Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
File: 323830343a376338383a3a2f33322d313238203d3e20323731353032.roa (raw, json)
Hash identifier: Hm2lPuhWaKQxK4oRynmDr8H30xIXnWdSX8PRX4Cdv44=
Subject key identifier: 3E:D9:54:FF:73:7B:65:79:8E:2C:F1:06:0B:F2:A6:67:33:87:14:46
Certificate issuer: /CN=22C8C770296DE4CA988C5BA2BA1A7C934B805B92
Certificate serial: 2C69B487DC5A2DA6851CA0D7A9FD776F2FC99241
Authority key identifier: 22:C8:C7:70:29:6D:E4:CA:98:8C:5B:A2:BA:1A:7C:93:4B:80:5B:92
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C8C770296DE4CA988C5BA2BA1A7C934B805B92.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
Signing time: Fri 28 Feb 2025 19:50:28 +0000
ROA not before: Fri 28 Feb 2025 19:45:28 +0000
ROA not after: Fri 27 Feb 2026 19:50:28 +0000
asID: 271502
IP address blocks: 2804:7c88::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:69:b4:87:dc:5a:2d:a6:85:1c:a0:d7:a9:fd:77:6f:2f:c9:92:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22C8C770296DE4CA988C5BA2BA1A7C934B805B92
Validity
Not Before: Feb 28 19:45:28 2025 GMT
Not After : Feb 27 19:50:28 2026 GMT
Subject: CN=3ED954FF737B65798E2CF1060BF2A66733871446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:aa:ce:0e:cb:a5:22:d6:bd:d5:d9:da:d5:
35:0b:ea:8c:5b:89:86:4a:62:26:4c:c0:14:83:f9:
1b:4d:c0:0f:b5:e8:e9:cc:9e:aa:1d:e7:28:ef:93:
86:7e:71:59:b8:8a:b9:33:85:54:82:b0:a1:4d:8e:
66:d0:fe:6d:5b:c6:84:4f:9a:29:d7:7e:8e:15:aa:
13:b3:c4:43:24:fa:95:08:1b:74:0b:ad:3d:29:24:
26:4c:59:25:66:92:d0:21:22:3e:d7:73:8a:31:35:
c5:71:79:89:de:78:01:e1:9d:07:17:93:47:75:6f:
ee:dd:9d:0b:a5:72:9c:e9:9d:c6:96:26:18:6e:92:
f1:fa:e7:61:68:5f:1e:98:c2:0f:ba:99:9c:87:b6:
8e:25:8d:b4:47:98:ca:fd:dc:d5:a8:7b:48:55:78:
02:f7:3d:85:8d:4e:e9:8c:53:e2:45:83:92:9f:c9:
45:6c:06:62:b8:2b:23:d3:22:06:dc:03:0a:07:df:
66:4d:00:ed:7f:6e:b7:f1:d1:00:3c:48:65:89:e2:
a2:10:fd:41:65:38:52:83:a9:71:62:bc:d1:69:e2:
a9:24:0b:0e:c8:54:67:49:d6:d5:4a:22:93:ca:5d:
48:fb:c6:5c:20:af:b1:66:91:66:bb:e9:b9:25:d9:
31:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D9:54:FF:73:7B:65:79:8E:2C:F1:06:0B:F2:A6:67:33:87:14:46
X509v3 Authority Key Identifier:
keyid:22:C8:C7:70:29:6D:E4:CA:98:8C:5B:A2:BA:1A:7C:93:4B:80:5B:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/22C8C770296DE4CA988C5BA2BA1A7C934B805B92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22C8C770296DE4CA988C5BA2BA1A7C934B805B92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FzpF7W4wJTvayV2BuPMUFzqqbq1NojMTFbAXkyLDQcto/0/323830343a376338383a3a2f33322d313238203d3e20323731353032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c88::/32
Signature Algorithm: sha256WithRSAEncryption
86:61:b3:57:1e:df:35:37:ac:14:26:79:13:0d:86:92:80:d1:
bf:95:dd:e7:0f:db:75:fc:62:24:d4:f8:04:35:15:2a:cb:fc:
4d:fb:d1:7e:ec:f3:e7:d5:63:a5:5c:0d:79:59:bf:3a:96:61:
0b:56:e5:28:a6:d7:61:9e:12:79:82:9e:c9:e6:00:2a:28:b4:
3a:46:a8:8b:a2:a6:df:37:1c:8e:b0:fd:a2:7b:f6:a7:3b:a3:
d8:12:b4:d6:1c:cd:8c:f5:ba:5d:03:71:11:08:8b:18:26:ee:
21:d1:5b:70:f0:aa:7c:9c:f9:c0:65:42:3b:1a:15:5a:b3:92:
b4:79:74:81:ce:85:2d:3a:21:5f:94:6a:44:67:92:99:38:ef:
c6:ec:ef:c5:68:46:b5:d8:59:11:42:0c:f0:e7:e7:94:98:05:
3d:a0:e6:a9:c2:df:eb:ea:d7:de:71:fd:aa:e6:89:5b:73:94:
57:d0:2b:35:b2:c7:03:4b:c3:18:78:5d:62:a8:57:1a:03:4c:
6d:f3:a2:9a:39:9b:88:55:05:1d:33:c1:b4:66:af:6c:cb:f1:
be:95:d3:1f:6f:d3:5c:15:8d:de:a4:95:78:01:ee:a5:45:f1:
68:7f:07:ec:42:c0:bd:9e:63:eb:3c:b5:59:05:23:5b:4e:d1:
9c:84:e6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 12:02:27 2025 by rpki-client