Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
File: 323830343a366336383a3a2f33322d3338203d3e20323730343636.roa (raw, json)
Hash identifier: s6KXo1wwEJBxH+b7Le5pRY/FyTNzQlIcdhc6vHyP1UA=
Subject key identifier: 2A:D4:A8:17:64:6B:D6:52:F6:40:84:3E:BA:CE:44:A2:65:25:D3:AD
Certificate issuer: /CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Certificate serial: 717A09B2AA4DB758BCFC14BBF012EBE3045F7B8C
Authority key identifier: A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
Signing time: Thu 06 Mar 2025 05:55:23 +0000
ROA not before: Thu 06 Mar 2025 05:50:23 +0000
ROA not after: Thu 05 Mar 2026 05:55:23 +0000
asID: 270466
IP address blocks: 2804:6c68::/32 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:7a:09:b2:aa:4d:b7:58:bc:fc:14:bb:f0:12:eb:e3:04:5f:7b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8
Validity
Not Before: Mar 6 05:50:23 2025 GMT
Not After : Mar 5 05:55:23 2026 GMT
Subject: CN=2AD4A817646BD652F640843EBACE44A26525D3AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:28:1a:f9:c6:4a:68:a8:b4:35:9c:a3:ab:40:
c7:5a:67:74:25:24:2e:94:81:be:6c:70:75:c2:1a:
34:11:70:4d:f0:84:6f:6c:7e:64:59:d5:ba:bc:68:
6b:fc:34:f0:34:8e:3f:00:a9:75:12:5c:56:4b:c0:
39:1d:33:7f:12:dd:eb:ef:0e:8c:16:6e:83:60:a0:
e9:e9:1a:a4:ef:aa:45:2b:f1:f2:2f:84:02:0e:9b:
50:44:2a:fa:ea:e3:39:da:b3:8b:13:36:09:42:1f:
1b:be:73:c9:cf:79:18:25:6d:f0:2e:31:bb:87:fc:
ce:64:61:8e:b3:72:4b:ec:00:f5:17:78:44:b4:87:
66:ca:50:ee:b1:da:0a:19:a7:3c:e9:d4:73:4a:dc:
5d:dd:26:43:ae:84:c8:eb:83:f7:b1:77:46:e2:bd:
0f:91:31:29:6b:e5:4d:11:2d:3b:ad:4b:39:d8:1a:
6d:96:40:b1:fe:5a:bd:d0:9b:56:4f:9f:37:88:0b:
45:db:08:45:c4:a5:e9:39:7d:f6:48:c7:5f:77:b7:
3a:1f:ec:6e:2c:3e:85:b2:fc:a9:b6:00:54:1f:89:
52:28:00:36:cd:36:5f:0c:a3:fe:ce:ed:c3:00:9a:
42:62:18:6d:e1:79:bd:f4:4a:09:c2:07:08:c1:62:
f7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D4:A8:17:64:6B:D6:52:F6:40:84:3E:BA:CE:44:A2:65:25:D3:AD
X509v3 Authority Key Identifier:
keyid:A0:D4:8A:48:1A:FA:B5:F1:D8:DA:16:FD:31:01:AC:40:1F:7A:16:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A0D48A481AFAB5F1D8DA16FD3101AC401F7A16C8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DA7MqrDpFx9Jk8N8kGEZDb2jij8ygvfZnhCtxY6BVAua/1/323830343a366336383a3a2f33322d3338203d3e20323730343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6c68::/32
Signature Algorithm: sha256WithRSAEncryption
99:44:4b:b4:d9:c7:2b:3d:15:e3:a6:06:fa:b8:5a:38:bc:d4:
71:5a:d4:96:37:14:0b:b9:18:5f:59:35:64:bc:87:42:ff:91:
ed:b5:b9:6a:ba:9f:b1:ec:82:14:ba:1e:8a:4b:8c:84:70:14:
42:f1:91:d3:d4:96:b5:d3:a5:d6:c5:ac:d5:10:99:0b:a0:4f:
a0:0f:3f:e8:e2:7e:0a:0a:99:c9:07:d6:ee:6a:e5:27:76:63:
19:90:05:21:58:0b:a2:85:5c:1b:fb:b3:ee:b3:36:cf:cb:2b:
e3:3c:d2:e1:17:8b:03:83:43:0c:82:08:02:f5:02:13:72:a2:
42:0d:88:5c:1c:92:fb:1a:51:3d:41:64:33:d4:8a:40:4d:84:
2f:c7:ff:8d:44:55:fd:5c:1f:5e:fa:53:52:a7:b9:53:24:e4:
7b:60:2f:0d:9d:13:80:ee:1c:b2:e6:16:be:6d:be:1d:da:0b:
d1:a7:9a:93:bd:0e:4f:3f:a7:c3:38:e8:04:4b:48:dd:cb:79:
c0:f7:08:88:ae:e4:ca:65:39:ea:1f:45:b8:25:42:6a:7f:bf:
41:06:b9:b9:28:02:4f:f0:8f:d3:c3:a7:d9:02:f3:a9:a8:7f:
92:f9:a3:5c:7b:50:fb:61:4d:b2:48:df:fd:4a:eb:38:8b:db:
91:86:96:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 00:24:38 2025 by rpki-client