Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
File: 323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa (raw, json)
Hash identifier: 5g00WxgXLNtZZPTlvjc6JcD5vc3fUVHSBAzHSCizyEI=
Subject key identifier: 84:AC:DC:42:BB:88:FD:3C:D6:38:E1:39:AD:E0:B7:A0:04:59:33:E7
Certificate issuer: /CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Certificate serial: 594BE9053794A0E387EA2D6427558DCE005E3C17
Authority key identifier: DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
Signing time: Thu 09 Jan 2025 14:06:27 +0000
ROA not before: Thu 09 Jan 2025 14:01:27 +0000
ROA not after: Thu 08 Jan 2026 14:06:27 +0000
asID: 263541
IP address blocks: 2804:1398:1::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:4b:e9:05:37:94:a0:e3:87:ea:2d:64:27:55:8d:ce:00:5e:3c:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFA5F9058A3FC234221062FC10FD9D6253F81867
Validity
Not Before: Jan 9 14:01:27 2025 GMT
Not After : Jan 8 14:06:27 2026 GMT
Subject: CN=84ACDC42BB88FD3CD638E139ADE0B7A0045933E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0b:08:36:fe:92:1f:0f:ae:86:54:75:4b:8a:
2d:b8:78:d0:6a:ae:ec:b6:ce:86:0e:8e:02:37:27:
66:ca:43:9e:b7:ec:7f:9a:e6:4f:b6:47:12:44:4c:
e6:4a:0f:89:05:69:2c:7a:5d:dc:74:61:d9:7b:04:
ee:b7:29:e3:8b:87:79:83:bf:b8:19:3f:6d:c5:81:
9b:5b:f1:85:91:e9:38:43:ce:8f:f8:e5:65:f5:8e:
a8:45:8d:16:61:a7:5c:25:c9:a4:40:22:ce:54:61:
bb:c0:92:e7:f5:53:8e:44:6c:ad:2a:3a:f3:b1:0e:
15:3c:5c:61:d5:0c:4b:88:af:45:9e:7d:95:67:ef:
a5:a2:a7:ab:43:af:f8:27:75:20:b4:1c:b5:53:4e:
70:27:ca:75:36:cd:d7:ba:ec:1a:46:bc:78:a7:34:
b4:b8:d9:18:41:4e:6c:bb:c3:90:18:7f:7d:aa:d7:
19:d0:80:39:20:10:cf:0f:f5:75:d7:99:65:96:97:
2c:b9:00:8b:b5:72:ec:2d:ec:0f:1e:03:98:3f:4c:
fa:bd:31:f6:ae:2a:fb:70:3c:e3:0b:70:c2:1d:a1:
2b:1c:7b:ac:74:ac:4f:cc:0c:c9:5b:5e:06:1d:cf:
31:18:be:cc:0f:2c:52:e0:24:63:69:85:c0:41:13:
47:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:AC:DC:42:BB:88:FD:3C:D6:38:E1:39:AD:E0:B7:A0:04:59:33:E7
X509v3 Authority Key Identifier:
keyid:DF:A5:F9:05:8A:3F:C2:34:22:10:62:FC:10:FD:9D:62:53:F8:18:67
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/DFA5F9058A3FC234221062FC10FD9D6253F81867.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DFA5F9058A3FC234221062FC10FD9D6253F81867.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ciazpvg81Q4DGM2j81CVSFauYWRQc64YAyMwrGXvRzSU/0/323830343a313339383a313a3a2f34382d3438203d3e20323633353431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1398:1::/48
Signature Algorithm: sha256WithRSAEncryption
98:87:4c:03:6f:9c:df:d3:44:87:84:ae:d7:63:3b:ab:23:db:
68:b7:ce:bd:31:ae:2a:81:93:52:90:7e:cd:15:c8:7f:35:f9:
ea:e3:69:e0:34:c9:de:5b:fb:62:fd:cc:ff:1b:85:ee:d9:6a:
d1:f3:53:fb:4c:4e:64:ff:ea:a5:26:3d:12:70:8a:71:67:51:
ba:9d:a6:9e:7f:b1:05:a9:5b:5a:3c:96:7d:d3:b3:97:69:02:
ee:f3:7f:5c:3d:1b:f4:4f:e1:ea:10:9a:eb:37:58:61:b4:d2:
85:65:c9:25:92:9e:8b:d3:5b:6a:10:b2:73:19:d8:02:c8:fb:
ec:57:b5:b5:96:72:2f:bf:43:69:93:7e:5f:79:09:11:dd:d1:
4a:8e:99:d7:5a:88:0f:aa:18:22:e9:e8:a2:e0:0c:9a:53:30:
65:3f:c2:10:4e:e8:b2:fd:3e:a9:1c:9d:10:f9:ea:73:49:e3:
02:7d:66:69:d2:0f:db:4d:58:94:1d:77:c4:c0:03:0a:04:81:
87:d2:be:34:9f:5f:aa:65:68:c6:0d:47:8d:44:23:79:21:9f:
3e:5f:8f:d1:6f:35:f2:60:76:8a:d5:89:55:a2:a2:74:b4:16:
21:16:95:c4:5d:72:8c:da:f9:c5:1e:70:92:1d:31:07:0e:41:
11:b9:d1:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:46:53 2025 by rpki-client