Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
File: 323830343a316464343a3a2f33322d3334203d3e20323634333937.roa (raw, json)
Hash identifier: 5l0Yf0DN2huid+m5TNsouSwekB2GkkCIcJImqwQNXW0=
Subject key identifier: 33:BC:53:91:0C:B3:31:4B:2D:FB:F8:12:48:29:C2:BB:5F:1A:41:A9
Certificate issuer: /CN=E099C399B33A5BD4B09B4048096B814CE28EFBD9
Certificate serial: 686A1F9289979CE603DC8A377715041BB0D3F029
Authority key identifier: E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
Signing time: Tue 06 May 2025 20:08:30 +0000
ROA not before: Tue 06 May 2025 20:03:30 +0000
ROA not after: Tue 05 May 2026 20:08:30 +0000
asID: 264397
IP address blocks: 2804:1dd4::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:6a:1f:92:89:97:9c:e6:03:dc:8a:37:77:15:04:1b:b0:d3:f0:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E099C399B33A5BD4B09B4048096B814CE28EFBD9
Validity
Not Before: May 6 20:03:30 2025 GMT
Not After : May 5 20:08:30 2026 GMT
Subject: CN=33BC53910CB3314B2DFBF8124829C2BB5F1A41A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:ad:6f:68:e3:86:cb:60:3b:63:ac:74:6a:
b0:4f:5d:78:69:ed:1e:07:d7:58:b9:1e:f1:06:50:
13:b5:04:4a:1d:d9:1d:fc:ca:86:b8:5d:0b:9d:03:
6d:44:fa:1f:3f:fa:b6:fd:85:92:21:c6:ef:10:d5:
13:4d:c4:20:21:17:6e:41:04:41:c3:7c:1f:31:f8:
ba:9f:22:42:85:cc:d6:e9:bb:dc:31:d5:78:52:dd:
ea:a6:31:6a:99:f2:9b:15:44:0c:08:c2:d1:98:51:
ee:89:48:9c:0f:df:81:34:23:f9:d8:35:44:4e:22:
b2:8d:d8:06:db:46:88:0f:80:47:16:e6:2f:b5:64:
47:b9:ce:de:b4:0a:e5:79:18:1c:54:17:d2:52:08:
74:4c:39:fb:28:80:c1:d5:f3:07:3b:6a:5e:de:68:
9a:67:89:43:ef:4d:37:a9:7e:3e:c5:c5:b6:46:c2:
ca:ac:39:c2:87:bf:1c:06:e1:5f:f0:9c:39:6e:94:
27:4d:dc:b0:bb:12:53:13:1f:2d:39:29:03:bd:22:
d2:6b:63:0c:66:5f:96:d3:4c:25:9d:6d:c4:a3:74:
66:ff:ae:0d:ac:6b:64:50:3d:83:d7:34:cd:db:01:
19:52:9a:89:c4:65:3c:3e:61:50:81:5e:6b:6d:3f:
a5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BC:53:91:0C:B3:31:4B:2D:FB:F8:12:48:29:C2:BB:5F:1A:41:A9
X509v3 Authority Key Identifier:
keyid:E0:99:C3:99:B3:3A:5B:D4:B0:9B:40:48:09:6B:81:4C:E2:8E:FB:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/E099C399B33A5BD4B09B4048096B814CE28EFBD9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E099C399B33A5BD4B09B4048096B814CE28EFBD9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33322d3334203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4::/32
Signature Algorithm: sha256WithRSAEncryption
76:a9:b3:d1:4e:40:d9:86:66:93:09:6b:9e:a6:94:e8:3b:24:
47:6f:14:03:74:3e:0c:20:46:bf:90:6b:23:a2:17:dd:7b:35:
80:6d:ef:43:c5:c2:14:be:66:03:e4:0e:cc:9a:0a:e7:9d:da:
44:27:46:64:bf:da:7b:e6:29:30:b0:27:b1:91:93:33:06:ae:
99:9c:7f:f4:8f:a0:83:8f:b5:75:1f:70:79:36:c2:82:91:56:
04:e8:08:9c:20:6a:79:4c:44:7e:32:cd:e9:cc:c4:48:ee:6f:
bc:2d:d4:43:b5:55:d7:b5:1a:77:4e:2b:1e:c4:1a:5b:91:8b:
c1:40:6c:c3:ba:90:be:26:4a:ad:c7:e8:a1:34:34:cc:58:64:
33:79:4e:2e:d6:12:1c:66:cd:9c:a8:f9:74:2d:e4:df:85:44:
0a:1a:34:59:0a:e3:5d:d5:e8:c5:c1:c7:d2:a9:90:94:bb:01:
07:70:6b:a5:34:2e:7d:48:c0:56:b1:6b:b9:4c:59:30:f5:e2:
65:e6:00:aa:0f:32:1e:52:81:d8:3f:6a:4f:6b:2a:82:31:a6:
9e:14:7f:46:7f:2f:ca:8d:42:42:3c:d8:d9:50:e5:af:60:f1:
5b:71:4d:53:35:95:ab:61:92:b2:bf:6a:42:ad:ef:08:8a:c9:
32:30:f6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:06:24 2025 by rpki-client