Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: ZVHcfa49E+k7uyUeuldqWWAhsYD73Y+u1Nm4Y7ZuM/s=
Subject key identifier: B9:7E:10:27:D3:C7:5E:92:FD:B4:69:21:49:45:DB:42:91:A3:A3:E7
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 55CE75354AEB8429164BBA86D7DD05A1139E00A6
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:21 +0000
ROA not before: Mon 24 Mar 2025 20:40:21 +0000
ROA not after: Mon 23 Mar 2026 20:45:21 +0000
asID: 267991
IP address blocks: 2804:5654:f000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:ce:75:35:4a:eb:84:29:16:4b:ba:86:d7:dd:05:a1:13:9e:00:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:21 2025 GMT
Not After : Mar 23 20:45:21 2026 GMT
Subject: CN=B97E1027D3C75E92FDB469214945DB4291A3A3E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:c0:88:49:5f:fc:01:6c:bc:0d:ca:a0:9c:
bc:b5:6e:7d:72:24:c8:eb:7f:f4:ca:4c:bb:bd:c4:
72:07:e3:f6:e6:00:2a:b2:e8:11:5a:4f:50:76:68:
8e:5c:2a:d6:dc:25:29:a4:6e:5e:99:48:8c:64:30:
c2:5b:7c:72:5a:0d:42:21:a4:09:33:6c:ae:65:21:
dc:40:b1:1b:47:cd:59:dd:73:ce:67:fb:c0:06:bc:
13:82:a9:8f:50:d8:d1:35:93:d6:2d:6c:c5:3f:89:
ea:11:12:61:74:cf:32:e6:f3:68:7e:9e:e8:67:3f:
92:fd:e4:35:40:cc:c2:14:51:4c:30:0d:32:f5:0d:
d4:f8:ab:2b:e3:28:38:c0:b5:80:2a:43:68:81:d5:
ab:4a:38:7c:4f:38:4f:40:d2:0b:40:8e:21:dc:66:
cd:a5:66:31:93:e5:78:db:d4:99:7b:b3:d9:7b:7c:
ad:71:52:ab:56:05:ab:ce:29:c8:c7:aa:77:8c:ba:
06:20:12:b4:be:08:da:0a:03:f0:b9:46:2f:db:34:
43:85:2b:5e:3f:41:5a:19:43:32:02:05:c6:a5:e5:
95:25:4e:f3:1b:b3:f3:b2:c5:d8:64:75:76:f7:af:
82:d6:55:85:96:ef:4e:c3:6d:5a:49:83:85:0f:1a:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:7E:10:27:D3:C7:5E:92:FD:B4:69:21:49:45:DB:42:91:A3:A3:E7
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a663030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:f000::/36
Signature Algorithm: sha256WithRSAEncryption
cc:fb:06:20:56:68:b9:d0:7f:df:ad:71:0f:78:ff:24:5a:3c:
d3:ea:b8:31:ca:ef:4b:b0:d9:f0:18:ec:33:df:9a:82:1d:6b:
fe:b9:62:89:14:15:96:14:b8:97:5a:6f:86:00:90:fd:95:5a:
f3:9f:c5:43:32:cb:2a:87:f8:a4:0a:96:56:33:70:83:e5:cc:
52:43:6d:92:8a:3a:ca:c2:52:ba:5e:74:1f:7c:fc:d1:2f:e4:
98:8b:e5:96:bb:61:87:f1:de:80:25:98:19:81:e0:2c:22:60:
17:39:3c:fd:3d:b7:b3:a8:af:03:1d:38:f7:ee:30:f9:3d:ec:
12:33:3d:36:bd:e8:a9:7b:88:b7:87:fb:5c:8a:b8:90:50:9e:
e7:a0:cb:15:51:22:ba:c4:6a:c3:53:9b:ee:59:89:0e:9a:4a:
ef:77:e6:b5:8c:34:f7:a3:42:0a:c4:ce:4e:c4:1e:8a:43:a6:
83:3b:c5:c8:ee:10:ab:45:9c:6d:8d:40:07:6f:e6:14:bf:c6:
05:12:fa:e2:43:68:2e:14:34:11:ea:ee:4b:5b:67:fc:93:6d:
f9:2e:48:b8:c5:e3:ef:ec:0a:e7:0f:83:c7:27:b7:24:95:03:
5e:0d:67:81:dc:0b:2e:c4:18:62:d0:b8:fc:ef:65:d8:85:47:
0b:0b:57:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:22 2025 by rpki-client