Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
File: 323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa (raw, json)
Hash identifier: qMXYhMp+LVYGti2NuSjxj10R7BA4s8v9jTtjkwNr9pg=
Subject key identifier: D9:BB:24:BA:E5:0D:14:31:EB:AF:21:D2:91:67:B6:54:D0:F4:C6:DE
Certificate issuer: /CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
Certificate serial: 4456A7A87D684596CB13A743E0B24750879F32E4
Authority key identifier: 35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
Signing time: Mon 13 Jan 2025 13:05:06 +0000
ROA not before: Mon 13 Jan 2025 13:00:06 +0000
ROA not after: Mon 12 Jan 2026 13:05:06 +0000
asID: 263568
IP address blocks: 2801:80:740::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:56:a7:a8:7d:68:45:96:cb:13:a7:43:e0:b2:47:50:87:9f:32:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=354EA44B0BC0800AF1FC575B0A1061BA0BE35D84
Validity
Not Before: Jan 13 13:00:06 2025 GMT
Not After : Jan 12 13:05:06 2026 GMT
Subject: CN=D9BB24BAE50D1431EBAF21D29167B654D0F4C6DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:2d:c9:45:e1:f0:d2:37:09:53:89:ce:99:a6:
30:28:03:72:fc:67:18:58:07:58:a7:5b:e3:e3:bb:
9b:af:de:ea:8f:a4:85:8d:9e:21:88:af:80:f7:23:
ca:e1:fa:33:75:67:c4:a5:e8:02:96:c7:df:06:48:
a6:14:c4:8c:a8:3e:66:b0:75:85:4a:53:75:75:ff:
56:c8:6f:05:4c:34:f3:27:34:b0:d7:5c:e6:06:aa:
d8:53:39:db:6f:1b:f0:2d:5d:f0:46:f4:dd:85:88:
cc:c9:67:fc:6e:33:c5:99:9f:27:5a:ad:4c:66:0c:
e4:6a:a7:60:2e:90:4c:ac:40:55:5d:92:17:57:1e:
8c:a0:0f:78:d9:d9:9f:f5:b3:d3:6a:b9:cf:8a:8a:
c9:23:71:43:9c:79:f2:26:10:a8:2d:1b:e3:77:e0:
9b:00:96:fd:8c:be:76:df:60:98:43:eb:cd:34:38:
ea:ad:e5:3f:33:c6:d5:72:00:ce:a0:99:d3:1a:34:
4b:84:9f:7f:d1:83:98:ca:4a:44:b4:17:b1:77:73:
62:da:a4:de:a2:ac:8a:ae:92:e3:2b:aa:98:34:d1:
a2:b5:54:df:fc:56:c7:d7:84:e9:68:be:91:b4:85:
df:17:1d:f7:15:b2:fa:8a:dc:75:53:53:ca:7f:aa:
07:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:BB:24:BA:E5:0D:14:31:EB:AF:21:D2:91:67:B6:54:D0:F4:C6:DE
X509v3 Authority Key Identifier:
keyid:35:4E:A4:4B:0B:C0:80:0A:F1:FC:57:5B:0A:10:61:BA:0B:E3:5D:84
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/354EA44B0BC0800AF1FC575B0A1061BA0BE35D84.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2WA4Q4DQp9YxDJnqd1CVvBRHVQBhVnDPSmpfjUCP2EgK/0/323830313a38303a3734303a3a2f34382d3438203d3e20323633353638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:740::/48
Signature Algorithm: sha256WithRSAEncryption
40:ed:ad:a5:97:ca:41:3c:49:20:5a:d0:f2:5d:4e:29:89:72:
77:c3:59:36:18:52:ae:3a:a7:93:4e:29:ff:30:25:99:3d:44:
10:55:82:40:08:3f:56:38:54:dc:00:f5:4e:83:5d:86:3f:b9:
5b:c2:cf:a7:3f:4f:f2:53:7b:32:1d:d2:11:26:97:c9:f9:13:
1d:78:ac:96:01:08:0a:f1:3f:2c:af:0f:bf:7a:57:cc:a8:c2:
de:1b:b8:b5:06:6a:6b:42:4b:17:0b:a2:ae:4e:2a:20:ae:ec:
e8:46:80:1b:f7:cb:00:0f:dd:02:1d:f5:08:1d:27:0d:e4:d4:
bb:b9:ef:5d:bf:7a:37:11:b8:45:b2:51:51:f1:e9:22:a7:e4:
3d:8e:ff:fd:1d:b6:9a:95:ea:f8:79:b9:52:ee:1e:da:db:10:
e8:c9:38:a5:77:5a:99:fb:3c:a7:fd:2f:6e:95:1a:4e:be:59:
92:dc:d9:7a:e7:0a:7e:de:ec:d5:07:b0:1a:76:a5:ee:29:9e:
9c:bf:b0:1f:98:33:ac:d8:70:d0:f2:85:b4:b2:bc:81:2b:a5:
a1:c3:42:59:0f:db:a6:b1:f7:a1:bc:1d:33:51:a4:29:fa:32:
b0:ef:d0:cb:9e:c2:1a:84:1f:80:5b:67:71:fb:c8:33:1b:76:
74:35:f8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:48:17 2025 by rpki-client