Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3334203d3e203532383338.roa
File: 323830343a6264383a3a2f33322d3334203d3e203532383338.roa (raw, json)
Hash identifier: AFPqRIL9ZNqEx+/pAQl6Aic4FIzxWBSHBHONxd0dpzM=
Subject key identifier: 01:06:DA:2B:4F:AF:4B:89:2F:70:EB:B7:7D:D9:DA:D3:CF:24:05:00
Certificate issuer: /CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Certificate serial: 2E4CADB2EA62EB1701A533F528C5F109028F25F9
Authority key identifier: CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3334203d3e203532383338.roa
Signing time: Tue 14 Jun 2022 20:07:19 +0000
ROA not before: Tue 14 Jun 2022 20:02:19 +0000
ROA not after: Tue 13 Jun 2023 20:07:19 +0000
asID: 52838
IP address blocks: 2804:bd8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:4c:ad:b2:ea:62:eb:17:01:a5:33:f5:28:c5:f1:09:02:8f:25:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2
Validity
Not Before: Jun 14 20:02:19 2022 GMT
Not After : Jun 13 20:07:19 2023 GMT
Subject: CN=0106DA2B4FAF4B892F70EBB77DD9DAD3CF240500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:47:c0:90:3b:dd:46:be:62:4d:40:11:f5:0c:
20:4a:e4:e4:08:27:9e:5d:40:a7:8c:22:8c:96:fa:
2e:27:c7:37:0e:e9:15:f0:c8:80:2b:94:83:53:2b:
df:4b:d4:c1:34:78:ce:77:2d:af:ee:e3:83:09:92:
5f:a0:c4:c6:77:15:68:db:eb:3e:8d:34:2c:e4:27:
46:a5:e1:7d:83:07:21:41:39:62:0f:07:bb:3f:ff:
2d:b9:82:eb:4a:8b:dd:98:af:10:a2:ee:dc:43:fd:
8a:aa:cd:d2:df:9d:12:09:5c:7a:de:a2:81:86:51:
cb:5c:78:48:d8:19:0c:f5:5f:1a:eb:c4:aa:f0:c3:
9e:ea:86:de:e9:19:5d:4c:9d:14:7e:27:e0:9b:91:
0b:7d:f2:fd:3a:4b:9f:7c:d2:88:ec:34:76:46:06:
7d:51:e9:39:23:6d:8c:0f:7e:fa:90:45:09:c9:5d:
af:9f:04:f6:3e:5e:54:c3:6b:c3:9e:db:4f:c4:25:
b3:7b:00:4f:77:d1:8c:5e:70:4c:80:87:03:93:a2:
58:c0:b8:9d:0a:7b:b2:5a:3b:7e:a2:72:17:89:ee:
08:e9:27:b0:19:89:9f:1b:7e:c0:7c:1e:17:22:04:
19:b4:81:59:74:56:27:a3:75:65:b9:ff:9a:04:c3:
27:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:06:DA:2B:4F:AF:4B:89:2F:70:EB:B7:7D:D9:DA:D3:CF:24:05:00
X509v3 Authority Key Identifier:
keyid:CD:71:34:4C:46:FD:5D:9E:F1:EA:61:A2:ED:F9:76:98:51:E1:6B:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD71344C46FD5D9EF1EA61A2EDF9769851E16BE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/X4m2vknZpbczDF6oznAggP2GaekweN1Ku9dkW6XzUXF/0/323830343a6264383a3a2f33322d3334203d3e203532383338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bd8::/32
Signature Algorithm: sha256WithRSAEncryption
29:af:bb:93:ca:f6:d3:e2:c2:38:ff:5a:07:65:32:4b:e7:92:
8e:cf:63:37:f4:d9:bf:4a:7c:09:7c:d1:be:84:db:27:db:a2:
e2:15:4a:28:b7:fb:ac:af:f3:fc:5a:e5:d4:bf:ef:31:67:2d:
73:3f:55:d0:71:0c:1d:6f:b5:f6:df:34:04:2b:74:aa:23:27:
5b:ad:4e:98:24:70:32:ab:53:1c:2b:cb:26:ba:f4:4a:aa:00:
be:d6:4e:8b:ee:3a:c9:13:4d:dd:d3:5d:3a:40:4f:6e:2d:8b:
c8:73:97:45:18:5f:0a:e8:7e:4a:23:f3:62:63:4d:05:b6:b6:
7b:ac:e7:52:dc:e7:0d:6d:36:e1:36:29:41:42:e5:50:ea:cc:
4e:5d:63:d2:86:b9:03:b4:e8:99:a3:9e:2d:f5:41:87:f5:d7:
ea:89:a9:4a:d5:f2:0c:84:87:6f:40:fa:bb:28:23:29:1d:f9:
e9:11:5c:2b:55:f7:7d:c1:f7:f1:a2:89:e0:11:08:8d:9d:94:
b9:3e:e7:c5:e9:eb:4a:8c:5a:c1:39:e0:c6:09:ee:9b:1c:50:
32:ba:7d:0a:56:75:d0:4e:d3:44:7a:da:cd:2f:4e:fd:22:87:
56:46:48:91:29:3a:7a:41:14:98:a7:31:a7:f7:09:12:c6:79:
ca:f6:25:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 00:02:59 2025 by rpki-client