Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
File: 323830343a3538303a3a2f33332d3333203d3e20323632353138.roa (raw, json)
Hash identifier: w6LvHedPSUOIHn0WPQFaDczBCVi+9teIRNV3Gd6e0hM=
Subject key identifier: 9C:A7:45:28:3B:C5:E4:B5:A3:95:15:65:61:63:1D:D4:01:AF:D6:47
Certificate issuer: /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial: 700C69EB323FA0893B5E78882D3F0AF05BAD25DD
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
Signing time: Thu 06 Mar 2025 05:07:23 +0000
ROA not before: Thu 06 Mar 2025 05:02:23 +0000
ROA not after: Thu 05 Mar 2026 05:07:23 +0000
asID: 262518
IP address blocks: 2804:580::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:0c:69:eb:32:3f:a0:89:3b:5e:78:88:2d:3f:0a:f0:5b:ad:25:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Validity
Not Before: Mar 6 05:02:23 2025 GMT
Not After : Mar 5 05:07:23 2026 GMT
Subject: CN=9CA745283BC5E4B5A395156561631DD401AFD647
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:d8:d4:28:ed:43:fb:f3:72:a1:87:b5:69:
60:f9:6f:09:9f:28:fb:bc:67:6e:48:ee:a3:40:92:
b8:4a:bf:47:51:05:f4:82:55:47:9b:f2:7e:66:2e:
6f:57:cd:0d:77:35:16:0c:e9:c0:c5:fd:27:00:8a:
ff:de:60:47:17:e9:da:05:74:53:6f:ad:f3:ca:92:
80:ce:4d:a3:23:78:3d:06:d0:27:ec:61:a6:57:17:
8e:3f:2b:67:19:ff:b4:45:c6:8a:f2:7a:69:b7:2d:
c2:db:be:e7:1d:4b:75:50:ff:cc:c6:41:2a:05:39:
fa:65:b6:04:a1:e9:ce:1f:ba:a0:9b:9e:97:2e:10:
b3:d6:8d:af:6d:2f:fa:91:a9:96:a9:ab:35:d7:97:
04:07:f2:0d:0f:5b:70:25:2a:12:93:fd:5d:dd:49:
4a:b6:24:ff:22:31:87:ac:d1:6a:91:eb:7a:bc:1f:
dd:34:9a:5f:74:53:1e:61:4f:b5:3f:9d:5c:6e:d3:
4f:52:c1:ab:41:e0:24:0e:84:66:5e:9b:c8:d0:e1:
f8:1e:21:70:5e:6a:d7:76:85:c7:bb:7d:2d:ff:23:
7c:87:78:11:e2:12:99:0f:f6:0b:bc:77:18:e1:b0:
ab:d7:5f:26:d6:b6:ed:aa:57:cd:9a:a7:5b:20:ca:
d9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A7:45:28:3B:C5:E4:B5:A3:95:15:65:61:63:1D:D4:01:AF:D6:47
X509v3 Authority Key Identifier:
keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33332d3333203d3e20323632353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:580::/33
Signature Algorithm: sha256WithRSAEncryption
7e:c3:ba:6b:aa:7c:63:40:ca:79:21:9f:06:c9:da:50:a8:de:
06:5f:1a:56:b9:9e:9b:36:87:52:dd:5f:e2:11:5b:b7:6b:8e:
f0:6d:c7:87:98:14:ae:7f:89:a3:0e:b8:9a:2b:40:c9:6d:c8:
1a:5a:e7:14:ec:c8:a7:d3:c1:34:46:7d:c5:de:f2:b2:12:c0:
05:ea:d5:f7:86:71:2c:56:ce:77:9d:93:3f:05:21:a6:53:84:
78:5a:19:ac:bb:ec:ce:e4:db:fb:94:ba:66:c5:84:3b:40:af:
0a:fd:32:67:98:0e:dd:5c:65:51:3b:b0:e5:b2:bc:cb:95:71:
a9:56:f2:54:8a:6d:f4:b5:60:6d:ef:48:7d:69:7a:d0:35:ce:
2a:43:b8:2a:e4:af:a3:64:4a:b7:c5:b2:de:22:21:8d:fe:bf:
62:2f:20:22:5f:16:70:35:63:ae:2e:fa:6e:f6:ad:50:65:93:
e2:50:1c:8b:79:82:9c:c4:cd:b3:c3:a6:69:26:87:88:cf:e1:
2a:d0:83:5c:6c:64:80:8f:bb:a3:87:f2:00:b1:23:ca:2e:9c:
90:5e:3d:de:3e:dd:9f:de:05:92:69:d1:0a:b7:a2:60:9b:73:
8f:de:60:65:cd:18:39:d4:37:79:c1:d9:18:89:e4:7b:cb:0c:
af:62:ca:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:51:27 2025 by rpki-client