Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa
File: 323830343a386538383a3a2f33322d3438203d3e20323733343332.roa (raw, json)
Hash identifier: w+RGFIUO0fkMSWVC+1OJSOxgwJ3XnZ8bhoyISdqC9uM=
Subject key identifier: 77:BB:0C:8A:5A:27:4B:47:C9:EC:64:AC:A3:88:79:7F:99:51:7E:EF
Certificate issuer: /CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82
Certificate serial: 66B7159425DBCD41A43FFED80577808FA57CAD8E
Authority key identifier: 2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa
Signing time: Thu 06 Mar 2025 02:51:48 +0000
ROA not before: Thu 06 Mar 2025 02:46:48 +0000
ROA not after: Thu 05 Mar 2026 02:51:48 +0000
asID: 273432
IP address blocks: 2804:8e88::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b7:15:94:25:db:cd:41:a4:3f:fe:d8:05:77:80:8f:a5:7c:ad:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A56F974D01ED8CFD5D24022C9C313E4A67D0B82
Validity
Not Before: Mar 6 02:46:48 2025 GMT
Not After : Mar 5 02:51:48 2026 GMT
Subject: CN=77BB0C8A5A274B47C9EC64ACA388797F99517EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:08:fc:56:8b:73:91:36:16:45:97:b9:0d:47:
a5:5e:ce:8f:0b:69:30:a3:ba:6e:74:d9:cf:4e:40:
79:f7:73:83:67:b3:ba:50:14:2d:2a:dc:31:88:16:
fd:66:47:22:8f:67:11:fc:1b:10:2c:0b:08:e3:37:
2e:39:14:44:7f:37:2c:97:ad:31:34:9e:64:fa:6a:
62:0e:61:0c:aa:72:6c:6a:be:d7:6d:81:81:c0:89:
02:7c:c3:3e:54:a2:4c:58:b7:3e:98:82:b4:00:90:
de:d7:ae:ed:bf:a7:df:56:d2:71:95:d2:0b:a1:c8:
e3:81:af:4d:2a:0c:21:a0:89:61:94:ce:ab:94:5d:
c2:8b:42:7f:cb:63:fa:77:68:6b:be:93:83:30:db:
5d:2a:ad:25:24:84:61:8e:76:a3:ce:e3:23:d5:79:
85:07:ed:2e:75:e9:95:73:58:0d:8e:43:86:64:fb:
b7:30:0b:f3:56:6d:3c:11:7d:e0:bb:bb:4d:2b:09:
ac:e2:56:19:4f:e3:6a:3b:0e:04:b2:88:7e:bd:25:
eb:12:bd:23:d8:11:6b:3d:06:cc:71:7a:5b:82:a3:
8f:3f:6d:8e:01:05:b1:fd:33:1e:3b:5e:71:79:e3:
9b:ed:7b:27:62:d4:37:cc:b2:1d:11:f8:ba:33:a0:
92:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BB:0C:8A:5A:27:4B:47:C9:EC:64:AC:A3:88:79:7F:99:51:7E:EF
X509v3 Authority Key Identifier:
keyid:2A:56:F9:74:D0:1E:D8:CF:D5:D2:40:22:C9:C3:13:E4:A6:7D:0B:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A56F974D01ED8CFD5D24022C9C313E4A67D0B82.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CwicFrahQ5HkwPCirwUtD4M9BpaF2buPw1eWajSyLTBL/1/323830343a386538383a3a2f33322d3438203d3e20323733343332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8e88::/32
Signature Algorithm: sha256WithRSAEncryption
4b:9a:d6:77:67:35:5d:ad:0f:e1:4b:e0:44:3a:ee:57:63:4e:
61:1a:7e:c5:d0:57:4f:9d:b2:0a:d5:13:30:72:8c:d2:31:99:
cf:92:3e:3f:76:02:87:d6:40:6b:31:80:7a:d0:5d:f9:17:c1:
e9:99:41:a7:3f:04:b5:cd:9c:db:0f:db:1f:98:2f:b4:de:95:
a0:49:c6:06:95:12:d3:a0:d6:b6:f3:f9:54:9e:9a:ab:ff:c5:
26:49:18:01:eb:13:2a:a1:5e:a6:c5:06:69:45:ab:26:58:24:
a0:d2:ff:10:01:d9:08:c9:fa:2f:56:66:38:3b:e2:7a:00:5c:
2b:c4:8c:b3:e5:a3:5e:aa:7e:51:86:9c:85:67:af:96:6a:0d:
c2:37:03:26:1f:ab:c0:d5:96:fd:0b:65:09:ce:87:48:20:5e:
7f:3a:fe:4c:9f:30:c5:71:93:16:64:48:40:88:ad:8d:b1:e4:
1a:89:73:eb:7c:d7:93:06:a5:96:e8:7e:a3:07:93:b6:b0:7c:
45:2e:7c:7a:3e:2c:86:54:78:d6:f3:2a:fe:3b:21:97:17:74:
fb:ec:ca:45:66:c6:32:fc:a6:55:e7:0b:34:19:b6:ea:c1:cb:
e9:e9:59:fa:1a:e4:8a:48:4b:8b:6f:b2:94:05:f8:da:10:dc:
9e:e4:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:46:06 2025 by rpki-client