Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: jksGTZMeO8by5XjS3KAS1osEHue0CMF1dRboHaWwAkw=
Subject key identifier: 5B:18:E8:AE:F5:2E:4E:44:41:38:E7:DD:BB:81:7F:36:83:D5:89:2C
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 06106DDDD4F38F9677A3256E6481C331D6F6CB7E
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:44:54 +0000
ROA not before: Mon 24 Mar 2025 20:39:54 +0000
ROA not after: Mon 23 Mar 2026 20:44:54 +0000
asID: 267991
IP address blocks: 2804:5654::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:10:6d:dd:d4:f3:8f:96:77:a3:25:6e:64:81:c3:31:d6:f6:cb:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:39:54 2025 GMT
Not After : Mar 23 20:44:54 2026 GMT
Subject: CN=5B18E8AEF52E4E444138E7DDBB817F3683D5892C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:05:0f:97:42:9b:87:61:89:0c:e3:a8:68:2c:
97:8d:4f:32:b0:3b:a5:82:86:79:58:de:39:00:e9:
3c:6b:05:c7:3a:a4:f5:db:11:09:97:a3:7e:83:3a:
97:bb:0b:06:10:ec:37:73:59:42:db:b8:ff:f0:e5:
e9:52:68:1a:52:d9:1a:89:e7:77:3b:f1:5a:c1:e8:
4a:23:d8:1d:5f:15:95:e0:d6:bf:df:45:14:56:5a:
3a:22:84:c2:26:14:0c:23:91:6b:6d:fa:d4:2b:da:
b5:80:b1:4d:a4:5d:84:ba:e2:f0:72:b4:91:1d:d6:
e7:34:13:f1:72:c1:6d:b4:ea:a4:c8:17:4c:b2:47:
0a:f9:e5:ee:56:80:6e:dd:b7:ce:4d:28:2c:de:82:
1c:9d:2d:7f:4f:30:ba:1d:3f:28:1c:a0:0a:bc:02:
9a:30:8e:d3:66:48:d4:f0:bc:23:3f:9e:d0:ab:3d:
69:db:cc:76:f6:56:6d:1d:37:21:75:49:d5:0b:14:
32:ce:c0:93:72:8a:56:3e:74:92:52:cf:8c:fa:3c:
ae:70:1a:d9:18:d5:7c:ad:1d:8d:b8:63:db:d6:dc:
14:11:9a:9c:2d:6b:40:3f:1e:67:36:ce:ff:8e:82:
f5:71:b8:53:35:b6:f4:1f:1c:86:fa:b9:bc:62:52:
03:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:18:E8:AE:F5:2E:4E:44:41:38:E7:DD:BB:81:7F:36:83:D5:89:2C
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654::/36
Signature Algorithm: sha256WithRSAEncryption
d0:4a:e8:4c:52:8a:d5:27:bf:d1:25:c7:d2:e0:53:05:6c:ae:
bf:6e:a3:c6:6d:c3:29:ea:6e:0d:92:5b:bf:83:e4:81:0f:16:
6b:18:78:e0:9b:10:70:d5:b1:cc:f3:25:57:1b:52:dd:5a:f7:
18:0b:69:3e:08:ec:2f:a0:8f:83:8f:6f:b2:c9:da:06:c0:bd:
44:58:cd:a3:48:e9:de:f7:4e:fb:71:07:81:ac:e7:97:66:5c:
78:3c:3b:d3:f2:10:61:19:9f:4a:25:ef:c6:58:8c:e7:56:c4:
9d:a9:c5:88:79:27:fe:11:87:09:0a:4e:6f:0e:e9:3a:95:34:
4e:5a:33:42:98:6a:c1:05:d1:17:fc:79:bb:97:ce:5f:c4:1e:
18:e0:d8:a8:32:49:87:b1:96:50:12:bc:52:ec:48:9d:7e:ae:
11:d0:3c:40:33:15:9f:88:07:4c:3c:62:e2:b8:23:63:b6:9b:
79:80:78:66:b4:ac:2d:68:2c:c9:a9:fe:19:32:1f:f0:5f:69:
ae:e4:83:bf:84:ef:2c:51:37:72:9f:c4:de:e7:82:80:52:70:
2d:1b:92:2c:35:84:b6:e0:50:bc:51:2f:1b:bb:fc:19:c3:fb:
6d:77:f0:bf:d4:cc:75:d6:67:79:db:a3:d1:71:10:06:c5:93:
1b:8a:97:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:50:47 2025 by rpki-client