Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
File: 323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier: lijWlXc3CqEsdvQj67gnhDuMBBq4xOtq7SL6AWUvw2c=
Subject key identifier: AB:16:AC:8F:77:05:FE:28:23:C3:E9:B8:06:57:92:FC:52:BE:C9:74
Certificate issuer: /CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Certificate serial: 2AFD9975AE7917D3D8AD2E775DD89EAB7C7EFD6B
Authority key identifier: 4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
Signing time: Fri 31 Jan 2025 18:37:44 +0000
ROA not before: Fri 31 Jan 2025 18:32:44 +0000
ROA not after: Fri 30 Jan 2026 18:37:44 +0000
asID: 272566
IP address blocks: 2804:853c:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:fd:99:75:ae:79:17:d3:d8:ad:2e:77:5d:d8:9e:ab:7c:7e:fd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Validity
Not Before: Jan 31 18:32:44 2025 GMT
Not After : Jan 30 18:37:44 2026 GMT
Subject: CN=AB16AC8F7705FE2823C3E9B8065792FC52BEC974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:00:0b:15:4c:bd:2d:49:a6:93:08:b0:e6:bd:
52:78:ae:13:a4:52:09:b1:39:ec:b9:be:39:24:d2:
56:a9:4b:2d:8c:5d:4f:0d:60:f6:5b:31:b9:c6:83:
4c:5e:73:ee:5b:e1:da:e3:38:65:00:8c:40:45:bf:
39:2d:c0:bd:14:10:ca:e1:a2:ec:ed:1a:1d:54:31:
65:de:ba:3e:cc:f9:60:a3:d0:7d:da:b6:94:b2:8e:
48:6b:55:e9:c0:b4:cf:4a:6b:e3:33:63:34:a1:98:
0d:fa:0b:18:12:31:bb:c3:da:60:59:f4:56:5b:6e:
c4:39:f0:11:38:7d:e0:c3:e4:22:38:a3:df:40:ef:
61:a6:0f:a5:a5:f4:64:c0:e5:60:00:d5:cd:b1:74:
ad:aa:af:81:0d:ea:b6:96:c8:2e:fc:12:8f:51:64:
4b:e5:35:df:c9:0c:61:be:64:fe:0f:d4:e7:1f:ae:
c3:d3:ce:a8:80:8e:18:ec:c6:fb:ce:b7:5f:42:f3:
84:bb:42:2a:82:69:cf:de:a3:f8:74:ab:07:ee:23:
6c:94:3e:32:36:ea:2c:7a:47:d7:44:7d:d2:7f:de:
2d:2b:af:86:6f:49:df:3a:b0:1b:38:e8:40:5c:4a:
3c:cb:83:38:c7:b8:ca:2a:c7:97:5d:0f:89:f5:20:
13:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:16:AC:8F:77:05:FE:28:23:C3:E9:B8:06:57:92:FC:52:BE:C9:74
X509v3 Authority Key Identifier:
keyid:4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a343030303a3a2f33342d3334203d3e20323732353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:853c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
5f:f2:bf:5e:ca:2f:d5:1f:e6:d5:df:d7:41:0a:26:11:cf:94:
d3:8d:62:49:5e:31:a8:4a:d8:99:f3:a4:43:69:cc:0f:ff:d1:
d7:fd:df:7f:69:ca:39:80:e9:d1:bf:b2:65:30:10:ca:a7:ed:
b7:75:8a:aa:2a:f3:57:fd:84:41:83:c5:18:78:a1:45:fc:e2:
0d:4d:41:30:24:48:0b:94:b1:4d:b5:f7:eb:33:a7:1b:8b:53:
c9:2d:e7:4b:1f:d7:d8:7c:cb:86:fe:52:4b:86:db:e6:b8:fa:
0a:3c:2a:f8:b9:68:47:2e:e9:c8:0d:a9:be:ef:73:10:fa:af:
04:79:60:7a:2b:d0:96:86:f3:ba:e2:a0:f5:93:f2:c1:66:12:
0b:9b:8a:97:a4:e2:3f:11:11:0b:08:e4:ca:9f:fc:5a:a0:dc:
6d:14:10:e0:f7:63:40:0f:3a:ff:a3:f4:10:39:8a:75:32:7c:
e4:0f:5d:13:b5:5e:87:0f:90:0d:73:83:82:18:ed:4a:db:44:
8c:c0:63:d6:17:32:01:be:45:33:c7:54:5e:00:ba:82:3d:8b:
c4:cb:a3:63:b9:ef:b8:25:1d:e4:e2:14:e3:29:b5:a5:b9:01:
de:02:07:7f:39:0b:f4:ac:59:1a:a4:6d:06:48:d7:8c:e9:60:
d7:0f:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:19:41 2025 by rpki-client