Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa
File: 323830343a366566383a3a2f33322d3438203d3e20323730363330.roa (raw, json)
Hash identifier: PK8H3LSt4yaCnNesd4X91uI7Wo/HKj8aNpBAmMup21o=
Subject key identifier: D5:C2:70:87:F2:62:75:69:F2:F1:74:D6:DA:53:3C:6F:5D:B8:BB:D0
Certificate issuer: /CN=243A1884366E9900B679E354E56993980B33B31A
Certificate serial: 58230A8C784EA8F99EA10347D49FF993AAC950EA
Authority key identifier: 24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa
Signing time: Thu 07 Nov 2024 14:21:42 +0000
ROA not before: Thu 07 Nov 2024 14:16:42 +0000
ROA not after: Thu 06 Nov 2025 14:21:42 +0000
asID: 270630
IP address blocks: 2804:6ef8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:23:0a:8c:78:4e:a8:f9:9e:a1:03:47:d4:9f:f9:93:aa:c9:50:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=243A1884366E9900B679E354E56993980B33B31A
Validity
Not Before: Nov 7 14:16:42 2024 GMT
Not After : Nov 6 14:21:42 2025 GMT
Subject: CN=D5C27087F2627569F2F174D6DA533C6F5DB8BBD0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:40:69:29:4e:c7:70:2e:7e:c7:9c:cd:0d:99:
6f:d2:52:3e:55:c2:2b:61:3e:51:9c:7b:ac:3c:c1:
c1:2f:08:a1:ae:dd:7c:b4:38:96:5d:c1:aa:2a:81:
cc:4e:30:37:6e:f1:75:5e:c4:02:bc:14:cd:87:6b:
1e:73:b4:bd:25:42:ba:6b:de:7e:ec:3d:db:01:68:
b1:bc:a2:98:6a:8f:f8:4d:2e:81:45:31:37:91:c0:
fc:08:5a:a1:18:b9:52:d7:69:e0:ac:2c:08:cd:d4:
74:5c:e6:9b:68:17:d8:6e:39:8b:0b:ac:23:c0:f6:
af:0d:bd:15:77:a2:90:aa:7d:d1:46:2f:0e:04:95:
29:8e:28:12:ef:59:03:65:4e:c1:3f:c5:7d:25:53:
fe:da:92:92:c6:d5:b2:8a:13:63:e8:51:95:1e:9f:
e9:3b:d8:26:40:7c:eb:db:b6:49:33:14:58:b8:d6:
77:45:62:1c:7b:9f:c2:8b:10:8f:72:bb:18:7f:b3:
04:16:e7:c7:7b:a3:87:8b:06:52:f0:ec:da:8f:8c:
8f:12:ae:62:0c:ba:7b:18:9b:09:9c:7b:bb:90:92:
fe:1a:05:9a:68:fd:0a:50:57:b9:0f:df:a9:43:ed:
34:ee:8e:4b:e2:43:ce:61:a2:35:2b:80:e4:a0:00:
78:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C2:70:87:F2:62:75:69:F2:F1:74:D6:DA:53:3C:6F:5D:B8:BB:D0
X509v3 Authority Key Identifier:
keyid:24:3A:18:84:36:6E:99:00:B6:79:E3:54:E5:69:93:98:0B:33:B3:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/243A1884366E9900B679E354E56993980B33B31A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/243A1884366E9900B679E354E56993980B33B31A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuXCcyMYHNfxHqB8KSLUynYrzajv2UTwjpC5hU8P6Mtn/0/323830343a366566383a3a2f33322d3438203d3e20323730363330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6ef8::/32
Signature Algorithm: sha256WithRSAEncryption
85:63:8c:45:03:69:04:4c:e7:7c:7d:b8:b5:26:52:7c:28:8f:
18:d0:2e:a4:cb:dc:c9:8b:23:92:b8:b8:b7:8f:84:8d:c6:2b:
42:3a:ce:c9:5f:10:bd:12:2e:fe:f7:4c:53:ce:29:48:09:4b:
ac:43:76:fb:04:66:c5:fb:b7:24:d3:bd:67:de:f4:35:ff:8c:
1c:58:be:75:d0:b5:39:84:74:35:15:5e:da:e0:fb:c1:65:7b:
53:8a:70:ff:e9:6f:ce:9b:a3:37:f8:62:3c:c4:21:c4:bd:db:
9c:99:d1:6b:4e:6c:7f:fb:62:e9:d4:32:2f:73:6f:1f:b8:7e:
13:08:8d:0e:4d:bf:d6:9e:46:fd:8d:2a:e7:7e:f8:9b:1d:08:
6c:0b:b1:30:39:5f:9c:70:66:be:58:40:44:6a:00:8c:dc:72:
f8:24:f4:7e:8f:08:56:d8:26:01:48:c3:3f:00:67:22:e4:f2:
a3:6b:90:94:3d:0b:a3:33:f4:2f:c9:6d:68:f4:a0:79:74:00:
70:db:33:d0:1d:2e:56:2d:d4:33:b5:4c:58:6c:8b:f5:b3:20:
67:8d:20:3e:6f:1e:a9:93:23:94:25:6b:bc:7f:57:24:2e:0d:
10:e0:71:8c:66:95:65:08:04:63:ad:2e:26:cd:7a:b7:c9:97:
22:ad:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:17:27 2025 by rpki-client