Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
File: 323830343a323234633a3a2f33322d3438203d3e20323632373639.roa (raw, json)
Hash identifier: Txlf7JVshurNu76S2NytybCa3inr9JXB+UwSmTEe/Zg=
Subject key identifier: 02:01:9B:1A:0F:F5:E3:11:57:3D:81:99:65:DD:5F:37:14:16:04:89
Certificate issuer: /CN=C3DFDF7A13BC37114857665CD0A069BD96BDC348
Certificate serial: 7D0DFEE88AFAEBAD73ADFE0E67A3E2C6A24F914C
Authority key identifier: C3:DF:DF:7A:13:BC:37:11:48:57:66:5C:D0:A0:69:BD:96:BD:C3:48
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3DFDF7A13BC37114857665CD0A069BD96BDC348.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
Signing time: Wed 06 Nov 2024 20:17:11 +0000
ROA not before: Wed 06 Nov 2024 20:12:11 +0000
ROA not after: Wed 05 Nov 2025 20:17:11 +0000
asID: 262769
IP address blocks: 2804:224c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:0d:fe:e8:8a:fa:eb:ad:73:ad:fe:0e:67:a3:e2:c6:a2:4f:91:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C3DFDF7A13BC37114857665CD0A069BD96BDC348
Validity
Not Before: Nov 6 20:12:11 2024 GMT
Not After : Nov 5 20:17:11 2025 GMT
Subject: CN=02019B1A0FF5E311573D819965DD5F3714160489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:4f:3b:b0:51:0a:f3:9d:1d:d7:df:c4:60:
90:70:73:f8:68:ed:4b:eb:57:e8:86:87:cd:fb:b4:
ab:b6:7c:3b:1a:43:94:11:24:6f:a4:6c:6b:c7:35:
54:0a:a0:90:92:30:b3:00:ba:d2:70:4b:ab:a9:99:
2e:b3:62:72:76:c0:a1:93:57:e5:3c:39:3d:cc:fb:
0a:f0:25:3d:20:f8:ed:18:83:82:52:b6:c0:77:e0:
56:f2:b6:56:3f:d8:14:f5:4c:2a:26:26:67:bb:ae:
63:76:94:21:e8:b0:b2:c1:c5:f0:b6:82:3c:d9:31:
59:c6:9c:5e:25:0b:4e:1f:6a:8d:0f:59:ac:79:ae:
cc:e9:83:ba:18:8a:6d:f8:10:73:23:70:37:97:3f:
6a:09:f6:60:5b:4c:ee:9b:a1:0f:65:50:a7:a8:b7:
9c:f7:96:a8:4c:33:7b:c1:c5:45:90:d3:95:26:12:
fd:9d:79:d2:3b:55:eb:93:c6:a6:4f:92:a6:52:2e:
d2:03:b6:25:c8:88:4e:ca:7a:13:5b:70:4c:ff:45:
03:cc:43:90:5e:84:ff:bd:45:fa:97:f1:ae:79:b9:
f4:31:0e:13:0c:f5:d7:ef:e2:fd:c9:64:6e:b3:bd:
45:50:cb:53:c9:12:4c:14:c0:59:19:45:34:ba:3c:
10:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:01:9B:1A:0F:F5:E3:11:57:3D:81:99:65:DD:5F:37:14:16:04:89
X509v3 Authority Key Identifier:
keyid:C3:DF:DF:7A:13:BC:37:11:48:57:66:5C:D0:A0:69:BD:96:BD:C3:48
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/C3DFDF7A13BC37114857665CD0A069BD96BDC348.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C3DFDF7A13BC37114857665CD0A069BD96BDC348.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4QryXqP9Xq4CTRq4S2vGHYfpBadPBzt8Rq2MTCy4dVKt/0/323830343a323234633a3a2f33322d3438203d3e20323632373639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:224c::/32
Signature Algorithm: sha256WithRSAEncryption
8f:ef:9d:a5:d8:73:b1:4f:9b:5e:c0:bb:ef:69:88:7f:d4:51:
75:ee:4f:bb:75:3c:99:86:61:40:22:d7:88:59:9d:06:ac:fa:
1e:51:8e:e2:3a:09:86:40:2e:08:60:98:36:6b:df:5a:4b:ee:
db:61:84:40:c8:65:65:54:d7:c7:d7:35:5e:c5:07:a2:73:28:
ba:0a:74:1d:5c:93:e3:a1:43:89:8b:b4:d9:e9:cf:dc:d4:0c:
a0:80:bf:66:87:65:60:6b:3c:d7:10:63:5e:18:7b:70:68:75:
7b:0e:01:56:f3:1f:a2:9b:43:fe:e9:eb:f1:69:8a:35:09:88:
d9:80:9a:1f:b5:34:99:b0:c8:c8:77:18:dc:1e:7f:6d:85:28:
24:8d:89:5a:59:02:96:c0:ed:13:71:47:50:3b:ef:ed:3e:e2:
09:a2:05:1b:fd:ab:93:84:9d:42:db:96:7e:17:b0:62:98:d3:
5c:8c:59:c3:04:99:6c:e1:97:c4:09:54:c4:6f:63:bb:1d:92:
db:20:6d:78:fb:d1:39:d6:9c:05:ad:7c:7a:e6:77:73:d3:b8:
8b:09:d5:6f:25:57:ec:3b:e8:a0:ad:12:30:21:5f:bf:fd:23:
b5:99:b1:3e:c0:22:e6:34:ad:1f:80:c1:69:bb:72:04:8b:08:
52:db:00:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:35:58 2025 by rpki-client