Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33332d3333203d3e20323633323536.roa
File: 323830343a313765303a3a2f33332d3333203d3e20323633323536.roa (raw, json)
Hash identifier: nY8pdbvi0m3pvt7Yjz68hxcrwuaVnFfkT1K/uwnJwyA=
Subject key identifier: B8:FD:30:D4:EF:69:E4:4C:2C:8A:8A:C1:1C:3A:E2:27:95:4D:67:FD
Certificate issuer: /CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Certificate serial: 788582BFBF24F4BAF7B008754825967CBA489B7F
Authority key identifier: 60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33332d3333203d3e20323633323536.roa
Signing time: Fri 10 Jan 2025 16:41:53 +0000
ROA not before: Fri 10 Jan 2025 16:36:53 +0000
ROA not after: Fri 09 Jan 2026 16:41:53 +0000
asID: 263256
IP address blocks: 2804:17e0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:85:82:bf:bf:24:f4:ba:f7:b0:08:75:48:25:96:7c:ba:48:9b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011
Validity
Not Before: Jan 10 16:36:53 2025 GMT
Not After : Jan 9 16:41:53 2026 GMT
Subject: CN=B8FD30D4EF69E44C2C8A8AC11C3AE227954D67FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:ab:42:1a:87:87:a1:fc:f9:fc:9e:6b:70:
20:e0:15:ad:d7:42:d3:25:31:e9:16:cb:f9:af:2b:
75:cc:84:91:de:82:2a:4c:5f:fe:3d:39:2c:3f:88:
e8:39:14:af:e9:c3:c0:5b:bd:53:23:f4:34:fb:5c:
97:af:e3:31:8d:51:6e:98:72:4d:3d:62:5f:c5:c5:
bc:2b:47:fc:29:85:3d:ac:fa:d0:86:13:38:bf:39:
3c:71:fe:78:3c:1d:39:a6:96:3b:e5:2d:91:fc:31:
94:fd:2b:40:68:6f:37:60:6c:35:66:a4:5b:9b:c7:
b4:6f:7f:77:7a:d8:1c:2e:6f:c8:cb:6c:9e:fc:87:
69:e3:7d:51:2e:89:d7:ea:1e:4d:8e:38:54:55:80:
7c:1b:d4:3d:5d:09:c8:be:ba:48:4c:d8:69:e1:ee:
09:86:9a:34:22:af:c1:29:1e:bf:8f:d9:f3:77:63:
5b:2f:ad:c7:f6:bc:87:fc:fd:ba:d1:cd:9b:48:2d:
66:42:25:b5:5d:ad:41:bd:2e:f2:7d:ab:ce:68:78:
fb:f3:21:bd:b1:ba:ae:a1:bd:68:ec:8d:9b:4c:65:
ed:08:13:16:4f:dc:15:77:cd:7e:19:c3:01:52:e3:
65:24:3f:ea:8f:35:95:cf:04:88:91:e6:9e:df:cf:
36:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:FD:30:D4:EF:69:E4:4C:2C:8A:8A:C1:1C:3A:E2:27:95:4D:67:FD
X509v3 Authority Key Identifier:
keyid:60:F5:CE:DC:60:B1:C9:2A:5A:74:DC:B3:CF:E6:F0:44:F9:46:20:11
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60F5CEDC60B1C92A5A74DCB3CFE6F044F9462011.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpwPfswW9NgLeVJuqGCdYNTKEin1zVBT6oGzes9ardSd/0/323830343a313765303a3a2f33332d3333203d3e20323633323536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:17e0::/33
Signature Algorithm: sha256WithRSAEncryption
bf:7b:c2:cb:ba:f7:eb:7e:fa:4b:0a:4b:e3:b7:1d:0f:41:7b:
48:67:47:21:ef:4b:55:2c:d3:15:59:fc:8b:d6:39:a2:ad:0d:
f3:e0:a8:bb:e1:ed:80:b6:55:18:d1:60:05:b2:08:b9:fe:20:
8e:af:82:2c:53:c9:cd:40:3e:42:09:99:ff:71:b5:c8:de:29:
76:d6:04:49:bf:f2:76:03:3d:57:a2:26:20:8d:cf:b8:6e:83:
95:27:79:06:6b:0d:6f:0b:48:9f:a6:9a:c3:1d:c1:be:03:a6:
6b:55:9e:19:2a:fd:ca:fa:cb:a6:67:84:8d:56:e1:0a:50:6f:
7c:24:5d:0f:56:33:a6:85:81:4d:76:bf:e6:16:74:6f:f1:5e:
40:fa:fb:32:8d:13:18:2e:e7:2a:ec:dc:3a:37:63:87:f9:06:
b0:2d:1e:05:94:4e:80:64:e3:3b:89:50:cd:15:3f:a1:a6:67:
58:2d:ee:51:59:94:0e:6e:12:51:00:2e:88:2b:47:ac:45:1a:
47:86:b7:a6:39:4a:00:48:9f:e7:e1:68:c4:88:ee:33:f1:d4:
7c:59:c5:aa:f1:a5:3e:c1:9e:fc:17:76:99:41:cd:36:80:70:
9d:3c:76:de:68:4d:9c:3e:ff:20:61:c0:c5:1b:d3:c4:7b:44:
68:5c:0d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:31:08 2025 by rpki-client