Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
File: 323830343a383333303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier: OKBGqrUMOXnEbxRXfJOKCpZwVNDbPaV3RhaqWhTf/JA=
Subject key identifier: D3:3D:D7:A3:44:82:98:9A:91:89:F7:98:76:A4:A2:DF:2A:78:8B:8C
Certificate issuer: /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial: 0EF444F9C2F39FE5E0DB4CA0D8C5135B36F22AB4
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
Signing time: Fri 31 Jan 2025 12:34:34 +0000
ROA not before: Fri 31 Jan 2025 12:29:34 +0000
ROA not after: Fri 30 Jan 2026 12:34:34 +0000
asID: 272182
IP address blocks: 2804:8330::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:f4:44:f9:c2:f3:9f:e5:e0:db:4c:a0:d8:c5:13:5b:36:f2:2a:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Validity
Not Before: Jan 31 12:29:34 2025 GMT
Not After : Jan 30 12:34:34 2026 GMT
Subject: CN=D33DD7A34482989A9189F79876A4A2DF2A788B8C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:76:ab:e4:fc:b1:e2:d6:6d:8b:c5:e0:39:45:
9a:71:2e:30:d9:7e:ff:27:69:3c:28:dd:16:a4:61:
9c:7b:9a:86:c6:49:3b:d2:1b:4c:2a:a5:9f:3c:31:
56:69:bd:6c:2e:33:52:a3:f4:17:01:52:52:d5:2e:
20:54:d8:52:c7:15:0c:7a:95:3c:68:ae:c6:32:55:
01:87:f1:70:57:de:73:e7:eb:c8:a7:1f:5f:c5:2c:
00:70:54:f2:95:93:d0:88:f2:dc:da:6b:fb:9d:f5:
e0:9b:47:ef:17:00:d7:2e:a9:15:ac:89:80:38:a8:
28:d7:cb:4e:7b:a1:81:a4:bf:6b:b8:6a:6d:fe:bb:
68:82:56:06:79:63:f7:d0:ee:1e:b5:0f:70:2b:87:
26:08:81:fc:41:ac:65:85:89:03:32:94:90:69:a6:
3b:7b:ab:b1:ef:38:ef:9d:88:9c:29:71:c1:f7:32:
36:20:d6:26:19:92:ce:7e:15:21:82:2f:c9:a9:c0:
ed:cd:ad:fa:db:91:00:87:aa:5d:db:5e:42:10:f1:
8f:2a:8d:15:22:53:80:af:a6:c6:20:55:f4:78:d0:
d6:50:5b:64:d6:ca:38:aa:89:68:55:52:80:99:1d:
02:72:f8:bd:1b:3a:4f:08:5a:f3:99:98:22:6e:17:
b9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:3D:D7:A3:44:82:98:9A:91:89:F7:98:76:A4:A2:DF:2A:78:8B:8C
X509v3 Authority Key Identifier:
keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a3a2f33342d3334203d3e20323732313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8330::/34
Signature Algorithm: sha256WithRSAEncryption
68:13:69:2e:e6:e0:2a:88:c4:4c:02:ae:ed:fc:af:1b:3e:52:
a4:99:e9:fa:fd:96:6d:da:6d:31:69:52:53:b0:07:19:fa:7e:
a1:28:57:84:83:7f:c1:57:2c:82:b0:f7:f0:1b:c7:f7:ba:0f:
8a:95:9a:3d:ba:04:11:9b:cb:c5:91:c8:9a:77:a5:33:fe:3d:
14:54:6d:56:74:a6:78:5c:74:5a:3a:e5:26:15:5d:f9:af:9d:
90:ea:8f:8c:61:f1:28:ab:b7:98:4b:ec:27:94:79:47:0c:75:
80:98:3a:85:47:97:9a:ee:50:34:16:f1:de:d8:5e:ec:57:f6:
bb:8a:25:40:4c:59:31:42:04:57:86:6b:61:31:08:31:f0:77:
17:c6:51:ec:b4:b1:ad:0a:18:c0:59:71:1b:38:46:80:31:b2:
9f:20:d2:7a:20:88:d8:2e:c9:c2:ba:14:0e:0b:34:7c:ff:70:
30:b9:d0:1a:0f:0f:06:67:7f:51:16:66:06:d9:3a:ce:2d:ee:
30:e2:5e:f0:27:89:62:d5:c2:2e:3e:ae:75:20:f8:70:90:8e:
13:d9:1f:8e:87:6f:79:9e:d1:6c:42:0c:03:04:ca:7f:18:5e:
a3:84:3c:2c:ab:68:73:93:09:a9:02:a2:67:47:c7:ff:af:56:
df:e7:dc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:45:31 2025 by rpki-client