Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
File: 323830343a336238343a3a2f33322d3438203d3e20323636313534.roa (raw, json)
Hash identifier: fRCj+xMp40y10h9fi6JUBtn2+LkDT+a0lsFWBabNkr0=
Subject key identifier: 68:0A:3E:78:09:4B:E5:F9:D9:1C:DC:EB:D7:88:5E:82:C5:63:0D:38
Certificate issuer: /CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
Certificate serial: 5A9B25AE3B1EA3E8D4912D5FF574F2343A7A4698
Authority key identifier: 03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
Signing time: Wed 03 Apr 2024 19:45:52 +0000
ROA not before: Wed 03 Apr 2024 19:40:52 +0000
ROA not after: Wed 02 Apr 2025 19:45:52 +0000
asID: 266154
IP address blocks: 2804:3b84::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:9b:25:ae:3b:1e:a3:e8:d4:91:2d:5f:f5:74:f2:34:3a:7a:46:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=032EBC04B31CCA7416FFF2267C50AACE979BC999
Validity
Not Before: Apr 3 19:40:52 2024 GMT
Not After : Apr 2 19:45:52 2025 GMT
Subject: CN=680A3E78094BE5F9D91CDCEBD7885E82C5630D38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:82:6b:24:66:e2:21:ae:38:93:51:da:b6:77:
25:45:05:99:74:68:79:a7:b7:6a:32:14:8a:46:62:
b5:3c:7c:d1:35:5d:6c:11:07:a2:ab:6f:30:94:47:
4c:10:6f:9b:45:4e:68:24:a8:87:58:37:ff:de:e5:
74:8f:b4:0e:4e:ee:76:2e:a2:5b:ce:5a:0f:ff:6c:
4d:eb:88:57:be:8e:81:98:7a:36:09:60:46:f1:0c:
68:80:46:f9:61:5e:44:25:a5:dd:33:80:ff:02:ad:
ec:ef:c8:8b:40:88:d4:9d:5b:22:14:c8:39:17:ab:
b4:a6:ed:06:03:86:f2:4e:e6:67:2a:78:21:c2:d4:
86:c2:e9:03:67:d1:a0:a6:4f:b8:63:2d:37:12:c1:
c1:d2:30:62:c1:5d:3b:5e:c0:b5:4b:46:d6:ff:cb:
e3:33:1c:ae:d9:80:22:97:7f:b6:7f:4c:13:05:d9:
bf:4f:c6:70:2f:ec:f7:f6:65:a7:f5:60:33:77:76:
3b:44:8d:be:06:24:96:20:a6:e9:7b:1b:54:e5:58:
b4:d8:6b:dd:f9:eb:4b:6b:41:af:96:31:1d:27:79:
79:3d:36:46:90:94:56:b8:aa:3a:0f:95:39:87:25:
d9:79:5a:27:19:d1:2d:1e:5c:06:1b:4e:49:99:8f:
31:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0A:3E:78:09:4B:E5:F9:D9:1C:DC:EB:D7:88:5E:82:C5:63:0D:38
X509v3 Authority Key Identifier:
keyid:03:2E:BC:04:B3:1C:CA:74:16:FF:F2:26:7C:50:AA:CE:97:9B:C9:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/032EBC04B31CCA7416FFF2267C50AACE979BC999.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4MztZRAU2GQr4ezk8R898gF3aFgnphA9QsNKAdCkFtMk/1/323830343a336238343a3a2f33322d3438203d3e20323636313534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b84::/32
Signature Algorithm: sha256WithRSAEncryption
9b:c4:60:df:7d:f4:43:a6:ee:d9:87:e2:bd:44:06:12:2d:f9:
cd:de:67:bf:c4:83:06:f7:8d:97:7c:f0:12:0c:fa:2c:a3:dd:
f4:ba:11:f0:36:ab:62:9f:72:c7:4d:73:5d:45:1a:b8:bf:69:
4d:39:7b:5e:20:0f:d6:11:87:27:79:39:d3:9a:7a:98:f8:8f:
5b:94:29:21:c1:7a:1f:ff:8c:3f:27:78:42:6c:fe:7f:ea:8d:
61:3c:f4:c9:4f:03:fa:b7:c7:80:76:15:c0:f1:8b:a6:89:27:
f7:d1:8c:6b:75:5d:e5:14:2c:0c:61:04:8c:85:69:e9:77:9a:
fb:36:c2:72:1b:3b:55:9e:68:ca:69:d1:25:17:31:11:a6:42:
a8:ca:45:d9:de:e4:5b:75:c4:85:f4:02:a1:5b:2b:80:6d:93:
d9:fa:eb:8e:a3:4b:aa:b5:ea:9a:49:2c:ee:73:3d:2c:b8:cc:
e6:c4:b4:83:39:cc:e3:ab:14:77:7c:a5:6b:9f:dd:cc:db:9e:
9d:f2:15:87:00:da:72:04:f0:95:88:f2:96:c1:f8:66:3c:65:
4d:23:7e:b3:45:99:b7:ee:82:61:39:df:8d:5f:1a:61:75:11:
9f:90:32:b5:d5:bd:7b:99:4e:9d:9e:46:33:9d:25:81:9a:d4:
aa:c7:d3:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:37:13 2025 by rpki-client