Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
File: 323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa (raw, json)
Hash identifier: 0D+l9GvqAhNJZTAuSV8VKRl4tqT7QxdcBsKybHL3OwE=
Subject key identifier: 4B:15:4B:4D:B6:52:19:08:49:C3:B3:E0:C4:3B:9F:20:EB:5E:2A:45
Certificate issuer: /CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Certificate serial: 3E87C8868BBB64ED15E3A77A82D88E9A9AE4AF5D
Authority key identifier: 20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
Signing time: Sat 21 Dec 2024 00:26:20 +0000
ROA not before: Sat 21 Dec 2024 00:21:20 +0000
ROA not after: Sat 20 Dec 2025 00:26:20 +0000
asID: 11097
IP address blocks: 2801:80:14e0::/43 maxlen: 43
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:87:c8:86:8b:bb:64:ed:15:e3:a7:7a:82:d8:8e:9a:9a:e4:af:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=202FA7CA4FB68A7F044DBC88811484C065334A74
Validity
Not Before: Dec 21 00:21:20 2024 GMT
Not After : Dec 20 00:26:20 2025 GMT
Subject: CN=4B154B4DB652190849C3B3E0C43B9F20EB5E2A45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:51:d3:d4:00:9f:1f:e0:37:46:bf:9f:a7:
12:6c:32:60:83:29:97:f3:79:b6:dd:21:ea:c7:38:
a5:3c:6d:48:06:62:6e:e4:15:ef:9e:74:25:a3:2f:
02:ca:90:1d:8e:f5:40:06:90:ec:b4:cf:c1:0f:8b:
a8:89:0e:f4:be:b5:01:85:b7:85:38:f7:89:3d:7a:
18:11:fe:de:12:ba:c7:69:90:33:11:90:e0:39:66:
17:c6:f6:f9:1b:b0:a6:66:08:59:8a:59:81:31:b8:
d2:ab:5f:35:cf:c6:b2:49:fe:8f:be:3c:3f:62:72:
49:14:4b:81:ec:13:2a:68:03:e1:6c:d5:57:84:c0:
e6:41:0c:ec:4e:c5:52:f1:f2:ad:dd:ce:e8:e7:7e:
1e:2d:2b:07:61:bb:4a:fe:70:27:30:f1:7b:29:96:
ac:bd:b3:fb:88:b3:b5:4f:b1:e8:59:38:5e:49:18:
db:5b:2e:39:80:70:c4:05:4d:e3:40:aa:14:11:92:
6d:60:4c:45:e3:c5:d1:bc:4c:27:e7:c3:fe:92:f0:
81:e1:30:3f:f9:a1:9d:41:d7:2d:e3:84:3e:bc:91:
2b:fb:d7:5c:84:7a:28:8d:7f:6a:a0:36:4e:7e:7a:
73:64:5d:b5:31:31:01:4e:0b:40:72:fa:41:69:59:
28:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:15:4B:4D:B6:52:19:08:49:C3:B3:E0:C4:3B:9F:20:EB:5E:2A:45
X509v3 Authority Key Identifier:
keyid:20:2F:A7:CA:4F:B6:8A:7F:04:4D:BC:88:81:14:84:C0:65:33:4A:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/202FA7CA4FB68A7F044DBC88811484C065334A74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/202FA7CA4FB68A7F044DBC88811484C065334A74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z2nosUQPbtmBJxWGxFEf1J33ZxU6YjNScsNdP1uPiee/0/323830313a38303a313465303a3a2f34332d3433203d3e203131303937.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:14e0::/43
Signature Algorithm: sha256WithRSAEncryption
63:9c:42:90:de:f7:e7:5a:fd:5c:8d:a9:69:31:43:77:04:a1:
c2:76:84:35:f2:12:97:79:77:65:57:11:86:43:34:2e:94:84:
4a:93:e8:07:54:11:19:39:c9:8a:85:eb:42:85:df:e5:16:2e:
b7:c2:14:ee:c0:b7:bf:b4:57:0e:f8:90:82:e3:c7:b8:45:5e:
b0:5d:80:63:e3:df:18:7b:cf:91:6a:35:0e:79:16:82:c2:54:
25:b8:f2:1e:8f:b4:97:60:66:cd:17:60:c6:a7:92:5c:7d:02:
5b:b7:6c:21:ca:04:64:46:5e:e4:11:08:76:e0:ff:ce:e7:71:
ca:93:62:b4:e1:d5:4b:94:09:e7:fd:ff:50:47:16:db:e8:c9:
32:5b:a1:87:ec:2e:01:43:24:73:dd:73:c7:97:6f:11:2e:c8:
29:09:c9:1b:83:e5:cd:4c:a7:8e:2d:01:3a:36:38:2c:00:80:
3a:b2:d6:6d:a7:ba:a7:9c:1f:b2:70:56:11:7e:99:ee:46:90:
83:a9:e7:34:b8:d2:51:f6:60:26:ff:fb:51:cb:95:50:df:49:
fc:3f:1e:b1:e7:3e:93:47:85:7e:ef:45:cf:b0:23:e4:1c:30:
8d:bd:8f:58:9d:d2:64:99:f2:0f:ed:15:6a:b3:fb:a2:57:4a:
bb:83:59:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 10:26:11 2025 by rpki-client