Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a383030303a3a2f33332d3438203d3e20323636333433.roa
File: 323830343a333635633a383030303a3a2f33332d3438203d3e20323636333433.roa (raw, json)
Hash identifier: 9EE6ELWvqq8Q8d9j3ZdHZrHgCEQtLT23lwxsLW9aLgs=
Subject key identifier: 9F:AC:5D:FC:F9:06:C4:02:6A:57:DD:AB:0E:F6:66:E9:88:CB:36:ED
Certificate issuer: /CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Certificate serial: 2B2ACB61D24468D9B7A5525161134D626F36C9E2
Authority key identifier: 68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a383030303a3a2f33332d3438203d3e20323636333433.roa
Signing time: Thu 23 Jan 2025 12:49:10 +0000
ROA not before: Thu 23 Jan 2025 12:44:10 +0000
ROA not after: Thu 22 Jan 2026 12:49:10 +0000
asID: 266343
IP address blocks: 2804:365c:8000::/33 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:2a:cb:61:d2:44:68:d9:b7:a5:52:51:61:13:4d:62:6f:36:c9:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68230C14403321CC6C2237C576CF7E50D2BAC9B4
Validity
Not Before: Jan 23 12:44:10 2025 GMT
Not After : Jan 22 12:49:10 2026 GMT
Subject: CN=9FAC5DFCF906C4026A57DDAB0EF666E988CB36ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cd:c9:fa:99:63:41:98:d9:16:52:d0:b4:fc:
ab:ad:60:4f:3e:bf:e3:79:43:53:23:d2:d6:df:f0:
4b:07:a7:b2:4c:11:ea:b7:4d:fa:9f:99:37:0a:1c:
3a:5f:3f:8a:42:b5:05:1e:fc:f5:0f:05:e1:6b:64:
96:13:51:f3:4e:27:57:e1:a8:ae:74:fe:78:76:e1:
bb:14:74:77:93:8e:da:81:f9:df:e8:5c:8a:a7:0f:
5a:bc:91:5a:f2:76:3d:99:56:af:f9:dd:a3:52:92:
f1:71:2c:d5:e3:cb:da:39:ba:57:58:68:a0:8f:24:
3a:aa:5d:71:2e:12:a7:00:8f:1e:79:c3:16:53:42:
7c:01:59:45:af:b1:ac:01:06:45:2b:d7:b4:c2:ad:
9a:92:a8:db:4d:ab:2d:a5:ff:f1:c3:20:50:06:3a:
d9:f4:c2:de:2e:0d:57:1c:36:ff:d3:74:47:d4:98:
9b:1f:ec:30:f4:0c:12:3c:fa:30:b1:94:d5:67:d8:
85:7a:ea:24:22:d6:f8:ca:f7:ee:ba:97:78:1f:28:
36:a7:5c:ee:a5:6b:f8:0b:0a:2c:6e:99:30:1e:e0:
60:6a:45:b0:97:9d:33:a5:ff:59:a1:7c:8b:79:ed:
e2:d0:9c:88:3a:5e:78:33:9f:2c:23:56:5d:a3:5d:
ec:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:AC:5D:FC:F9:06:C4:02:6A:57:DD:AB:0E:F6:66:E9:88:CB:36:ED
X509v3 Authority Key Identifier:
keyid:68:23:0C:14:40:33:21:CC:6C:22:37:C5:76:CF:7E:50:D2:BA:C9:B4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/68230C14403321CC6C2237C576CF7E50D2BAC9B4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68230C14403321CC6C2237C576CF7E50D2BAC9B4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a383030303a3a2f33332d3438203d3e20323636333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:365c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
66:02:b9:d3:6c:75:ce:f8:58:c4:88:77:e0:fb:df:7a:8b:83:
ee:92:9d:ce:54:54:50:bd:0b:88:57:94:2c:ff:f3:c4:42:23:
f9:3d:e6:cc:25:25:26:0d:9d:14:25:49:b0:15:78:fe:7d:8b:
ea:58:b8:0e:07:4a:ff:2c:d8:65:73:87:ce:c4:bc:42:2c:0f:
f4:58:85:40:c9:72:fd:ec:ba:b3:85:4b:ce:c1:38:b0:06:88:
32:1b:95:fe:84:e6:a6:7a:81:03:1d:da:c7:17:8f:4b:a4:29:
7d:09:76:6c:41:28:eb:3f:f8:30:82:00:7a:59:79:7c:f4:0e:
ff:36:b7:09:5c:b7:d2:38:b6:6d:bb:25:d2:58:5a:53:17:4a:
e4:52:cc:02:db:37:9b:85:df:93:d7:9f:27:a6:a8:fa:03:cb:
a4:5f:4f:a4:13:93:a3:85:19:b1:fc:b3:0e:70:9c:83:bc:6f:
da:9f:47:9a:ae:b6:19:89:11:94:e2:b1:c8:75:1f:99:26:1b:
2c:ee:96:67:33:c5:a7:e8:76:66:1c:dc:2f:69:16:9a:39:0d:
e2:47:7e:26:2d:d9:4f:35:f0:f2:85:a2:36:33:cc:7c:79:c9:
dc:ee:35:54:a6:88:dd:0c:32:0d:d7:e4:b3:1a:92:8d:2b:b6:
ee:f9:84:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:06:31 2025 by rpki-client