Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
File: 323830343a6631383a3a2f33322d3438203d3e20323633353636.roa (raw, json)
Hash identifier: OfBZ7UUD/7SDXF/GTM1TaB6USoeDAvVChlwXLbJn5Qk=
Subject key identifier: 58:C1:7F:00:96:71:BA:1D:C1:58:D8:E3:F7:03:87:BA:43:F7:DC:37
Certificate issuer: /CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Certificate serial: 494D9B261D6B7BED24903B3046009F2D53622B83
Authority key identifier: 38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
Signing time: Wed 20 Dec 2023 15:04:10 +0000
ROA not before: Wed 20 Dec 2023 14:59:10 +0000
ROA not after: Wed 18 Dec 2024 15:04:10 +0000
asID: 263566
IP address blocks: 2804:f18::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4d:9b:26:1d:6b:7b:ed:24:90:3b:30:46:00:9f:2d:53:62:2b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38E224203D0037111BF68F317AA5B79FAB3EFB77
Validity
Not Before: Dec 20 14:59:10 2023 GMT
Not After : Dec 18 15:04:10 2024 GMT
Subject: CN=58C17F009671BA1DC158D8E3F70387BA43F7DC37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:ec:ba:d9:21:c0:9d:8a:3f:05:0f:d3:b5:
a3:df:f5:c4:a4:97:ca:6c:3b:89:d4:1e:ee:88:c7:
15:8e:6f:3b:82:80:83:76:ea:f6:7d:3d:8f:3f:c5:
c8:ec:d6:4d:65:7f:8b:de:8d:b5:79:8a:da:86:a8:
ba:60:54:ae:4b:8c:8a:5b:d6:6a:d2:6b:58:2d:b8:
c1:98:78:7f:66:cf:a1:82:44:76:d0:fb:99:7a:45:
68:f5:b4:7f:12:b2:db:3e:9e:1e:92:e7:96:8d:30:
2f:a6:9f:e6:74:e8:61:38:f7:4a:de:ec:8a:96:a8:
8b:8e:e0:e4:06:1e:6c:93:ef:84:6c:67:03:04:47:
45:f4:57:38:9c:2b:eb:cc:94:3b:3a:b3:f3:81:7b:
03:33:d2:03:02:c3:5e:ac:bb:3e:86:f4:bc:5c:c1:
a5:fb:1c:3a:5b:16:31:a3:86:54:8e:6e:70:64:d1:
f1:63:c0:32:1f:06:7d:11:4e:41:80:73:d2:da:da:
f1:0b:4e:90:c8:0c:77:de:08:ac:b0:4d:c9:c0:57:
91:5c:c8:ef:df:77:7b:bb:13:3d:6f:be:45:7f:7b:
40:57:9d:e5:12:14:75:11:0d:f8:c7:d2:91:79:d8:
5f:bb:88:11:fc:5e:ec:88:a6:46:cd:11:a4:9b:15:
92:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:C1:7F:00:96:71:BA:1D:C1:58:D8:E3:F7:03:87:BA:43:F7:DC:37
X509v3 Authority Key Identifier:
keyid:38:E2:24:20:3D:00:37:11:1B:F6:8F:31:7A:A5:B7:9F:AB:3E:FB:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38E224203D0037111BF68F317AA5B79FAB3EFB77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H4afXrePeYmbRC2iieUNXybFUwpwe8qntvv2i2rJApsd/0/323830343a6631383a3a2f33322d3438203d3e20323633353636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:f18::/32
Signature Algorithm: sha256WithRSAEncryption
01:fb:c4:50:1a:42:34:af:7f:ef:24:e9:e4:97:70:2d:9d:74:
ad:e4:95:26:31:b8:db:30:51:1a:e8:d1:51:2b:e9:65:0c:c8:
14:03:07:f4:cc:14:50:34:ad:65:25:63:53:15:3b:15:e1:67:
76:d7:05:6d:cc:fb:aa:09:79:c4:98:6b:53:01:45:fa:e1:49:
5e:21:ba:1b:31:77:5a:6b:21:bc:eb:1b:02:14:bb:d8:dc:c8:
46:83:10:1f:54:84:b8:4a:15:5e:8c:b4:97:83:37:cf:d5:0f:
d4:2b:cd:e6:ce:9c:65:15:6f:40:e1:ab:10:34:f2:0c:85:de:
c7:86:13:6b:8a:e6:1b:bc:94:6e:87:b9:1c:fa:b1:ae:db:74:
81:dc:5e:4c:4b:84:7b:e4:45:ec:6f:97:2b:7d:28:f0:d6:21:
5a:10:db:bf:73:a9:c1:2a:f8:5c:3b:59:e5:de:0e:a0:7f:aa:
62:ea:4e:89:75:bf:18:0b:93:61:37:37:a2:a7:17:01:2b:4d:
ef:b2:1e:42:8b:f7:c8:78:96:3a:bb:93:9e:4e:62:96:8f:fc:
08:23:d3:3b:9b:a1:6d:59:6d:bd:36:91:b7:a4:c5:15:40:38:
32:b7:90:ef:3f:32:64:04:25:e9:4c:80:39:a5:14:59:c0:4b:
e9:81:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 02:09:09 2025 by rpki-client