Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f34302d3430203d3e20323636363336.roa
File: 323830343a336630633a3a2f34302d3430203d3e20323636363336.roa (raw, json)
Hash identifier: 7+CUjFK6HQqBG/G3ubjcHvK4KCW/ZBeKic2b6Hh9Zfo=
Subject key identifier: 89:24:13:F9:2E:8C:3A:F0:B7:09:4C:91:5E:75:F7:45:3D:B3:EC:08
Certificate issuer: /CN=01BB812570793F27C1E5A61B45140B6550487AB2
Certificate serial: 33AD335D5F34A039FD3D947CB8A7F174768AC62B
Authority key identifier: 01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f34302d3430203d3e20323636363336.roa
Signing time: Tue 05 Dec 2023 03:38:46 +0000
ROA not before: Tue 05 Dec 2023 03:33:46 +0000
ROA not after: Tue 03 Dec 2024 03:38:46 +0000
asID: 266636
IP address blocks: 2804:3f0c::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ad:33:5d:5f:34:a0:39:fd:3d:94:7c:b8:a7:f1:74:76:8a:c6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01BB812570793F27C1E5A61B45140B6550487AB2
Validity
Not Before: Dec 5 03:33:46 2023 GMT
Not After : Dec 3 03:38:46 2024 GMT
Subject: CN=892413F92E8C3AF0B7094C915E75F7453DB3EC08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:61:09:3f:bb:4b:7b:cf:72:24:51:fc:e0:1e:
2f:8c:14:5e:d5:6c:f6:16:8c:76:2d:7b:52:f2:ac:
1c:d0:10:91:25:28:bb:68:16:23:3e:b5:83:87:07:
51:f8:c1:01:3d:d2:11:c1:96:c1:cc:df:54:2d:d0:
6e:91:da:7c:54:ba:9d:57:f7:ec:5d:c3:15:dc:43:
58:ae:b7:41:cf:5d:6d:bc:11:b1:28:fa:bb:50:85:
38:46:21:3b:03:c1:8d:2d:37:27:4c:6b:66:52:1d:
b7:b6:ee:82:2d:11:8e:3b:9b:49:b4:a3:fe:08:12:
90:0a:36:9a:97:fd:e2:29:c2:86:b2:a2:53:bd:48:
5c:40:8d:fb:58:04:2d:25:67:5a:6a:6b:b4:64:72:
3e:ae:31:ca:76:d8:2d:89:8a:2f:99:53:3e:e6:90:
bd:90:cd:5d:f2:6f:97:41:d9:80:58:18:7c:75:6c:
21:4f:0e:91:97:62:bb:79:22:39:20:7a:ba:e8:16:
8c:50:6e:06:b1:fe:b5:99:4f:06:05:da:9e:0a:f0:
2c:18:9b:53:8f:1f:45:da:3b:fa:28:ae:6d:10:eb:
22:a5:09:0c:e7:88:35:b3:66:80:1c:09:4a:38:fb:
27:b0:1d:6d:7f:19:78:77:ce:26:2b:29:11:b9:f3:
91:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:24:13:F9:2E:8C:3A:F0:B7:09:4C:91:5E:75:F7:45:3D:B3:EC:08
X509v3 Authority Key Identifier:
keyid:01:BB:81:25:70:79:3F:27:C1:E5:A6:1B:45:14:0B:65:50:48:7A:B2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/01BB812570793F27C1E5A61B45140B6550487AB2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/01BB812570793F27C1E5A61B45140B6550487AB2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5Uux39wmqd4u3xaBGhDikspkREWYkTjQLB5oc39rKz/0/323830343a336630633a3a2f34302d3430203d3e20323636363336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3f0c::/40
Signature Algorithm: sha256WithRSAEncryption
cb:c3:43:7b:d2:93:0d:e8:75:48:ce:ba:0c:70:1c:12:ea:18:
38:89:00:87:d7:7a:4f:ed:ea:9a:59:a9:d3:ce:a5:f0:4c:8e:
81:f4:f6:76:1d:8f:f4:19:b6:c8:f8:6e:de:5e:25:6e:10:59:
74:1b:0f:db:2f:39:ed:ab:99:9b:40:ba:db:30:d0:2c:87:0d:
e3:3d:a1:eb:3c:c0:d3:51:0e:49:3f:e6:36:cf:d1:5a:51:84:
de:8b:4a:30:cc:ff:7d:33:fe:78:b7:ed:5f:7e:d6:62:c3:52:
7b:51:f8:9f:fb:e8:d4:b6:56:6b:3a:1a:c3:e7:5d:88:0f:13:
a3:0a:cd:c2:04:e3:94:cd:1d:62:b3:3c:ca:1f:b0:41:f2:af:
ec:4a:23:87:8f:9f:c4:71:51:b0:a1:38:63:02:5e:a4:cc:9e:
b0:c8:97:f9:1d:fa:f1:92:77:fc:9c:d3:b2:3c:44:22:64:2f:
74:fd:cb:da:ce:fb:49:87:67:76:12:a4:78:7e:49:c7:ac:fc:
af:11:18:4d:26:0c:03:19:c3:c2:30:5f:9a:85:34:5e:79:c3:
43:70:39:b1:4b:e0:35:ee:ad:26:21:99:fd:56:35:94:cd:f2:
f5:55:1a:4c:c7:11:0f:9b:7e:74:6f:49:30:4a:73:2a:7e:9e:
bf:27:25:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:31:26 2025 by rpki-client