Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
File: 323830343a376264303a3a2f33332d3333203d3e20323731343536.roa (raw, json)
Hash identifier: QACZ12TchlrWlu3GHgPLSkFWOF17/zgcmAIlLebLIEM=
Subject key identifier: 84:0C:D7:31:4A:6C:1C:10:77:63:5F:58:7A:AC:54:00:F2:A7:01:4C
Certificate issuer: /CN=2B701A0900880E50F13E6749C2889988811EC8C1
Certificate serial: 487124AADEC15AA6A8083682F47EF264F9C22374
Authority key identifier: 2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
Signing time: Thu 06 Mar 2025 18:40:58 +0000
ROA not before: Thu 06 Mar 2025 18:35:58 +0000
ROA not after: Thu 05 Mar 2026 18:40:58 +0000
asID: 271456
IP address blocks: 2804:7bd0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:71:24:aa:de:c1:5a:a6:a8:08:36:82:f4:7e:f2:64:f9:c2:23:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2B701A0900880E50F13E6749C2889988811EC8C1
Validity
Not Before: Mar 6 18:35:58 2025 GMT
Not After : Mar 5 18:40:58 2026 GMT
Subject: CN=840CD7314A6C1C1077635F587AAC5400F2A7014C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2f:1f:16:50:86:da:2a:32:01:a4:bf:c4:7e:
58:91:7e:da:1e:84:b0:9b:a4:f1:c8:d9:20:de:0d:
7c:2d:73:33:56:6d:61:60:db:50:92:78:89:be:02:
2e:ca:5d:72:d8:61:ea:b2:b0:46:12:8c:ec:06:37:
c2:a1:6f:10:12:61:fd:0d:45:39:45:44:4f:6f:38:
d1:24:73:fe:9c:c3:3b:eb:d8:47:81:6d:ab:f1:5e:
a9:a8:e8:78:e9:ea:e0:d9:42:d4:e8:31:80:02:11:
3c:91:e9:ab:64:c0:aa:c7:20:b5:f0:c9:f8:0c:a5:
16:c9:f2:e9:1f:25:48:48:0e:97:bc:67:27:ea:ae:
43:78:01:a4:cc:90:15:e7:df:79:57:ac:3e:cc:14:
17:ac:05:a7:02:69:09:fb:50:52:68:a7:12:8e:a8:
9e:c7:d5:c6:9d:77:92:0b:d5:80:13:91:6d:7d:1c:
77:ab:64:0c:ab:68:83:2b:fc:a7:86:aa:d0:1b:98:
27:19:cb:06:e7:da:68:6c:8d:0c:d2:e2:22:1f:06:
5e:8f:c9:8b:1d:4a:1e:86:31:8a:ee:48:dd:f1:be:
90:1f:58:53:28:c7:28:81:1d:1b:7b:80:83:48:04:
84:de:e1:35:65:f7:7d:c2:a8:f8:a3:e7:90:f6:ba:
a4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:0C:D7:31:4A:6C:1C:10:77:63:5F:58:7A:AC:54:00:F2:A7:01:4C
X509v3 Authority Key Identifier:
keyid:2B:70:1A:09:00:88:0E:50:F1:3E:67:49:C2:88:99:88:81:1E:C8:C1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/2B701A0900880E50F13E6749C2889988811EC8C1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B701A0900880E50F13E6749C2889988811EC8C1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FD9J94KV9XA3gRxXkzdDujWEBonY2ZNdfy1wwaVTKZ8K/1/323830343a376264303a3a2f33332d3333203d3e20323731343536.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7bd0::/33
Signature Algorithm: sha256WithRSAEncryption
2c:91:19:b3:7e:e6:7c:36:f4:5d:de:52:bc:8c:c8:ff:06:b2:
18:76:f8:a5:f7:df:75:7b:4f:a9:e3:7c:c3:98:e8:47:c3:64:
df:76:b6:ad:85:21:7d:7f:fe:2d:65:f9:a9:1b:2c:40:54:79:
a6:a2:72:a9:3b:3c:6a:ec:b0:36:7c:e0:7b:9b:90:f0:2d:47:
17:c6:4b:b9:2c:8b:97:ff:52:a6:25:c6:14:92:0a:bb:e0:82:
b8:a8:5d:0a:4a:4c:2d:3d:02:56:86:a7:73:9d:5d:2a:3e:87:
db:45:cb:56:cd:9c:cc:47:18:9c:22:ba:7a:42:c0:63:6c:57:
22:a9:46:4a:c1:03:c6:66:9f:10:3f:22:02:02:7c:a0:20:a3:
a8:ed:0d:7d:08:45:21:25:37:0b:11:ed:32:00:9f:7f:13:7d:
9b:ab:4b:fd:e1:63:22:a2:08:a4:5e:ea:d9:6e:63:13:1c:23:
d7:30:f3:d4:aa:af:de:ca:27:7a:93:e2:25:a8:8c:ad:94:ff:
ee:de:04:f0:cd:ae:79:61:80:e0:4e:21:93:f8:47:46:de:0d:
75:5d:9e:14:42:2e:91:8c:22:9a:c6:7c:13:38:c3:f9:79:17:
ff:d7:60:f8:81:cb:ab:6c:ff:02:a4:74:0e:a0:e4:63:23:c7:
cf:97:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:04 2025 by rpki-client