Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3334203d3e20323636333433.roa
File: 323830343a333635633a3a2f33322d3334203d3e20323636333433.roa (raw, json)
Hash identifier: C4jG4OqlykQ+2RocubXXEl1HjtvbfHt3aXSvGtxLprg=
Subject key identifier: BA:92:C9:81:DA:C0:CA:65:A2:74:77:97:42:50:55:C1:AC:6C:9D:02
Certificate issuer: /CN=60BB83C02533E0ADF12AE7C3B183EA76020CECF2
Certificate serial: 231C2C56E6A4AB948C194D18B8FDC3458A179C85
Authority key identifier: 60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3334203d3e20323636333433.roa
Signing time: Wed 04 Dec 2024 21:07:20 +0000
ROA not before: Wed 04 Dec 2024 21:02:20 +0000
ROA not after: Wed 03 Dec 2025 21:07:20 +0000
asID: 266343
IP address blocks: 2804:365c::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:1c:2c:56:e6:a4:ab:94:8c:19:4d:18:b8:fd:c3:45:8a:17:9c:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60BB83C02533E0ADF12AE7C3B183EA76020CECF2
Validity
Not Before: Dec 4 21:02:20 2024 GMT
Not After : Dec 3 21:07:20 2025 GMT
Subject: CN=BA92C981DAC0CA65A2747797425055C1AC6C9D02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:23:fb:8b:58:3b:3e:f3:0c:e5:81:f7:a1:d6:
7a:00:6b:54:4e:7d:59:e2:cc:c7:b4:3c:66:61:68:
77:15:59:24:ab:f9:99:c0:8a:08:5a:d3:76:d6:ad:
a9:ae:48:15:ac:3b:22:d1:27:d0:a2:78:6f:80:06:
9c:50:6c:bb:bd:8d:c0:0a:a9:a9:e4:f3:32:92:70:
a9:2b:40:15:0b:37:6a:d6:e7:0b:50:d6:0e:4c:0c:
9b:04:93:b7:3c:a7:d1:18:94:d8:23:42:e3:b7:89:
85:65:61:e7:5b:5d:bc:aa:22:c3:84:4c:d7:ce:df:
8a:d4:54:86:56:22:92:60:7c:80:ff:9d:f9:0d:39:
3d:92:22:49:53:47:03:28:f0:84:44:fc:d4:f1:08:
6a:6a:bd:03:9b:3e:41:82:93:73:4e:bd:2c:4d:27:
34:52:00:f0:aa:24:a1:cb:35:d7:3b:8c:80:b3:4f:
77:9d:0c:d6:38:e8:08:98:24:d5:2a:90:d1:47:e8:
65:6c:04:ea:11:11:2b:15:38:03:68:32:b0:ac:99:
85:26:6e:4c:c8:e3:0d:6d:84:53:2a:92:24:54:26:
9d:c5:f8:08:7f:0b:25:1f:22:b8:e6:59:a2:27:3d:
49:b1:87:b6:1c:90:02:c9:68:bc:a2:41:23:7b:d0:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:92:C9:81:DA:C0:CA:65:A2:74:77:97:42:50:55:C1:AC:6C:9D:02
X509v3 Authority Key Identifier:
keyid:60:BB:83:C0:25:33:E0:AD:F1:2A:E7:C3:B1:83:EA:76:02:0C:EC:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60BB83C02533E0ADF12AE7C3B183EA76020CECF2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EKMN6VmCnJ3amd8rwRW9fGZZgBK9dBmqbzdBwmmgpeSe/0/323830343a333635633a3a2f33322d3334203d3e20323636333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:365c::/32
Signature Algorithm: sha256WithRSAEncryption
6d:20:ef:c8:eb:ca:aa:e8:5e:ae:bc:42:a1:e7:85:84:87:42:
f7:8c:b1:ae:8c:5f:70:fa:4d:34:25:63:56:ce:cf:b7:de:9d:
84:78:63:56:3a:b1:02:a2:ec:91:b4:07:7d:42:c9:89:24:5e:
f1:98:28:cb:cb:19:98:46:7d:6d:75:b9:52:a9:4a:44:62:49:
9d:70:45:c1:23:aa:2c:03:5f:9f:6e:12:91:ce:a9:94:0c:c8:
45:40:b5:1f:ea:ca:77:aa:a9:d7:90:f5:65:b4:cf:29:e4:46:
31:65:61:f4:6e:c0:7e:fc:53:af:9d:a0:90:55:ad:29:12:7d:
71:ab:12:1f:a7:4e:01:e7:a5:3f:6e:8b:0b:a0:e5:40:d3:02:
fb:aa:34:7f:7b:9e:ce:a1:2d:fb:9b:00:3d:9d:35:99:f8:78:
12:6b:4d:10:de:2b:8b:13:d7:db:c9:a8:6f:f5:5b:8c:dd:83:
18:b8:68:d8:ac:f2:5a:97:2d:83:fa:af:40:61:fc:78:e2:d6:
7e:e4:f7:62:8e:b2:46:d2:6c:3a:5e:72:e4:68:6a:b6:24:25:
cf:62:58:02:9a:a3:de:78:4d:77:d8:7d:17:eb:39:eb:25:ae:
52:90:2c:75:90:14:40:80:97:c6:0d:6f:ce:cc:ce:6b:73:36:
bb:db:43:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:53:06 2025 by rpki-client