Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3334203d3e2032.roa
File: 323830343a383937383a3a2f33322d3334203d3e2032.roa (raw, json)
Hash identifier: XKBHE2NdO6knMG/IjkH/aJH3ShzD0EFYjO4SKheE6qY=
Subject key identifier: D9:E8:72:17:C5:0F:19:39:D2:F7:6C:25:81:D4:E6:E1:4C:AA:F7:23
Certificate issuer: /CN=67E8CE16C199395EBAAE97A668984667486A1A8B
Certificate serial: 602EA37BBA599A6194E7FBC596EF9CA0EA715F5F
Authority key identifier: 67:E8:CE:16:C1:99:39:5E:BA:AE:97:A6:68:98:46:67:48:6A:1A:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E8CE16C199395EBAAE97A668984667486A1A8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3334203d3e2032.roa
Signing time: Fri 30 Dec 2022 20:21:34 +0000
ROA not before: Fri 30 Dec 2022 20:16:34 +0000
ROA not after: Fri 29 Dec 2023 20:21:34 +0000
asID: 2
IP address blocks: 2804:8978::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2e:a3:7b:ba:59:9a:61:94:e7:fb:c5:96:ef:9c:a0:ea:71:5f:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67E8CE16C199395EBAAE97A668984667486A1A8B
Validity
Not Before: Dec 30 20:16:34 2022 GMT
Not After : Dec 29 20:21:34 2023 GMT
Subject: CN=D9E87217C50F1939D2F76C2581D4E6E14CAAF723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:7c:b2:ea:01:af:8f:89:2f:26:71:17:0d:
c9:f1:50:bc:34:28:f9:9d:46:39:b5:e6:a4:bc:43:
15:cd:71:f9:b2:81:0e:c7:af:f5:4e:91:28:03:05:
89:e8:36:93:dc:e6:3e:ad:ee:6e:aa:02:e8:81:58:
ae:73:ea:0b:70:89:5a:9f:7e:da:6b:ea:39:77:67:
86:bf:0b:b0:a0:5d:4a:6e:47:a7:2e:d5:2f:59:e5:
54:3c:7c:6d:e6:62:bd:3a:9d:a2:df:db:90:aa:c5:
03:36:7b:18:10:6b:0a:76:55:f8:b2:f2:63:6e:f8:
0c:15:bc:d8:28:97:03:15:04:76:df:b9:e1:32:0d:
17:3f:63:09:33:82:82:cc:03:c5:ad:bf:ce:61:ae:
ff:28:81:77:e7:05:1c:b4:3c:98:00:1c:89:18:35:
5b:7c:2a:45:9c:77:52:cb:3b:c8:3c:3a:1b:76:f0:
eb:3b:67:b5:71:b1:5b:db:c1:a5:b2:9c:35:9a:19:
95:ff:f7:69:e6:e3:9d:ac:2a:50:fc:f1:4e:d2:a7:
b6:8b:da:b4:a1:b4:ae:08:9b:ea:22:bd:92:6e:b1:
27:63:a1:76:d2:76:57:aa:e6:87:07:0d:44:58:ec:
c8:b2:3e:ca:04:1b:d1:5f:81:f8:98:49:6f:db:9f:
de:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E8:72:17:C5:0F:19:39:D2:F7:6C:25:81:D4:E6:E1:4C:AA:F7:23
X509v3 Authority Key Identifier:
keyid:67:E8:CE:16:C1:99:39:5E:BA:AE:97:A6:68:98:46:67:48:6A:1A:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/67E8CE16C199395EBAAE97A668984667486A1A8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67E8CE16C199395EBAAE97A668984667486A1A8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a3a2f33322d3334203d3e2032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8978::/32
Signature Algorithm: sha256WithRSAEncryption
3f:18:6b:a8:d8:4f:cd:ee:8f:8d:09:bc:10:dd:79:8f:f6:14:
e7:65:ef:b3:31:02:3c:c1:e0:9b:12:23:67:18:16:b8:1f:80:
b5:cc:61:1d:ef:73:d3:07:c3:04:4b:07:13:6b:5b:59:04:af:
b5:f1:0a:76:7c:52:c8:e2:c8:45:9b:8b:58:0f:21:90:e7:23:
13:65:d2:cf:9f:15:10:8c:c0:2c:78:6b:5b:75:e4:88:40:bb:
2a:12:2a:69:59:3e:63:45:28:73:5b:78:28:f2:da:50:d5:9f:
0a:16:fd:5b:ea:df:9c:f8:9c:ca:e1:65:75:27:3a:7e:f3:66:
66:e1:d8:db:f7:22:50:b7:a3:42:67:4d:bd:08:4c:7c:de:c3:
2c:52:10:20:3d:4d:25:6b:1e:34:e4:60:9c:4f:9d:5f:bc:60:
a3:00:70:1a:7f:43:7a:ab:72:bf:a6:2a:f1:d0:dd:9b:c6:da:
51:25:48:5d:fd:b0:be:e5:fe:a0:fa:dc:a8:7b:2c:ec:10:ec:
a5:00:cb:fc:17:a8:dc:19:49:22:45:f1:fd:90:20:45:1f:12:
c6:9f:81:97:a2:e8:42:dd:df:4b:7e:85:d5:38:5a:6c:7b:67:
4d:ca:8b:3f:2b:db:20:d1:c8:48:8c:f0:4f:92:ee:1f:91:dd:
24:30:f3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:58:07 2025 by rpki-client