Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
File: 323830343a313361383a3a2f33322d313238203d3e20323633353434.roa (raw, json)
Hash identifier: LGiGzXUka9SxygY5Ls1v+iaiwfJya5owIHQuUCWlKZU=
Subject key identifier: A7:C7:42:96:D6:E9:48:3D:D5:E3:FB:45:07:08:18:B0:DC:E7:E8:19
Certificate issuer: /CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Certificate serial: 0231211A4724BC760C09949EB43A55AA0FE97C07
Authority key identifier: 8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
Signing time: Sat 14 Dec 2024 12:13:17 +0000
ROA not before: Sat 14 Dec 2024 12:08:17 +0000
ROA not after: Sat 13 Dec 2025 12:13:17 +0000
asID: 263544
IP address blocks: 2804:13a8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:31:21:1a:47:24:bc:76:0c:09:94:9e:b4:3a:55:aa:0f:e9:7c:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BD6A70FA78C09BB2792766E310F7002F0203A65
Validity
Not Before: Dec 14 12:08:17 2024 GMT
Not After : Dec 13 12:13:17 2025 GMT
Subject: CN=A7C74296D6E9483DD5E3FB45070818B0DCE7E819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9f:45:d1:97:ea:37:7c:d4:46:bd:1d:f2:b4:
40:16:5b:94:b9:94:3e:5d:3a:ef:94:38:d7:67:4f:
9e:6f:a3:bb:f3:93:5d:67:5b:2b:b8:b8:4b:62:5a:
37:83:88:a0:53:2a:1a:cd:5f:59:80:16:b0:bd:2e:
62:3d:ef:ec:2b:cc:98:67:08:b1:f7:c1:de:f6:2f:
10:21:2e:7a:ad:3f:ae:80:6a:1d:50:89:a5:5f:44:
c8:9a:28:4a:a5:bc:2c:f8:e9:61:a2:bc:b9:5f:70:
ec:bd:dd:57:a5:d8:c7:55:f5:30:99:89:f0:a0:5a:
1f:63:35:7f:54:02:0b:f6:ae:33:64:e1:a6:2b:dd:
d5:d5:8c:a2:6e:1f:ec:91:c4:13:60:d0:28:09:b8:
56:0d:91:68:77:2c:8d:8e:fd:bb:36:15:e0:21:57:
87:a0:f8:73:22:95:8f:f4:05:97:bb:d1:c4:ff:31:
2f:3b:5d:04:7d:e3:f5:89:65:3d:21:08:9f:29:3d:
78:1a:4b:3f:c8:31:e5:0d:9a:9c:50:e2:51:4e:61:
0a:46:61:12:64:fe:38:fd:14:65:d6:07:24:0a:69:
a8:de:3b:73:19:dc:1e:83:7b:77:67:66:8a:ad:43:
d3:aa:46:5d:c4:bd:12:27:d8:7b:88:f4:12:2a:cc:
a2:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:C7:42:96:D6:E9:48:3D:D5:E3:FB:45:07:08:18:B0:DC:E7:E8:19
X509v3 Authority Key Identifier:
keyid:8B:D6:A7:0F:A7:8C:09:BB:27:92:76:6E:31:0F:70:02:F0:20:3A:65
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/8BD6A70FA78C09BB2792766E310F7002F0203A65.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD6A70FA78C09BB2792766E310F7002F0203A65.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AFqhP3zRz2xR69YHoMrtYnWs15vs6eX3LFkDy25RGWx/0/323830343a313361383a3a2f33322d313238203d3e20323633353434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:13a8::/32
Signature Algorithm: sha256WithRSAEncryption
6b:f2:70:49:bb:19:95:88:50:22:24:74:50:33:3b:0f:94:38:
26:0f:e9:d8:71:16:73:bd:bd:ce:cb:54:a1:89:c1:c2:81:1d:
2d:d7:a1:b1:50:28:99:16:09:57:0d:5f:9b:22:36:77:b2:24:
0b:ee:84:1f:4c:7e:1b:ed:5e:da:c8:ec:6e:28:81:0d:f8:ca:
43:8a:0f:5f:a0:b9:9c:d3:76:6c:11:ac:a0:40:c7:94:c9:98:
1e:11:af:48:f6:95:95:03:b7:2c:5d:71:e0:62:58:14:2e:d8:
d4:45:e9:57:b8:92:33:0d:58:c5:a7:56:57:fa:74:7e:04:37:
e2:e9:45:ac:73:32:08:9c:33:32:28:8d:af:13:a5:e6:1d:55:
61:3d:66:f2:2f:33:da:fe:87:09:4f:a5:ee:1d:37:2d:94:b8:
fd:14:be:43:f8:c5:de:db:b0:d0:24:6b:96:71:ca:0e:2e:9a:
ed:63:5d:66:67:3e:37:29:d8:40:8c:84:85:6c:5c:7f:95:27:
4f:a0:4c:30:a0:e6:f9:96:d2:c7:08:4f:bf:9a:4b:7c:93:40:
44:05:2f:22:4f:53:94:3b:45:bd:5f:fb:c8:c5:b0:99:bb:d6:
e6:2f:f9:c1:8f:79:2a:f5:21:ee:d9:be:27:9d:5a:57:f0:a8:
ba:e4:2a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:59:36 2025 by rpki-client