Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
File: 323830343a313364383a3a2f33322d3438203d3e20323632363639.roa (raw, json)
Hash identifier: fgmgAgnrB4v/gRDxSpL9LB3880z9IOx2HCS8GdTiOzU=
Subject key identifier: 87:8C:A8:45:B1:06:A7:BA:E0:8B:C9:DC:26:0C:2B:A8:E7:D3:76:F2
Certificate issuer: /CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Certificate serial: 201316B7414A37FB383A9202E5578F88404C6F9D
Authority key identifier: 24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
Signing time: Fri 20 Dec 2024 14:00:56 +0000
ROA not before: Fri 20 Dec 2024 13:55:56 +0000
ROA not after: Fri 19 Dec 2025 14:00:56 +0000
asID: 262669
IP address blocks: 2804:13d8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:13:16:b7:41:4a:37:fb:38:3a:92:02:e5:57:8f:88:40:4c:6f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2424063D980D1824DE6EFE6E89927FC7550A458F
Validity
Not Before: Dec 20 13:55:56 2024 GMT
Not After : Dec 19 14:00:56 2025 GMT
Subject: CN=878CA845B106A7BAE08BC9DC260C2BA8E7D376F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:e8:6f:25:ef:9b:27:9f:30:65:29:f5:10:
e2:70:f9:14:3e:e5:73:5d:d5:46:e4:64:f8:4f:2a:
06:d4:06:51:3a:6b:3e:75:89:9b:b2:68:3d:59:c4:
f7:35:7e:b1:c8:50:30:5d:4d:8a:7b:7b:14:36:0c:
57:00:e0:13:cf:ef:84:85:fb:f3:bb:e2:aa:78:11:
41:7d:d6:34:04:a1:12:2b:51:3b:50:34:65:ea:50:
da:7c:1e:f4:86:bf:b0:95:65:61:65:77:2c:37:74:
31:31:1c:d8:d3:ff:8e:b0:7d:bb:f9:c5:b0:81:f8:
19:e5:67:dd:8a:27:e3:f2:21:4b:4c:84:c0:d3:55:
4d:71:28:d7:c5:1b:c4:da:57:23:ca:63:49:d7:b3:
e3:06:fb:09:0e:31:0d:d1:dd:27:90:ff:d7:c3:51:
64:86:f9:a6:25:4e:8e:49:a3:c9:e9:03:97:d2:b0:
a7:6c:dd:9c:7d:12:57:7a:15:9e:04:9d:d7:fe:f2:
ac:50:56:6e:2c:e0:53:9e:38:5e:84:40:85:de:ea:
0b:9f:70:92:97:6c:42:28:58:a3:e4:e0:b1:a2:1c:
39:24:cc:a7:a1:57:c7:d5:d8:01:9b:29:db:b9:99:
2e:0f:16:c7:de:2d:6b:71:54:6e:a7:5c:16:1a:eb:
89:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8C:A8:45:B1:06:A7:BA:E0:8B:C9:DC:26:0C:2B:A8:E7:D3:76:F2
X509v3 Authority Key Identifier:
keyid:24:24:06:3D:98:0D:18:24:DE:6E:FE:6E:89:92:7F:C7:55:0A:45:8F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/2424063D980D1824DE6EFE6E89927FC7550A458F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2424063D980D1824DE6EFE6E89927FC7550A458F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g9eWUzUcU5jmFSjEf1EA9FHZND5kKwKrbjfqKkKgifT/0/323830343a313364383a3a2f33322d3438203d3e20323632363639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:13d8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:bc:f4:c2:41:b6:de:d1:0a:1a:77:43:17:06:f7:cf:66:35:
a1:c5:8b:ba:26:0e:87:19:cf:f2:b9:63:06:ef:ff:aa:0c:59:
12:76:57:15:ab:4c:40:66:6f:5b:ac:b8:c8:92:f4:a2:68:64:
4f:f2:92:64:2a:12:a2:80:33:10:6d:03:0b:77:3e:0b:b4:d0:
86:84:e8:98:16:8b:07:be:3e:ac:ba:cf:52:64:c3:5f:89:fb:
2f:ee:87:18:49:8d:30:f1:ec:64:ca:f1:5a:cc:f0:0b:91:c0:
ef:9c:e9:31:b7:c8:2b:e8:52:2c:2b:d7:c3:cc:04:70:b7:ce:
12:06:a8:fd:41:9a:26:95:c0:0c:f8:2c:46:1f:69:61:b8:d3:
5c:b6:59:6b:a3:db:eb:61:c8:f0:69:b0:47:02:fc:73:e8:45:
ba:df:1e:b8:65:8a:b8:e4:c0:35:8d:4f:70:3f:64:e6:31:67:
29:ee:42:88:03:e0:68:18:17:bb:be:f8:0a:51:8c:63:ba:06:
36:f3:7c:b3:cd:72:70:c3:5e:06:ab:e4:20:38:7a:20:0f:0e:
8e:be:48:72:f7:42:97:16:56:7b:9f:3d:17:4b:37:70:0c:f2:
4b:89:db:16:73:86:9d:2f:4f:3f:93:bb:68:db:70:48:14:ec:
67:ef:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 06:06:42 2025 by rpki-client