Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa
File: 323830343a383563633a3a2f33322d3438203d3e20323732363031.roa (raw, json)
Hash identifier: XK8gG2MoZUzZDNRypc0/+NDptZEJBoOxLDViPs/6X7M=
Subject key identifier: 8B:30:32:31:4A:D8:E2:E0:84:F8:F2:22:43:8B:E7:C7:6B:E9:B6:8B
Certificate issuer: /CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
Certificate serial: 6A079886599C2C0C2868F21827406661EE5377E1
Authority key identifier: AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa
Signing time: Mon 06 Jan 2025 18:56:50 +0000
ROA not before: Mon 06 Jan 2025 18:51:50 +0000
ROA not after: Mon 05 Jan 2026 18:56:50 +0000
asID: 272601
IP address blocks: 2804:85cc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:07:98:86:59:9c:2c:0c:28:68:f2:18:27:40:66:61:ee:53:77:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC9C321F62E4F984FA376FC446EDB27A235860FC
Validity
Not Before: Jan 6 18:51:50 2025 GMT
Not After : Jan 5 18:56:50 2026 GMT
Subject: CN=8B3032314AD8E2E084F8F222438BE7C76BE9B68B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:25:2c:bc:a3:ac:d3:a3:00:ee:7b:ac:3d:
ae:24:8e:96:fe:47:94:38:fc:bc:c1:63:9f:67:6a:
04:91:d1:3d:58:c8:ff:0f:3d:af:43:61:bb:32:b9:
4c:21:d1:ae:a6:95:93:26:b3:80:a2:f3:ee:1b:6d:
64:0d:5e:f0:b6:52:4b:6b:88:f9:07:d6:3d:73:7a:
3c:5f:18:36:e7:ae:53:0f:35:a6:82:b0:14:f9:de:
60:ea:7c:61:36:bc:c2:1c:cb:67:70:fb:98:90:a1:
49:35:40:ed:80:51:2e:26:1b:63:0e:1c:c8:ba:b4:
82:cf:08:f5:2f:2c:ed:71:e7:5d:29:ae:e4:9b:24:
74:70:55:21:7b:55:7a:86:0e:4a:60:03:86:3a:82:
bb:ac:9a:ca:3f:1d:71:2d:fc:03:78:3a:41:59:ec:
78:79:be:ac:2b:c0:91:ee:f5:1a:32:0e:c3:41:0b:
a1:83:8d:ad:33:a2:11:c7:ed:25:a5:38:ed:97:f9:
e0:d2:5d:49:fa:ef:9d:41:6b:c3:3e:e4:3d:84:8c:
02:ae:e1:bb:a9:ec:c6:4b:c8:9a:e4:3c:c4:1a:1a:
47:51:e0:10:6c:b0:42:f4:60:d5:60:c6:4c:e5:8c:
93:e2:7f:08:e5:f1:be:10:cc:05:d2:f9:03:7d:11:
7e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:30:32:31:4A:D8:E2:E0:84:F8:F2:22:43:8B:E7:C7:6B:E9:B6:8B
X509v3 Authority Key Identifier:
keyid:AC:9C:32:1F:62:E4:F9:84:FA:37:6F:C4:46:ED:B2:7A:23:58:60:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/AC9C321F62E4F984FA376FC446EDB27A235860FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AC9C321F62E4F984FA376FC446EDB27A235860FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kBc6FE4TeB8i6UsL6rgyWJ7HN2C71FpZUkR6Fx98uqr/0/323830343a383563633a3a2f33322d3438203d3e20323732363031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:85cc::/32
Signature Algorithm: sha256WithRSAEncryption
6a:85:96:1f:c4:d7:45:06:b1:eb:88:8d:b3:73:ac:82:05:f2:
d4:ac:4e:dd:3a:41:20:2a:92:1b:7a:09:f8:71:eb:b1:e9:05:
39:14:38:95:aa:e6:55:27:6e:f3:4b:40:4a:a6:5b:ec:e2:93:
9a:e8:ee:5a:44:8d:97:fb:ad:23:a0:17:a7:f5:2a:1e:b4:c5:
42:20:43:f2:6a:82:86:d5:61:2a:f4:c3:3d:04:0f:3c:da:f1:
dd:d3:85:10:77:82:73:e7:8b:66:bd:b3:ee:cf:f5:ae:d3:3f:
d2:c4:04:1a:f4:a5:5c:43:94:ec:c9:98:3c:43:6f:dc:7d:da:
11:d9:a8:e4:8a:6c:81:68:d1:25:02:82:36:44:38:a8:ff:6f:
a9:2c:ce:f2:ea:0b:db:ce:50:28:3b:57:ca:17:43:40:32:17:
7a:28:07:84:7c:35:57:90:d3:d5:2d:f2:ad:aa:74:d7:a9:e4:
ac:bf:2b:94:51:eb:b1:99:10:ef:51:fc:39:c7:ec:7f:50:fb:
8d:eb:f9:60:49:d6:a4:03:52:79:f6:17:b7:19:68:41:c0:bf:
8a:fd:6a:76:98:3a:23:7a:27:1b:a6:84:09:ad:1c:34:99:75:
21:e6:25:72:f3:fc:f9:ac:d9:90:b2:a7:4e:d4:82:49:d3:92:
d9:bb:d2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:41:37 2025 by rpki-client