Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a3a2f33322d3332203d3e20323635393836.roa
File: 323830343a343064633a3a2f33322d3332203d3e20323635393836.roa (raw, json)
Hash identifier: XQPk9VpLA42NbdgY4pb3sv6bGyxbgGgbQg4GurvwLFU=
Subject key identifier: AC:B7:C0:01:B4:34:E8:7D:81:2D:2E:91:58:43:2F:12:CC:8E:73:02
Certificate issuer: /CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
Certificate serial: 650BC610BDE1A49AE99421CFBBA230D6B5F54615
Authority key identifier: 20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a3a2f33322d3332203d3e20323635393836.roa
Signing time: Tue 11 Feb 2025 18:28:11 +0000
ROA not before: Tue 11 Feb 2025 18:23:11 +0000
ROA not after: Tue 10 Feb 2026 18:28:11 +0000
asID: 265986
IP address blocks: 2804:40dc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:0b:c6:10:bd:e1:a4:9a:e9:94:21:cf:bb:a2:30:d6:b5:f5:46:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=200D6A4F731D3AA371C0F0BED5EA7D32A5998642
Validity
Not Before: Feb 11 18:23:11 2025 GMT
Not After : Feb 10 18:28:11 2026 GMT
Subject: CN=ACB7C001B434E87D812D2E9158432F12CC8E7302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:51:50:e2:be:9f:54:c4:a4:cd:4f:fd:40:e3:
0b:46:11:70:c7:9b:04:37:da:f7:10:7f:87:c6:7e:
f0:a4:26:a0:ca:e3:34:8e:48:06:ec:cf:71:3e:e8:
44:a5:17:ec:74:39:84:95:aa:c5:bf:d6:d6:c4:54:
0f:a1:ae:2a:80:e8:87:56:22:f3:38:73:9d:01:76:
44:10:46:65:0a:d5:1e:32:61:b2:63:5e:0a:30:f8:
f6:ce:57:e5:79:70:bb:49:e3:4f:29:40:18:dd:0e:
8f:8a:64:b9:f6:43:4b:7e:00:63:2e:75:31:5d:40:
be:d5:16:28:f1:de:3e:45:eb:8a:71:1a:1d:b8:79:
32:cc:0f:0f:1a:eb:02:c0:15:0a:82:54:f6:6d:f1:
5a:91:30:dc:16:43:33:50:82:be:03:c4:a1:e3:23:
45:25:b8:3b:1e:c9:d7:64:03:8d:6e:fb:8a:81:88:
77:f9:e8:23:e2:14:42:22:ee:af:63:a6:ef:02:3a:
1a:89:3f:53:58:32:8c:19:44:74:04:e6:05:d7:f0:
d2:31:52:0e:4d:54:38:20:80:df:d8:03:97:4a:bb:
11:15:03:71:56:a9:17:cb:ae:70:95:38:44:c5:f8:
dd:3f:6f:57:c7:fc:8b:56:76:19:0f:ae:27:33:71:
a6:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:B7:C0:01:B4:34:E8:7D:81:2D:2E:91:58:43:2F:12:CC:8E:73:02
X509v3 Authority Key Identifier:
keyid:20:0D:6A:4F:73:1D:3A:A3:71:C0:F0:BE:D5:EA:7D:32:A5:99:86:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/200D6A4F731D3AA371C0F0BED5EA7D32A5998642.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ei4TUh6yfq5wpZBaDqEhSdx9MkdnHHavmV8TxwR759nR/0/323830343a343064633a3a2f33322d3332203d3e20323635393836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:40dc::/32
Signature Algorithm: sha256WithRSAEncryption
67:d0:01:37:4b:1c:b0:af:c4:57:d3:03:fe:d2:e6:6d:ff:d1:
f7:80:6b:53:be:af:15:82:39:09:bc:54:5e:4e:10:23:26:f7:
7c:38:e5:b6:ab:ab:a4:66:5c:12:ae:d0:e6:5b:14:7f:b4:ef:
1b:ab:90:6a:a5:fd:f0:ae:7a:fb:a4:c4:58:ec:4a:3c:3b:c9:
03:bb:8f:9d:f1:63:72:b3:02:93:59:41:db:c7:51:41:2e:0c:
c6:93:9c:f1:a4:de:36:d7:78:c6:58:b9:16:47:cd:57:20:b9:
e3:9c:25:a3:90:cb:76:e2:df:91:95:f3:d5:97:bf:7c:58:b6:
bb:e7:4a:82:aa:f3:f9:b9:e3:37:e7:59:8b:55:24:da:4c:c7:
40:c1:4b:9b:8f:cf:09:a3:fa:e5:66:ca:f8:50:e2:76:19:a3:
e4:e5:27:68:67:59:a9:f0:eb:6f:5f:2d:63:d7:87:1f:3d:49:
46:86:c8:54:a5:df:66:8d:4d:18:64:c6:f9:66:02:c0:00:dd:
b5:92:92:56:ac:8f:ec:73:5b:e4:20:cf:83:ab:8f:23:0a:80:
45:8e:61:92:b5:d4:4f:ad:06:46:3a:a5:56:47:36:aa:8d:c7:
5e:76:d1:97:f5:8c:87:76:9a:a6:a6:1a:7a:94:a1:db:9b:5e:
e7:6e:ef:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:02 2025 by rpki-client