Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
File: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (raw, json)
Hash identifier: l2fBaVoL9wQRrQiklGPivT4vtQCD+5xVr0FOVcyxrRo=
Subject key identifier: 3E:67:32:98:97:C2:0F:A3:DE:85:68:72:ED:30:AB:FF:EC:69:F1:D6
Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial: 1F3A438DB27A1BD9E149D8B228352D6C94F8DA44
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
Signing time: Thu 04 Apr 2024 18:09:15 +0000
ROA not before: Thu 04 Apr 2024 18:04:15 +0000
ROA not after: Thu 03 Apr 2025 18:09:15 +0000
asID: 263915
IP address blocks: 2804:27a8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:3a:43:8d:b2:7a:1b:d9:e1:49:d8:b2:28:35:2d:6c:94:f8:da:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Validity
Not Before: Apr 4 18:04:15 2024 GMT
Not After : Apr 3 18:09:15 2025 GMT
Subject: CN=3E67329897C20FA3DE856872ED30ABFFEC69F1D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e2:c8:ec:e0:41:eb:ed:43:fe:fb:ca:e7:a6:
c6:f3:cd:4d:57:51:88:29:45:b1:3f:80:3b:a4:a3:
fe:97:96:b2:50:59:5f:00:04:b2:f3:41:a3:74:10:
33:5a:c2:14:ad:44:aa:48:06:f8:55:dc:e9:22:73:
44:e5:92:0a:23:4e:7b:49:bd:5e:7f:41:e4:ce:b9:
27:87:f1:6f:25:ed:e4:41:cb:40:41:14:33:2b:45:
65:d2:a4:f9:dd:f7:e2:72:aa:7d:23:d1:20:8f:b7:
25:17:1c:4a:3d:15:0c:01:61:e3:99:8e:13:01:d6:
dc:a2:95:7c:d0:88:81:8e:cc:07:6e:df:69:61:da:
1c:fb:80:b3:f9:e0:03:66:2e:02:00:02:2e:e2:ca:
91:22:06:43:74:d2:37:11:44:68:38:0b:07:9f:08:
8b:83:35:d3:4e:d9:e6:3f:4f:51:7c:8f:e1:f5:c8:
8b:4c:2a:8c:13:fb:6b:47:44:77:63:56:8c:a8:6e:
d0:5d:14:2b:22:8c:3b:3e:d5:b1:e4:de:d1:64:1d:
ee:ca:92:e3:f6:e7:b3:6a:67:50:39:9e:a7:b3:0e:
b0:51:a3:14:c9:1d:e9:a3:02:7b:25:1c:71:b2:25:
24:e1:c9:8d:0f:49:37:e8:34:04:89:9c:94:8c:1f:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:67:32:98:97:C2:0F:A3:DE:85:68:72:ED:30:AB:FF:EC:69:F1:D6
X509v3 Authority Key Identifier:
keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27a8::/32
Signature Algorithm: sha256WithRSAEncryption
67:62:99:b0:d0:8f:ac:bb:7d:b6:44:c3:6c:bf:f6:3c:ba:d4:
f4:42:2d:f8:b4:c2:2e:47:5a:1e:6d:02:d8:32:49:70:78:05:
bf:e4:27:e2:a5:76:ad:f7:f2:a4:f6:a9:dd:69:1a:30:9b:51:
96:d9:1f:84:38:67:0d:ab:6e:72:59:1a:9e:97:91:80:f8:4c:
05:80:25:16:cf:83:8c:10:34:36:ab:81:2f:ba:f7:33:1d:11:
a8:fa:73:b5:b5:8f:e5:b2:ab:05:9f:eb:de:d8:85:53:a4:16:
0d:69:85:2b:dc:b2:f6:7f:65:87:df:67:b0:ce:af:7b:38:53:
dc:90:37:51:64:b4:c5:b3:b1:1b:9c:be:88:27:94:19:40:8c:
87:63:c0:af:c4:c3:06:69:9b:42:51:73:ca:a2:5c:f3:73:d7:
3d:d4:49:7c:ba:a8:a6:2f:61:19:9a:cd:3e:45:95:fb:f3:dc:
15:42:6c:0e:40:da:3a:0b:02:a1:c1:10:a4:08:17:39:88:55:
27:48:40:47:d9:e1:ce:53:8c:dd:a4:15:c3:bd:d8:38:44:0d:
77:fd:f9:43:a1:7b:76:35:f3:c7:92:88:b2:1b:2c:3c:50:dc:
ed:4a:75:cc:66:b4:a9:0f:21:34:ee:fa:3d:a7:ed:67:ac:ea:
ba:0b:27:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:09:51 2025 by rpki-client