Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa
File: 323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa (raw, json)
Hash identifier: 9HF5zKnKNjHQPbgi0VB9zlwhR92mYXELt2CVLiYwOZw=
Subject key identifier: C2:09:BA:30:AD:6C:DC:8E:A0:6B:FE:21:7F:59:FD:CC:24:5C:5E:3F
Certificate issuer: /CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Certificate serial: 3A3072EF6094E1D0A0FFCC598C50F1B8ACD4768F
Authority key identifier: B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa
Signing time: Mon 28 Oct 2024 12:46:14 +0000
ROA not before: Mon 28 Oct 2024 12:41:14 +0000
ROA not after: Mon 27 Oct 2025 12:46:14 +0000
asID: 273444
IP address blocks: 2804:8eb8:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:30:72:ef:60:94:e1:d0:a0:ff:cc:59:8c:50:f1:b8:ac:d4:76:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B692A7E1C30A97E42D9E84CE0FC4E7E90719130F
Validity
Not Before: Oct 28 12:41:14 2024 GMT
Not After : Oct 27 12:46:14 2025 GMT
Subject: CN=C209BA30AD6CDC8EA06BFE217F59FDCC245C5E3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:85:49:eb:cd:6f:13:b6:ee:9d:4e:46:08:bb:
4f:f3:eb:e3:38:0f:57:65:27:07:d7:84:ed:f7:a1:
82:b5:d2:29:b7:9d:57:a9:06:87:48:65:b8:9c:72:
ef:9c:3a:15:7c:84:77:39:34:72:c3:5a:e0:6f:ab:
ce:ae:58:02:99:9e:0c:3c:c6:a5:cf:b4:a5:bf:b9:
3a:0b:59:21:23:f9:62:1e:3e:37:ba:2e:a9:23:30:
4f:06:84:41:c4:2d:35:53:73:eb:c2:20:a1:1b:27:
d1:91:83:6e:6d:09:83:97:80:51:d7:bd:50:60:9c:
e9:b0:3f:08:aa:4d:71:d8:5b:ed:39:ca:71:39:eb:
57:47:f5:04:a8:06:40:c6:ba:f7:61:04:c0:b4:57:
60:23:f2:48:68:84:f9:1a:5e:fe:ce:51:ee:ff:0b:
cb:ad:28:d1:50:f0:ef:f2:c4:8e:7e:46:4f:d1:0d:
3c:5f:a0:88:5c:4b:80:24:b8:5a:8a:a1:e6:3a:62:
4c:c7:2d:b8:40:6c:5f:40:c1:8b:a4:e1:f0:86:44:
4e:0c:ae:4a:ce:07:bc:a1:7a:3a:5d:9d:76:e2:64:
65:4a:3f:1b:35:32:b8:dd:b8:aa:29:5e:63:9d:c7:
69:35:d6:f3:bc:73:c4:85:14:e1:95:3f:39:be:20:
05:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:09:BA:30:AD:6C:DC:8E:A0:6B:FE:21:7F:59:FD:CC:24:5C:5E:3F
X509v3 Authority Key Identifier:
keyid:B6:92:A7:E1:C3:0A:97:E4:2D:9E:84:CE:0F:C4:E7:E9:07:19:13:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B692A7E1C30A97E42D9E84CE0FC4E7E90719130F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/TzyNqaDqX3hTfFT9kdKUthPQqLQTTerfBMBPyrhsyqK/0/323830343a386562383a383030303a3a2f33342d3334203d3e20323733343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8eb8:8000::/34
Signature Algorithm: sha256WithRSAEncryption
b4:1e:9f:a8:c4:e9:0c:24:33:b3:5e:67:da:ab:f2:cf:8d:ad:
1a:e4:42:a5:98:e5:12:ef:a9:18:27:65:1c:ea:56:1b:e1:6e:
32:e3:85:54:59:02:c3:ff:f9:cb:56:1b:6e:3a:8d:84:26:51:
a9:87:7e:22:fc:ea:7c:b4:e7:27:f6:c4:c1:01:e9:04:8d:af:
e0:51:04:4e:17:65:9a:a0:54:d3:86:1f:fa:d3:5d:22:a2:d2:
4c:60:b4:05:57:f2:9f:fe:d3:73:13:6a:7b:2b:46:62:43:a2:
dc:d4:02:49:64:4a:fa:84:8e:f4:35:da:1c:fe:83:34:b4:df:
1f:2f:56:0f:b5:54:fd:95:32:cb:c4:75:5e:c0:2d:34:37:f1:
e7:ec:22:b9:94:0c:4f:60:16:57:5a:18:c9:61:50:b9:53:04:
7e:4e:b3:74:17:eb:73:78:19:6a:a5:89:86:8c:34:c3:7a:c0:
69:6d:fb:06:1c:66:2e:f3:d4:d3:40:89:0c:24:f2:25:d5:42:
58:60:8b:84:a1:9a:7a:98:0c:cc:34:3e:80:31:e9:8e:8b:ef:
4a:54:f4:b8:d2:cb:05:6b:67:b2:7b:4f:85:c1:df:4f:c0:25:
cb:11:23:84:e3:b6:fc:2a:e2:7d:94:e7:cf:2f:2f:a6:04:46:
0d:ea:95:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 19:35:38 2025 by rpki-client