF069A2F6310A1F4963BB4282B906B5B3D
Authority key identifier: 28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d313238203d3e20323636323332.roa
Signing time: Tue 21 Jan 2025 01:48:29 +0000
ROA not before: Tue 21 Jan 2025 01:43:29 +0000
ROA not after: Tue 20 Jan 2026 01:48:29 +0000
asID: 266232
IP address blocks: 2804:3cc0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:dd:7d:cf:06:9a:2f:63:10:a1:f4:96:3b:b4:28:2b:90:6b:5b:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28274B18A146B4236FC8543D9D65B0C9F6C657E5
Validity
Not Before: Jan 21 01:43:29 2025 GMT
Not After : Jan 20 01:48:29 2026 GMT
Subject: CN=B8F9E418C091C5A2A85413091B22B6C1279507EE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:f7:b2:f2:ec:ac:91:2c:46:c0:0b:8e:35:
07:fc:16:3a:cb:c1:89:80:40:07:f7:00:41:8f:e1:
5f:90:fe:0b:dc:9d:9b:cc:df:b3:94:61:6c:9a:d4:
1a:5a:44:4a:87:89:e4:64:a1:bf:8a:dd:7a:f0:92:
d8:3a:ca:77:8f:22:40:4f:df:a2:2f:d8:34:48:c5:
b4:7c:64:6e:20:a6:96:ce:7a:b2:a4:67:fc:e3:88:
c0:93:ea:41:23:5e:52:c7:cd:e6:5f:17:c6:cb:2c:
39:46:eb:c7:7d:e2:6f:2d:b0:00:37:3e:03:5f:f8:
a0:f2:1f:06:4a:b9:e4:50:23:08:03:91:e9:8a:51:
ed:bd:d5:5f:45:2a:bd:ec:a8:59:33:0a:2e:6b:ca:
49:ed:4c:19:cb:35:3e:eb:85:55:e8:8a:68:95:e7:
67:92:ac:9f:f3:51:9f:ea:21:6a:ff:46:09:dc:01:
c0:03:4e:3e:dc:22:64:74:1f:85:a8:2a:f3:d7:c5:
4c:98:fd:b9:03:f3:0b:6f:eb:a4:a3:74:37:34:0a:
57:35:ae:a8:b4:43:3c:d1:0d:5f:07:a2:e6:c4:6a:
59:f2:02:43:aa:23:2a:32:eb:ba:e7:a9:a9:d1:36:
91:fc:9b:4e:e1:5a:c1:f2:73:81:dc:ae:e6:37:19:
70:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F9:E4:18:C0:91:C5:A2:A8:54:13:09:1B:22:B6:C1:27:95:07:EE
X509v3 Authority Key Identifier:
keyid:28:27:4B:18:A1:46:B4:23:6F:C8:54:3D:9D:65:B0:C9:F6:C6:57:E5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/28274B18A146B4236FC8543D9D65B0C9F6C657E5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/28274B18A146B4236FC8543D9D65B0C9F6C657E5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CevUQf2Qb2epUxxipJBBH1fVDMjQtTGUtiBsoekPoJkU/0/323830343a336363303a3a2f33322d313238203d3e20323636323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3cc0::/32
Signature Algorithm: sha256WithRSAEncryption
1b:1a:33:ee:fe:57:ce:a6:6f:02:f8:b4:eb:ea:5a:5e:69:58:
99:29:8e:d7:19:43:d0:00:2f:88:c9:d7:f9:2a:50:2c:8c:7b:
e0:1b:ab:bd:88:e5:e7:9b:54:f9:62:43:f5:64:dc:f4:7a:bb:
65:af:b5:72:80:d5:6a:48:66:c3:4a:49:17:4c:ae:73:c3:04:
5a:7c:56:97:b6:36:29:e7:12:3f:19:38:8b:6f:cb:dd:b0:49:
bc:4c:e4:3f:7f:e0:e3:53:47:ac:64:18:ed:f9:10:e0:52:da:
45:70:9b:9f:15:09:90:f0:6e:61:4b:44:97:ba:b7:64:39:45:
b5:58:65:86:c2:a5:9c:d9:0e:29:45:76:e2:9a:9e:e4:3f:a7:
f8:b1:42:40:ce:04:f4:01:5b:aa:a7:90:1f:52:8c:34:35:4b:
b3:8b:48:9b:32:36:da:95:9a:d8:bd:80:a2:77:b5:6d:30:dc:
8d:4b:b6:d8:f7:45:8e:d9:bd:47:b5:a4:5b:f4:39:24:87:14:
a9:99:28:c6:f7:f2:1a:4f:af:63:99:f4:c6:4b:02:b8:68:18:
c5:87:a0:bd:9a:0e:5f:c5:4a:89:30:c0:25:88:6d:49:3a:0d:
79:60:e5:74:32:79:07:58:90:ee:b0:9d:d7:a0:6e:d0:43:ae:
d3:b7:62:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:36:51 2025 by rpki-client