Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a643030303a3a2f33362d3336203d3e20323734373236.roa
File: 323830343a393261383a643030303a3a2f33362d3336203d3e20323734373236.roa (raw, json)
Hash identifier: YRTIhMp+h3gF8GfmclcMCT0Dqf4YghQBkYtP79ZoBo0=
Subject key identifier: 1A:FF:FE:13:FC:0E:32:79:BA:96:F6:9F:0A:BA:F1:CF:7E:C3:04:56
Certificate issuer: /CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Certificate serial: 446972343EEDF91292C17256C881F9D396DA4F19
Authority key identifier: E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a643030303a3a2f33362d3336203d3e20323734373236.roa
Signing time: Fri 14 Mar 2025 17:24:18 +0000
ROA not before: Fri 14 Mar 2025 17:19:18 +0000
ROA not after: Fri 13 Mar 2026 17:24:18 +0000
asID: 274726
IP address blocks: 2804:92a8:d000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:69:72:34:3e:ed:f9:12:92:c1:72:56:c8:81:f9:d3:96:da:4f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E235D9D1060516D958BB28952BAAC2B76E4FFCB1
Validity
Not Before: Mar 14 17:19:18 2025 GMT
Not After : Mar 13 17:24:18 2026 GMT
Subject: CN=1AFFFE13FC0E3279BA96F69F0ABAF1CF7EC30456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:89:d5:c4:b1:dd:e0:be:4c:c0:e4:be:c5:6d:
cf:6a:9e:45:c9:2b:8d:d9:56:b3:9c:1c:fc:27:a6:
8b:8e:57:ed:fc:8f:1c:26:3e:93:43:dc:d3:0f:4f:
5d:51:df:b1:9e:1f:ff:1c:0d:bb:39:b8:4e:ff:3e:
e4:f2:76:a7:4d:08:a6:f6:e4:34:7c:00:0d:3f:c5:
70:9e:5b:83:07:64:8f:42:fc:5a:b5:cb:0b:32:15:
2f:4b:14:1e:05:07:3b:c3:33:07:11:ae:0c:d2:f0:
44:d1:7e:87:4f:ce:f0:4e:25:70:5f:f2:24:69:b6:
52:82:88:4f:c4:c3:37:5b:d1:40:3d:62:36:99:d6:
60:ef:d1:a4:80:5d:92:90:53:45:6b:0c:2d:32:79:
b6:02:15:89:9e:4c:a6:8b:0a:03:3a:9f:75:84:b3:
cf:99:4e:2b:70:c4:9e:62:c2:63:a2:d1:78:bd:fc:
bb:5d:7b:91:37:9c:c4:15:02:4d:80:1d:d3:a4:29:
dd:8f:cb:66:a1:90:25:b8:26:10:88:9f:37:28:52:
1b:5f:92:fe:d3:f4:98:8a:88:7d:6c:80:5f:78:29:
72:46:34:f9:89:4c:60:4a:7e:9f:95:f5:f3:b4:cb:
cf:f4:db:b7:ce:61:82:06:8a:a8:34:e9:ce:68:3d:
f0:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FF:FE:13:FC:0E:32:79:BA:96:F6:9F:0A:BA:F1:CF:7E:C3:04:56
X509v3 Authority Key Identifier:
keyid:E2:35:D9:D1:06:05:16:D9:58:BB:28:95:2B:AA:C2:B7:6E:4F:FC:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E235D9D1060516D958BB28952BAAC2B76E4FFCB1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsLntwokokw2oxGpXyYoHx3ibtmmDSRHExxVtTK6Qq81/0/323830343a393261383a643030303a3a2f33362d3336203d3e20323734373236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:92a8:d000::/36
Signature Algorithm: sha256WithRSAEncryption
12:51:04:01:da:50:7c:aa:14:35:5c:e6:a2:44:06:b6:8a:a4:
e7:1e:09:79:68:b7:b6:97:47:89:99:4c:c3:26:fc:77:12:b6:
dc:38:4a:70:a8:14:32:5a:e6:64:3c:f1:77:dd:64:43:7f:34:
35:c8:77:cc:00:74:2f:73:a1:b6:69:ba:57:f2:2e:3b:74:cd:
fd:b1:e5:7e:9c:af:11:4e:8a:1f:f0:92:8a:8a:f5:1b:8f:5f:
db:e5:95:b4:9a:c2:60:24:f2:e7:09:ff:6e:da:0f:7d:49:cd:
a0:51:c3:75:f1:c3:b2:17:72:44:cd:27:e6:a4:b6:15:70:5e:
58:97:84:d3:70:92:4c:91:6d:9b:ca:6c:ea:0b:6c:90:b9:c3:
01:9b:d3:34:11:57:7f:5c:2f:e4:a2:79:31:9f:3b:04:d8:af:
2b:f1:be:28:81:f6:0a:49:64:b5:d2:a3:f2:14:d0:9a:5d:7c:
87:99:29:f3:af:bf:19:d6:fa:37:09:e7:96:06:f4:ca:2b:c8:
99:fc:31:e4:e4:81:c9:b5:a3:1a:d3:71:b3:78:05:7e:97:ea:
eb:39:cf:1d:a9:2c:0b:e2:06:e1:50:2d:c8:51:d4:f2:97:a8:
e2:bf:f6:51:c9:b4:b0:32:1e:4b:a9:ed:c4:b8:05:56:22:ee:
20:bb:53:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:41:42 2025 by rpki-client