Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
File: 323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa (raw, json)
Hash identifier: R+qACnRgtRY6n4u0S7ts8Px4hJQ4Fp4eCYUJrCuV34s=
Subject key identifier: A4:0E:B3:37:8C:7C:00:C7:48:CF:C7:2E:53:38:48:02:38:9B:8E:62
Certificate issuer: /CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Certificate serial: 138C45E23894A1AC4AAA352DCACC25C488448C5A
Authority key identifier: FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
Signing time: Fri 24 Jan 2025 18:25:01 +0000
ROA not before: Fri 24 Jan 2025 18:20:01 +0000
ROA not after: Fri 23 Jan 2026 18:25:01 +0000
asID: 271309
IP address blocks: 2804:7980:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:8c:45:e2:38:94:a1:ac:4a:aa:35:2d:ca:cc:25:c4:88:44:8c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FA8D895DEA10C0D11206F62D5BE38EDB0A317794
Validity
Not Before: Jan 24 18:20:01 2025 GMT
Not After : Jan 23 18:25:01 2026 GMT
Subject: CN=A40EB3378C7C00C748CFC72E53384802389B8E62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:94:b1:df:e2:d2:07:dc:b0:14:ea:b9:d8:
fd:ae:7b:3e:be:68:84:ec:55:ae:b3:7a:dc:59:83:
d9:81:df:9f:b8:e9:e0:83:1b:37:9f:83:f2:b9:fb:
09:fb:12:04:39:85:b1:f6:f4:f7:9d:1d:ec:87:c2:
99:d7:af:88:b4:d4:c5:1a:d3:c2:8a:ec:db:3b:1e:
b0:71:b5:13:c2:a4:96:70:d7:1b:ff:03:31:56:3e:
9b:47:00:a9:09:35:b3:e0:fa:d7:3e:5a:4c:8b:e0:
31:51:10:bf:95:9d:22:77:6c:12:0e:a2:08:22:73:
f2:21:1b:0c:96:88:79:1b:8d:81:d9:c5:f6:2c:20:
b7:6c:4b:a7:9a:48:77:64:c7:db:c0:d1:96:5a:8d:
a4:54:ec:59:69:28:24:f3:bd:07:b6:e7:f6:3a:6d:
74:03:be:a9:f8:1f:83:43:d6:41:dc:73:f9:bd:0d:
4c:0e:69:06:e8:42:90:a7:47:d6:b3:3a:c8:f7:52:
9a:a8:d4:3a:e2:f1:ab:21:43:d4:49:73:3f:7f:70:
c6:2a:a5:9f:2a:df:cc:35:66:24:f1:64:0c:93:94:
66:59:81:95:86:c6:33:53:7f:25:f8:5e:96:27:70:
50:1e:c2:92:b8:f7:9f:2e:e7:b9:f2:91:f6:9d:42:
70:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:B3:37:8C:7C:00:C7:48:CF:C7:2E:53:38:48:02:38:9B:8E:62
X509v3 Authority Key Identifier:
keyid:FA:8D:89:5D:EA:10:C0:D1:12:06:F6:2D:5B:E3:8E:DB:0A:31:77:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FA8D895DEA10C0D11206F62D5BE38EDB0A317794.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4T2YBmaTzzxEGeQCPGw4is8csdKH9o7sNEpBwot6Mnbf/0/323830343a373938303a383030303a3a2f33332d3333203d3e20323731333039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7980:8000::/33
Signature Algorithm: sha256WithRSAEncryption
90:c6:49:33:d2:3f:d8:1a:23:62:08:3c:f7:d2:6b:16:05:54:
6d:a1:b8:4b:06:30:36:0f:38:3f:ed:6e:3e:dd:a7:85:a0:a2:
f6:03:77:0b:62:4b:ce:19:03:5f:6e:cb:db:50:3f:87:d7:28:
58:81:e6:1e:1f:d9:4d:aa:f8:ff:67:2b:dc:58:2f:51:d6:73:
02:6e:23:bf:5d:27:b5:12:a6:0e:e0:eb:41:e6:fd:11:fe:36:
77:49:e4:40:cb:f7:ca:f2:c1:b3:27:e5:5a:44:19:90:47:3b:
59:24:79:34:b4:58:65:d4:04:eb:b1:a5:a0:7f:c1:36:02:e8:
f4:af:53:33:fc:cc:3e:d1:9a:4b:00:30:38:a6:c3:4f:f8:57:
fb:81:23:10:fc:62:b3:70:7a:3c:3f:77:53:77:63:39:6d:32:
b6:fb:e8:5f:b2:4b:de:88:b0:d2:a1:45:21:15:3b:f0:61:20:
6f:9c:40:62:42:17:3a:52:4b:d9:c9:15:39:94:b3:54:4f:2b:
46:34:89:fc:1b:b6:3d:0a:10:5d:30:5f:4a:cd:f7:5a:6f:d5:
a6:1c:ce:c4:b9:31:d7:3c:77:63:65:cc:5d:ce:1e:2c:63:a9:
96:3a:6e:4a:75:d7:a6:32:d8:1c:05:32:95:e2:7a:8d:c0:14:
37:f0:03:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:38:24 2025 by rpki-client