Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33332d3333203d3e20323634333937.roa
File: 323830343a316464343a3a2f33332d3333203d3e20323634333937.roa (raw, json)
Hash identifier: Lb8tqxPABMd25B/HPXL/BQQkuxx1VFL2udy3kysbI8s=
Subject key identifier: 3E:07:1A:1B:0B:E6:90:60:56:EE:04:5D:C0:03:DA:93:59:11:EB:C7
Certificate issuer: /CN=D40D71C26E8C990D22430A76496945930ECE72FE
Certificate serial: 625D765AA292F7CA8B0F3EBE7C9F07C5797D5886
Authority key identifier: D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33332d3333203d3e20323634333937.roa
Signing time: Mon 16 Dec 2024 16:27:44 +0000
ROA not before: Mon 16 Dec 2024 16:22:44 +0000
ROA not after: Mon 15 Dec 2025 16:27:44 +0000
asID: 264397
IP address blocks: 2804:1dd4::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:5d:76:5a:a2:92:f7:ca:8b:0f:3e:be:7c:9f:07:c5:79:7d:58:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D40D71C26E8C990D22430A76496945930ECE72FE
Validity
Not Before: Dec 16 16:22:44 2024 GMT
Not After : Dec 15 16:27:44 2025 GMT
Subject: CN=3E071A1B0BE6906056EE045DC003DA935911EBC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5b:d0:db:59:3a:87:42:3c:7e:b9:57:b3:2a:
fc:00:fa:1f:09:b7:54:c0:e1:87:f8:0e:8d:56:09:
06:23:4e:60:9a:40:75:f4:b6:27:33:39:76:b1:9e:
82:ab:e3:24:c2:07:ed:ee:20:c6:ab:a9:00:e1:ce:
2f:cc:46:61:a0:ea:22:01:12:c0:ae:17:f7:12:0d:
c7:68:6e:81:c8:81:f6:9d:ea:2f:70:8a:a6:d2:a1:
8a:80:8b:df:d1:b2:f6:be:bb:ed:d3:f8:a7:25:8b:
e4:7d:79:22:5b:a7:f0:31:d9:59:f0:17:9a:6d:56:
fb:11:5c:37:f2:1c:06:6a:cb:66:41:45:3d:35:1d:
80:9b:f4:08:a0:c9:66:43:c3:e1:56:dc:14:e9:40:
20:a5:a1:85:bd:7a:81:d1:3a:38:10:56:c9:69:d2:
b7:a7:22:4e:8a:40:c7:dd:72:be:6f:b4:66:4c:fe:
39:3f:ef:ae:43:6b:42:95:c1:4a:72:4f:58:2b:5a:
26:7e:89:39:6c:c0:77:4a:e7:eb:a6:7a:95:39:86:
33:51:58:41:21:b8:c7:fa:6f:76:fd:ce:0e:d4:a8:
b3:d7:db:d9:91:f0:eb:77:56:69:be:9c:9a:ef:35:
0c:00:77:a4:f2:cd:9f:67:e7:0e:3a:06:6d:41:a2:
ed:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:07:1A:1B:0B:E6:90:60:56:EE:04:5D:C0:03:DA:93:59:11:EB:C7
X509v3 Authority Key Identifier:
keyid:D4:0D:71:C2:6E:8C:99:0D:22:43:0A:76:49:69:45:93:0E:CE:72:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/D40D71C26E8C990D22430A76496945930ECE72FE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D40D71C26E8C990D22430A76496945930ECE72FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CozZWaDfdu3BbhkFfSfbs33gaGgMyRfDBEDXRr8xSr8a/0/323830343a316464343a3a2f33332d3333203d3e20323634333937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1dd4::/33
Signature Algorithm: sha256WithRSAEncryption
9b:75:07:68:6b:20:6f:e1:f1:90:e3:12:ca:7d:54:fe:08:56:
a9:47:a6:7b:09:e8:2b:57:ee:c6:3a:f1:5a:57:10:6c:91:f1:
07:be:4e:3f:f0:ca:9b:c7:3b:21:e9:96:59:a9:0a:9f:e5:6f:
ce:e9:e7:86:1c:de:49:9a:59:29:46:ff:82:98:92:ec:39:8b:
25:c8:a9:40:cd:b3:03:fc:a8:da:64:a3:0c:7d:ac:ec:8e:b2:
60:93:bf:9b:18:2f:42:68:49:6c:8f:c8:01:fc:0b:93:a7:ae:
95:a8:d8:2a:93:5d:cf:28:bb:74:0d:ef:e5:76:fc:df:6f:5a:
86:ac:1f:8f:44:3a:6b:00:c2:94:99:69:dc:1e:fc:09:e0:08:
11:a5:db:df:dd:79:a1:90:b2:03:36:59:a0:39:fb:76:10:2c:
08:75:8b:74:c7:22:fd:88:67:38:a8:bf:53:5a:35:e8:36:59:
c3:2f:cd:bd:07:63:e1:cc:a5:fe:db:6a:f7:57:d6:42:30:9b:
b9:9d:44:75:a4:f8:2d:26:56:27:c4:d9:a1:e0:99:e5:99:d0:
3f:d3:01:e0:79:79:38:4b:28:86:db:6c:35:e1:df:4d:07:08:
06:7b:6a:12:4d:1a:8c:af:65:23:6d:b9:78:c1:ce:aa:53:7d:
fe:84:34:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:27:39 2025 by rpki-client