Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
File: 323830343a316539343a3a2f33322d3336203d3e20323634343337.roa (raw, json)
Hash identifier: MgVlKe1yKItHNgKRZ26qLyUwnQMiH7DFwNd9it24ld8=
Subject key identifier: 56:FA:95:60:C4:44:DE:6D:CD:8A:99:D6:C3:B0:F5:BE:AB:91:59:E3
Certificate issuer: /CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
Certificate serial: 1B081B8DCA4FE22FE3CB9DF452F44E7BF7814CAA
Authority key identifier: C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
Signing time: Mon 09 Dec 2024 18:10:02 +0000
ROA not before: Mon 09 Dec 2024 18:05:02 +0000
ROA not after: Mon 08 Dec 2025 18:10:02 +0000
asID: 264437
IP address blocks: 2804:1e94::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:08:1b:8d:ca:4f:e2:2f:e3:cb:9d:f4:52:f4:4e:7b:f7:81:4c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D
Validity
Not Before: Dec 9 18:05:02 2024 GMT
Not After : Dec 8 18:10:02 2025 GMT
Subject: CN=56FA9560C444DE6DCD8A99D6C3B0F5BEAB9159E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:88:c1:ce:7a:8f:42:92:e3:03:5b:fb:65:26:
d9:ee:e9:da:79:fb:04:5c:fc:2d:cc:7d:25:57:d2:
35:62:30:d5:08:de:ea:89:f7:eb:20:c3:f8:94:05:
5b:be:19:3f:95:85:ed:b0:61:76:a2:2b:6a:04:a3:
09:00:69:4e:9c:6f:75:ba:67:cb:1c:69:30:49:0d:
91:28:b2:b8:76:ce:cb:99:63:cb:16:fe:21:af:ae:
e9:4f:97:c9:00:f9:b1:43:23:5b:36:92:32:aa:ba:
ef:41:2b:85:42:a1:4a:59:01:fb:bc:ef:5e:14:27:
a6:59:35:63:e5:e0:a3:25:23:28:ac:69:5c:46:9e:
03:cb:be:c5:8f:84:19:1c:df:3b:c8:27:4a:9c:60:
fe:11:df:da:ae:2e:7a:3b:c2:d6:32:c3:72:e1:aa:
e7:b8:6b:47:02:38:3d:cd:bc:b8:fd:eb:14:6f:6f:
2a:7d:47:e9:f2:f9:3d:22:51:d9:24:22:c9:39:1e:
cd:71:aa:78:1a:09:4f:57:4e:d4:52:b7:18:a4:c2:
68:8f:65:8b:d5:8c:5b:74:b7:27:b3:1a:e3:b2:28:
22:aa:b2:86:91:9c:cf:46:42:64:55:98:66:7d:1e:
c3:c5:49:6d:18:cd:e4:04:8b:f2:27:dc:d4:b9:1a:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FA:95:60:C4:44:DE:6D:CD:8A:99:D6:C3:B0:F5:BE:AB:91:59:E3
X509v3 Authority Key Identifier:
keyid:C3:EB:30:A1:53:10:A6:A8:DC:30:7B:E0:3C:15:13:ED:B5:F0:7C:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3EB30A15310A6A8DC307BE03C1513EDB5F07C0D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UKgqWasYWcWckE3d1ZANmL7ETUNmK8fys4KNuRUBmL7/0/323830343a316539343a3a2f33322d3336203d3e20323634343337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1e94::/32
Signature Algorithm: sha256WithRSAEncryption
76:77:af:01:95:7a:9e:33:52:c2:de:df:88:5b:88:e2:7a:75:
0e:69:c0:4a:7b:93:93:36:14:fd:86:63:11:d0:2f:42:d9:f2:
07:ab:2c:f9:d9:62:4a:5f:35:e7:54:15:23:8d:67:5f:74:5e:
06:9a:d1:1d:6c:c7:b9:c5:2a:5c:73:67:3c:c5:bd:4d:32:90:
de:41:02:52:aa:55:b5:4d:35:1e:38:73:11:89:06:ce:e2:c6:
3b:22:12:42:5e:4f:8d:ed:aa:73:95:5a:6b:9a:0f:21:54:87:
54:2d:82:1f:e9:0b:d3:0c:b5:ae:ed:cd:ac:dd:74:c2:67:3f:
9d:b2:c8:07:41:f1:84:a3:4b:57:a7:4e:0c:90:43:37:d4:fb:
09:af:9c:40:2c:22:98:80:a5:59:7c:84:b1:14:2e:70:07:d6:
c1:28:8a:38:68:4b:1a:13:a8:54:80:71:14:59:1d:19:69:71:
bf:e5:98:8a:77:33:2a:93:b2:84:e7:f9:cf:64:7d:db:fa:20:
24:6b:3b:77:a0:03:3f:25:22:d5:b0:e3:4f:66:62:9c:69:dd:
a3:c8:70:ad:03:61:82:c6:3b:94:8b:25:52:6f:06:a9:83:27:
c1:89:8d:e9:58:42:94:1a:85:48:93:86:bf:2b:5e:7c:f0:3d:
e0:b3:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:46:05 2025 by rpki-client