Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
File: 323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa (raw, json)
Hash identifier: RvPEHJnrrGG5ggo/SzSb+aXqP1x7tH7+dH5PprD12ac=
Subject key identifier: 07:54:D2:9E:6C:A9:0E:F5:F4:1B:D1:BC:F4:FD:82:87:10:43:7A:F7
Certificate issuer: /CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Certificate serial: 7B0CB53F43ABFC9945B0BCC2DABA57C708F638C8
Authority key identifier: 4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
Signing time: Fri 31 Jan 2025 18:37:43 +0000
ROA not before: Fri 31 Jan 2025 18:32:43 +0000
ROA not after: Fri 30 Jan 2026 18:37:43 +0000
asID: 272566
IP address blocks: 2804:853c:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:0c:b5:3f:43:ab:fc:99:45:b0:bc:c2:da:ba:57:c7:08:f6:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AAAD605DA9FBA4CF949EEC17E939B692C66159F
Validity
Not Before: Jan 31 18:32:43 2025 GMT
Not After : Jan 30 18:37:43 2026 GMT
Subject: CN=0754D29E6CA90EF5F41BD1BCF4FD828710437AF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:de:c2:8d:d1:97:6e:8e:a1:38:dd:13:9f:4a:
65:ed:b4:88:e6:98:29:bc:10:26:dd:06:3e:e4:18:
5a:fe:f4:dc:74:92:93:4e:50:ba:45:c9:83:64:85:
fa:14:ba:e9:70:02:1e:c5:ae:c3:b6:9e:4f:4b:28:
20:91:bb:20:9d:d5:5f:ac:d4:23:78:9f:be:ae:20:
51:68:15:18:d1:e8:4f:d9:06:4f:da:a5:78:fd:7f:
37:7e:fc:cb:2a:3b:6a:1d:2d:2b:2a:3a:dd:15:58:
97:81:3f:fc:38:79:ea:18:93:97:ef:84:33:24:7e:
1a:3b:85:51:7c:de:c3:56:fa:90:a1:9e:b5:d3:1d:
1f:20:ab:27:59:63:b6:fb:d2:16:a6:da:7a:81:30:
44:0a:11:b4:83:4a:37:07:48:b2:b8:dc:bf:cf:eb:
e0:64:e6:26:6f:23:75:3e:b9:b3:f9:d5:1d:6c:e7:
07:ec:74:f1:c3:cf:d9:cf:78:ec:b6:6a:70:4f:67:
88:16:5d:0c:de:08:cb:88:99:ea:12:05:17:3e:fa:
c7:4e:cc:8d:2f:00:eb:95:67:0d:cc:df:b6:85:23:
61:15:74:2c:06:12:63:e0:70:97:5b:3c:ab:77:b6:
67:5b:56:23:3d:bd:17:20:39:19:ab:1d:27:52:7f:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:D2:9E:6C:A9:0E:F5:F4:1B:D1:BC:F4:FD:82:87:10:43:7A:F7
X509v3 Authority Key Identifier:
keyid:4A:AA:D6:05:DA:9F:BA:4C:F9:49:EE:C1:7E:93:9B:69:2C:66:15:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4AAAD605DA9FBA4CF949EEC17E939B692C66159F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuezWpa87VTa9vrbBb1f6dRnDVaJg3vMVDK7paKhjkaT/0/323830343a383533633a633030303a3a2f33342d3334203d3e20323732353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:853c:c000::/34
Signature Algorithm: sha256WithRSAEncryption
5b:de:dc:8e:59:f5:58:13:a7:ed:a9:4a:22:29:1e:e2:e4:24:
19:54:5a:a6:fa:89:ad:8e:07:ef:63:87:fd:25:c0:c5:8f:0b:
96:df:02:e9:22:d4:57:3d:5a:57:b9:d8:b0:fb:94:7e:ae:1c:
3e:57:e3:fe:c5:82:ce:25:61:49:ac:88:ad:20:87:e2:2f:b1:
05:02:dd:af:98:27:77:ae:27:71:02:e4:9e:72:15:6a:04:2a:
c2:7c:7a:a6:ca:c8:9b:03:e4:c4:da:d3:1b:55:cb:ac:e9:34:
5a:71:8f:30:b5:c4:71:d4:ad:3a:66:49:85:4b:a3:71:7e:e8:
e7:4c:97:b4:98:c8:8b:75:e4:3d:aa:e7:2a:c4:73:cd:7d:5c:
71:9d:d7:b3:e0:e8:c8:e7:6f:74:e9:db:db:47:aa:03:11:b2:
c7:3f:83:5e:f0:6d:06:83:41:24:4d:90:71:41:13:83:cf:7c:
f9:7e:aa:e7:50:02:d6:4e:3e:b0:28:1f:5c:33:22:c2:68:57:
62:a3:62:ad:70:05:0e:62:10:5c:e6:5c:c5:88:b8:36:e6:c7:
f8:97:08:4d:5e:6c:71:e4:89:25:33:88:58:41:09:00:2b:0c:
04:01:46:4a:12:a3:1e:9a:69:da:79:87:a7:3f:6e:9b:46:35:
c1:cb:30:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:16:40 2025 by rpki-client