Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa
File: 323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier: rouJnIWoIFYaP7KwULszsMkxxfCXvzh00FR5d7b8ZrU=
Subject key identifier: C3:EA:8A:D3:BC:F0:AC:D7:02:8C:14:CD:E5:2E:06:A0:E5:CA:70:77
Certificate issuer: /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial: 7543F690A3BE0ECE9B664CDC414649459FCDA77F
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa
Signing time: Fri 31 Jan 2025 12:34:33 +0000
ROA not before: Fri 31 Jan 2025 12:29:33 +0000
ROA not after: Fri 30 Jan 2026 12:34:33 +0000
asID: 272182
IP address blocks: 2804:8330:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:43:f6:90:a3:be:0e:ce:9b:66:4c:dc:41:46:49:45:9f:cd:a7:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Validity
Not Before: Jan 31 12:29:33 2025 GMT
Not After : Jan 30 12:34:33 2026 GMT
Subject: CN=C3EA8AD3BCF0ACD7028C14CDE52E06A0E5CA7077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:69:a8:d7:ab:3e:ea:b3:ea:82:84:fb:62:12:
51:c0:71:ee:78:20:29:d7:93:6a:49:72:e6:f6:48:
99:13:d0:13:02:77:e0:60:f6:0c:82:45:5e:85:2d:
f9:f1:c3:c6:0d:88:9a:6e:32:b6:72:78:dd:52:3f:
13:52:7d:07:b0:7e:7b:e7:a0:4a:0d:4b:a0:24:0b:
3c:f7:c0:27:c4:65:6a:7f:0e:8e:1f:2d:9d:41:be:
39:e0:5e:44:1e:86:c2:45:cf:0c:33:f4:d1:c4:83:
74:41:7d:ec:e3:7e:c6:22:e6:c5:b1:83:15:16:84:
07:34:47:ce:ac:a5:7c:bf:d0:3d:da:c5:4d:61:e2:
55:29:f1:93:2a:31:19:b0:ad:b8:d5:18:57:8b:ef:
02:cd:ec:1f:b9:ba:c1:42:0a:0e:da:ae:7b:a8:4f:
a6:08:41:45:bc:f9:c8:60:2e:e5:9d:48:48:1b:d3:
e4:2d:0f:66:af:6a:66:50:00:19:cf:a8:eb:7d:2d:
42:fc:56:81:c6:d1:e6:78:32:6d:94:66:0c:e1:c0:
0c:c6:01:26:c4:81:38:02:e5:14:9e:cb:82:62:87:
24:03:16:99:5a:85:e2:77:82:14:08:d8:d6:dc:b3:
27:2a:7b:f0:db:5b:c3:78:1b:63:59:b1:13:1a:d1:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EA:8A:D3:BC:F0:AC:D7:02:8C:14:CD:E5:2E:06:A0:E5:CA:70:77
X509v3 Authority Key Identifier:
keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a343030303a3a2f33342d3334203d3e20323732313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8330:4000::/34
Signature Algorithm: sha256WithRSAEncryption
ab:00:f6:c1:98:ff:ac:46:7d:10:31:c1:b0:57:6d:14:57:65:
cd:69:05:9d:e3:86:a3:07:b2:ba:f1:d8:fa:27:30:94:6b:01:
b8:d6:d9:dc:65:78:69:ab:2c:91:40:9e:84:1e:2b:1a:28:48:
14:68:ec:9a:cb:a2:86:ec:68:18:22:55:91:b8:65:9c:6f:d5:
24:04:62:00:2b:6d:5b:05:30:5b:87:fe:1c:00:cd:86:7a:a9:
8f:85:08:61:c5:7e:38:6c:38:dd:50:8f:b1:1b:af:9d:94:56:
30:a0:94:b3:cd:5b:d6:9f:97:a8:25:26:45:74:cc:ea:67:c4:
0f:a8:99:a4:65:a6:25:4c:25:66:10:46:46:60:0f:a0:e9:1a:
29:31:9f:ff:76:cf:c1:81:5c:3d:ec:3c:ec:dc:70:ba:a1:b8:
0b:45:eb:33:0f:93:c8:aa:0b:0e:0a:c0:84:34:da:ab:5c:e2:
c3:8c:08:4e:b8:65:30:21:bf:cc:6f:eb:54:97:85:78:6b:1f:
7f:65:da:37:d5:06:52:55:28:3c:88:10:1b:a0:20:cb:b1:f1:
f7:63:ba:11:16:99:75:c8:dd:e0:92:25:b0:db:06:be:3e:29:
ee:d6:e5:c3:7f:93:15:9b:65:3c:f9:c9:35:81:7e:f3:3a:cd:
de:91:7b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:53:16 2025 by rpki-client