Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/323830343a333338343a3a2f33322d3332203d3e20323635343031.roa
File: 323830343a333338343a3a2f33322d3332203d3e20323635343031.roa (raw, json)
Hash identifier: /yJp5RQbO/qnoA+i8FNXgsGdowZXBfxtBvg/Q1b7xkk=
Subject key identifier: 2E:81:48:98:9B:65:39:FB:BC:2F:BA:82:E1:CB:D7:14:11:51:E5:CB
Certificate issuer: /CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Certificate serial: 074A11FD1B5D665AB44A1E86BF30D08BEA7B54E0
Authority key identifier: E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/323830343a333338343a3a2f33322d3332203d3e20323635343031.roa
Signing time: Mon 21 Nov 2022 16:30:29 +0000
ROA not before: Mon 21 Nov 2022 16:25:29 +0000
ROA not after: Mon 20 Nov 2023 16:30:29 +0000
asID: 265401
IP address blocks: 2804:3384::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:4a:11:fd:1b:5d:66:5a:b4:4a:1e:86:bf:30:d0:8b:ea:7b:54:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA
Validity
Not Before: Nov 21 16:25:29 2022 GMT
Not After : Nov 20 16:30:29 2023 GMT
Subject: CN=2E8148989B6539FBBC2FBA82E1CBD7141151E5CB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:56:43:32:ab:6b:22:42:a9:93:38:92:91:
19:c1:25:4d:bd:57:24:d3:2d:b4:02:74:e0:28:8b:
a7:2a:95:46:3d:5e:02:77:f9:3d:b3:5b:81:1b:14:
cb:16:a7:36:94:5c:2e:a5:cb:5b:d2:bc:c0:82:90:
7d:1f:5e:b4:f7:7f:ff:98:af:3f:78:0b:49:66:5c:
34:18:38:22:f4:5c:51:5f:db:8e:57:7d:56:2b:2b:
0a:6a:17:71:c6:29:bf:d4:4b:73:89:12:81:38:a9:
46:bc:a4:c5:30:9d:39:7c:6f:48:42:4c:3e:3c:a0:
b1:44:46:27:b4:bb:b2:c2:80:52:5f:cb:b6:ab:55:
25:92:d6:ba:a5:51:c3:b8:e6:13:fa:37:d9:4d:d7:
14:8a:b1:32:90:72:5a:74:15:33:92:bf:b0:54:72:
41:72:b7:1d:51:db:6c:14:34:02:a7:d7:5b:28:23:
1d:a8:af:96:9c:34:6e:4f:f6:b4:3f:e2:b8:0a:90:
38:14:2c:4a:af:44:86:58:30:69:2d:ad:f4:b3:62:
e4:33:e9:7d:c7:04:0b:e3:6e:8c:ff:7d:b6:bc:3a:
d9:b1:6f:9c:1a:ce:cd:a8:6b:bd:d3:2f:29:8c:b8:
42:69:ce:cf:71:51:1f:c7:8b:e6:2f:ac:09:7e:70:
c7:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:81:48:98:9B:65:39:FB:BC:2F:BA:82:E1:CB:D7:14:11:51:E5:CB
X509v3 Authority Key Identifier:
keyid:E1:9F:1C:7A:45:82:94:75:AD:4F:BB:BF:25:4E:F7:B9:CE:6E:B6:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E19F1C7A45829475AD4FBBBF254EF7B9CE6EB6FA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXXkCMfNpd6rMkBT6VUvDKjYqvVxf1E3SYWSGcnQddvx/0/323830343a333338343a3a2f33322d3332203d3e20323635343031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3384::/32
Signature Algorithm: sha256WithRSAEncryption
a0:ce:04:5f:53:14:f3:c8:bb:7c:7b:51:e9:c0:6b:50:04:52:
c5:f3:e5:f4:5b:06:d0:3a:23:c7:39:73:a9:87:21:a6:c5:b4:
ba:00:af:99:b0:a5:96:88:c7:20:cf:41:ab:27:19:43:90:fc:
b9:a7:e7:fd:02:03:29:17:3e:2d:42:27:29:63:88:b3:05:77:
65:94:42:4d:e8:aa:4a:85:b6:72:32:e2:d5:bf:04:ea:63:5d:
eb:82:8a:40:41:09:3d:53:d3:b8:36:f4:bb:55:97:45:d8:c3:
f8:f4:7d:fc:6c:2b:90:d0:65:d5:fb:1d:4a:32:bf:66:46:f4:
74:4d:9c:d1:68:1e:d1:c3:d6:5e:76:bd:ad:2a:7f:27:3e:cd:
72:b1:ca:e3:0a:a5:77:0b:f1:14:86:82:cb:2d:30:50:e6:61:
c8:6b:84:b8:2c:c3:ac:bb:4c:88:44:5a:64:a2:8c:b0:41:44:
d3:98:48:1c:39:e9:90:f1:d3:9b:9e:fa:8c:e1:ee:8f:c5:98:
91:58:3d:54:d2:17:1c:19:0e:0e:61:27:2e:6f:93:07:4a:33:
77:bd:1a:7c:11:43:00:8e:06:72:9a:00:55:07:c5:30:c2:b8:
eb:fb:dd:72:e4:13:15:8c:66:a5:2c:27:36:19:9c:e0:84:4c:
e8:2f:f9:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 20:50:35 2025 by rpki-client