Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
File: 323830343a6232383a3a2f33332d3333203d3e203532393434.roa (raw, json)
Hash identifier: emfMjOtDYAqEr/+QJ4um973jJZD9QxOoq9VifwLYzLg=
Subject key identifier: 1C:7E:DC:62:57:D3:5E:8B:EF:82:87:91:0A:64:51:5C:13:62:19:4C
Certificate issuer: /CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Certificate serial: 0A2579312D854CAB4AA379F2F391C19A57492619
Authority key identifier: 2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
Signing time: Tue 11 Mar 2025 20:14:51 +0000
ROA not before: Tue 11 Mar 2025 20:09:51 +0000
ROA not after: Tue 10 Mar 2026 20:14:51 +0000
asID: 52944
IP address blocks: 2804:b28::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:25:79:31:2d:85:4c:ab:4a:a3:79:f2:f3:91:c1:9a:57:49:26:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B7B2B36CB333C1CF60039B1C38742338BE69E2F
Validity
Not Before: Mar 11 20:09:51 2025 GMT
Not After : Mar 10 20:14:51 2026 GMT
Subject: CN=1C7EDC6257D35E8BEF8287910A64515C1362194C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:99:fe:15:62:8e:87:a8:40:bb:89:79:9a:8e:
36:59:fa:5a:61:40:07:27:39:5d:08:50:5b:d5:9e:
60:c4:e0:18:81:46:34:76:97:b0:55:e0:77:80:db:
c3:68:fd:41:d8:64:59:ca:5e:c9:93:b1:4a:ce:e8:
93:49:a6:fa:63:ec:31:af:83:03:b5:d4:44:a0:c5:
d3:59:ff:39:f0:b7:00:02:fd:0a:94:c7:3d:46:c2:
65:2a:71:69:86:a5:5f:35:d2:ca:79:c3:04:3d:db:
c1:6e:f1:c8:60:58:d8:d3:9d:9f:ff:f5:60:9d:b2:
37:d6:87:14:c4:a2:87:ca:c4:a8:2d:db:01:a7:1f:
c9:6d:0e:dd:ea:86:23:0d:ed:0b:22:7b:59:4e:31:
3a:12:5d:7a:4c:d6:b2:24:b5:10:1e:00:92:40:92:
1b:8c:a3:62:cd:ce:9a:94:58:68:a7:fb:d2:d5:31:
cd:08:6c:f5:e4:16:2e:45:5e:d0:dc:b9:af:67:8d:
fb:b5:71:44:51:9a:93:91:8d:98:a4:6e:47:bd:c0:
42:eb:39:7d:69:5a:de:4c:9b:16:de:aa:1c:9e:01:
fb:c3:df:c1:0b:f8:26:f2:d8:ca:87:96:36:38:4d:
4c:e5:22:26:28:af:6a:70:4d:04:1f:82:b2:26:22:
a6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7E:DC:62:57:D3:5E:8B:EF:82:87:91:0A:64:51:5C:13:62:19:4C
X509v3 Authority Key Identifier:
keyid:2B:7B:2B:36:CB:33:3C:1C:F6:00:39:B1:C3:87:42:33:8B:E6:9E:2F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B7B2B36CB333C1CF60039B1C38742338BE69E2F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DVuNsaLjaa2XTbQkrbZigjnVys7QZdATMPiGjirASWfj/0/323830343a6232383a3a2f33332d3333203d3e203532393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:b28::/33
Signature Algorithm: sha256WithRSAEncryption
66:7b:07:ff:f2:d8:c4:2b:c1:ae:4b:7c:df:74:f0:f1:a0:09:
f2:41:c8:3e:3f:65:3a:05:ba:a7:a1:01:cd:6a:ae:e6:93:90:
60:35:d1:ab:1c:8a:4c:7f:7a:29:bd:0b:d7:12:b8:8c:d5:0b:
0b:11:43:d8:92:f2:6f:67:33:5e:4b:e2:42:ec:bf:82:03:22:
b3:f0:5c:ec:8e:39:a6:10:42:28:3b:c9:3f:a7:80:ae:7e:e0:
92:8f:76:e7:7f:cb:3a:17:b7:52:1c:26:bf:dc:d8:13:e9:f3:
fa:e7:a2:81:b5:9c:80:b3:45:37:d5:ca:65:b6:99:b1:56:ab:
c6:69:59:b0:24:96:74:0a:e9:69:f0:14:00:74:a6:70:5c:f3:
07:73:37:9e:65:43:1f:6f:ee:21:ad:b0:cf:7a:c6:70:be:ea:
96:aa:56:5f:d2:1d:64:fa:99:d5:1f:69:32:cf:c1:41:12:24:
81:bd:c4:57:4b:2f:74:b6:97:09:d8:0e:ef:7a:fa:a9:9a:96:
6b:f9:e9:7d:b5:6b:69:9c:c2:94:63:22:3e:da:98:1b:7d:12:
44:96:40:fb:96:b2:d6:64:09:4f:5f:bc:3a:e0:7b:4f:ed:cd:
46:fc:20:3c:9d:cd:05:58:49:62:34:91:6d:60:6d:19:fa:6b:
c1:54:45:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:43:02 2025 by rpki-client