Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: q/9IgkS/QHzM8X32/99OxuLhur9cDqN+DxASpaoXGwc=
Subject key identifier: 46:5C:C4:5A:4A:BC:81:08:88:85:01:3B:24:3B:F2:D2:3F:68:6A:EA
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 21013FA26130D4E376F27D14CBB872C075EC492B
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:08 +0000
ROA not before: Mon 24 Mar 2025 20:40:08 +0000
ROA not after: Mon 23 Mar 2026 20:45:08 +0000
asID: 267991
IP address blocks: 2804:5654:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:01:3f:a2:61:30:d4:e3:76:f2:7d:14:cb:b8:72:c0:75:ec:49:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:08 2025 GMT
Not After : Mar 23 20:45:08 2026 GMT
Subject: CN=465CC45A4ABC81088885013B243BF2D23F686AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ff:73:84:40:c3:8d:2a:e4:97:0d:2c:16:bb:
f7:8a:6f:c4:c6:4d:37:e9:85:cb:ea:86:63:d7:1a:
2e:13:5e:dd:d9:55:ac:89:05:cf:47:15:7f:63:88:
a2:de:1b:a6:c2:93:af:e3:98:d2:fd:e2:d1:04:ac:
d7:01:01:c0:e0:f8:e3:d2:8c:c6:46:03:f1:c2:2e:
63:bd:b6:d2:09:ea:93:e1:4a:c4:b5:95:af:3e:6a:
94:27:ab:e9:16:5f:0d:67:d2:79:fc:e5:1e:01:f3:
97:08:c1:95:30:87:23:58:dc:45:e9:bd:5f:e0:33:
8d:c2:94:ce:12:da:96:c7:6e:b3:30:fa:ed:5a:35:
b9:c6:fe:68:db:b8:01:15:b4:38:4a:fa:1b:e9:c2:
ea:85:ca:ae:2b:7f:5b:55:2e:00:55:7a:8d:8c:3c:
24:9b:16:e9:d3:b5:1c:42:ba:a6:6b:4f:ce:e0:ce:
e5:e1:0f:15:63:16:20:73:a8:96:f2:fb:4c:d5:23:
f8:1b:c8:b4:66:83:b3:7d:45:f9:95:74:6c:b4:91:
29:ed:43:26:61:da:71:a1:ba:8f:0d:5a:f0:dd:6a:
74:58:ce:c0:ed:ad:9a:33:bf:dd:62:15:59:0e:0a:
63:98:74:86:44:28:30:70:a2:ec:5b:8a:11:71:32:
b6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:5C:C4:5A:4A:BC:81:08:88:85:01:3B:24:3B:F2:D2:3F:68:6A:EA
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a383030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:8000::/36
Signature Algorithm: sha256WithRSAEncryption
82:52:7c:97:7b:27:cf:4d:48:cb:95:99:64:2c:49:2a:12:56:
b2:bd:f6:e1:49:bf:0b:b2:3e:22:be:9a:51:42:92:77:e1:db:
84:8a:3d:50:6e:a6:73:76:f8:1a:3d:a3:b9:23:19:1f:77:d2:
e1:2b:99:7f:4d:04:c8:62:25:dd:aa:b3:ae:04:1a:af:54:93:
b6:0d:30:20:7c:69:49:29:0c:eb:16:09:a6:dd:86:d1:e5:f8:
bc:4c:a1:d3:be:a3:80:d3:46:08:f2:cf:2f:eb:9a:d9:f0:c0:
1c:9c:4d:18:c1:0a:6f:a1:e2:1e:13:a5:0a:e8:b0:df:95:e4:
31:a8:99:db:99:c5:42:f1:5b:65:65:81:ed:2a:99:4d:f2:c6:
94:d7:78:7b:ef:5e:be:51:56:df:b2:96:b8:22:7d:b7:06:38:
34:54:36:21:3f:54:b2:4a:e4:0b:a1:92:a0:0a:41:6a:2e:b0:
e5:50:13:e6:f6:8c:7e:c0:75:8f:a2:82:45:fc:03:38:4e:ca:
0a:92:f5:a5:6f:17:60:14:20:7e:11:80:f1:45:df:06:3c:c8:
92:e2:b8:f2:6c:93:4b:b6:bf:a7:fd:8b:8f:3e:ca:00:36:19:
c9:0f:83:b5:94:9f:12:58:0c:57:4c:dd:45:84:55:ed:be:57:
98:0c:bb:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:42 2025 by rpki-client