Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa
File: 323830343a336439303a3a2f33322d3438203d3e20323033.roa (raw, json)
Hash identifier: fuCdoRzhTClzzSQzBCs5PtmGGgFglB5FW3CJswjIO/U=
Subject key identifier: 67:A1:70:34:8C:FE:26:E2:0A:21:CB:54:16:F7:99:A5:B3:2E:72:53
Certificate issuer: /CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Certificate serial: 0CF56F64256F7CF9AE4DA25DD604E6977880ADBC
Authority key identifier: A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa
Signing time: Wed 29 Nov 2023 10:55:36 +0000
ROA not before: Wed 29 Nov 2023 10:50:36 +0000
ROA not after: Wed 27 Nov 2024 10:55:36 +0000
asID: 203
IP address blocks: 2804:3d90::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:f5:6f:64:25:6f:7c:f9:ae:4d:a2:5d:d6:04:e6:97:78:80:ad:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A35FE798DF1B5FA90DF47D42B6BB552967B0395D
Validity
Not Before: Nov 29 10:50:36 2023 GMT
Not After : Nov 27 10:55:36 2024 GMT
Subject: CN=67A170348CFE26E20A21CB5416F799A5B32E7253
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a4:4c:3c:d9:00:35:18:c9:9c:1f:ea:6b:88:
dc:32:bb:da:16:f9:8e:b5:58:c8:24:1d:9f:f9:bc:
17:b1:73:33:13:0b:90:a4:fe:76:ce:e0:ff:71:9e:
15:c9:fa:5a:bc:2a:64:85:3b:d4:c9:b2:d6:20:46:
98:a9:27:79:b7:38:30:99:34:83:81:76:e7:4e:63:
28:8d:44:87:43:23:72:e7:4e:de:6e:82:12:f2:bb:
0f:af:27:83:2a:ca:dd:31:cd:b2:5a:18:fa:93:92:
9c:98:38:82:83:48:5a:fb:00:59:fa:3b:ab:79:1c:
a9:3a:a8:28:6c:91:8a:a4:5c:c7:56:bd:1b:f9:ed:
95:dd:5d:3a:0b:77:a6:35:0a:64:a9:f4:2b:73:df:
13:a4:82:2d:1d:16:e9:25:c4:bc:a0:9c:26:5b:94:
38:4f:4a:2f:70:dd:de:3b:01:c6:19:31:72:04:df:
05:df:8f:18:4b:9b:24:b4:cc:f8:1b:81:90:92:ad:
ce:53:a6:d8:f0:fe:0d:ac:d6:13:a3:13:96:c0:32:
89:f0:2e:d4:97:2c:9e:8c:49:09:a3:7d:d3:0e:97:
7c:83:ad:98:0e:b4:66:4c:d2:10:80:57:7b:6c:da:
e1:91:36:19:7d:51:bb:91:a1:6e:88:2e:76:92:b4:
42:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A1:70:34:8C:FE:26:E2:0A:21:CB:54:16:F7:99:A5:B3:2E:72:53
X509v3 Authority Key Identifier:
keyid:A3:5F:E7:98:DF:1B:5F:A9:0D:F4:7D:42:B6:BB:55:29:67:B0:39:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A35FE798DF1B5FA90DF47D42B6BB552967B0395D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HmfJiU8uRvjo5iJYQpRxK1eZ6k4xxJ5W2sQMF81Hf2nZ/1/323830343a336439303a3a2f33322d3438203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d90::/32
Signature Algorithm: sha256WithRSAEncryption
11:e5:ad:e4:e1:10:a9:91:63:e7:08:2f:47:55:86:1e:ce:cc:
89:e7:c1:78:8a:08:57:5a:7a:53:7f:42:d4:03:34:44:b6:1b:
bc:23:64:09:3a:c9:89:69:11:2a:26:c2:13:9c:51:13:e3:43:
06:9f:8c:9e:75:0b:be:b7:b3:da:94:55:31:5f:1e:62:f5:68:
03:13:0c:bc:fc:12:9e:fb:81:03:30:60:d8:b3:86:e3:0f:57:
e4:25:1d:7c:65:71:ab:da:1d:fc:62:13:43:e5:10:4a:f1:3e:
01:91:c1:c0:71:93:86:ad:ca:d0:33:74:68:e8:fd:c0:7f:c9:
e6:2e:bb:95:72:0e:6f:de:72:12:2e:58:bb:33:3c:95:eb:79:
6d:92:52:ef:13:6b:c5:f3:96:ab:57:b9:93:1d:be:4b:fe:53:
cc:2b:4f:fc:07:a0:53:6c:79:43:21:7d:16:40:bc:c4:6b:99:
6f:a9:be:85:b8:01:37:5b:d1:75:f1:09:e0:ab:63:0e:86:e5:
5f:89:a3:03:4b:25:27:95:9f:ca:0f:ec:df:c9:34:33:87:04:
51:79:d5:79:70:e9:f2:ba:15:4a:40:08:87:f4:c1:c3:1a:6a:
be:a4:2b:bc:4f:01:86:e2:6f:6e:58:31:19:df:25:e1:68:26:
2e:d4:eb:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:32:15 2025 by rpki-client