Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa
File: 323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa (raw, json)
Hash identifier: oJN1Mm0+oVZUvetgFQB7RM79SeEDZgUk1cdKVVd5CIc=
Subject key identifier: CD:70:46:CC:62:89:36:BB:4F:C2:08:2D:B1:5D:DF:EA:C7:8F:55:3C
Certificate issuer: /CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Certificate serial: 1C4C0E28FA1AEED8D9FFC2A8BDBF2047E3E1B7B2
Authority key identifier: 32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa
Signing time: Fri 31 Jan 2025 12:34:34 +0000
ROA not before: Fri 31 Jan 2025 12:29:34 +0000
ROA not after: Fri 30 Jan 2026 12:34:34 +0000
asID: 272182
IP address blocks: 2804:8330:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:4c:0e:28:fa:1a:ee:d8:d9:ff:c2:a8:bd:bf:20:47:e3:e1:b7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32BB5184133F0AD568627FCE8DA6B0354DCE9BEC
Validity
Not Before: Jan 31 12:29:34 2025 GMT
Not After : Jan 30 12:34:34 2026 GMT
Subject: CN=CD7046CC628936BB4FC2082DB15DDFEAC78F553C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:01:1d:01:3c:3b:f0:2b:f8:a4:53:54:3b:
a4:c7:6d:f0:5c:10:da:81:f0:b2:9b:be:e2:41:e4:
61:63:b7:b9:fc:f4:0d:1f:45:a9:a1:38:36:0d:69:
20:b7:31:c7:c2:e4:53:f0:f3:15:45:71:56:6b:82:
b0:f8:88:cb:b9:78:9f:7d:b9:1b:49:80:e5:2f:50:
62:6b:65:63:6b:6f:f8:45:c6:19:cb:24:31:03:8f:
c7:84:58:c6:2e:f0:b7:bb:cb:08:c9:f7:4b:45:52:
5d:f2:d4:27:20:69:77:c3:1b:82:aa:f5:93:fb:59:
ef:5d:a8:90:02:f1:32:77:1b:66:86:66:01:ee:6b:
46:d3:11:d3:48:11:01:1f:86:24:0a:49:89:f1:08:
b4:7d:95:d4:6e:91:14:8d:07:37:ac:3a:76:1a:76:
ba:35:17:8a:37:fb:cf:e7:b8:fe:e1:41:3c:ff:ca:
4b:97:63:b5:ef:68:9e:4a:6f:6c:56:11:6c:81:7e:
12:74:fd:89:9e:65:01:20:14:1f:29:b5:e0:a1:06:
89:3f:1c:28:24:0f:1f:48:66:c9:22:fa:36:ee:27:
48:e4:5c:7c:87:d5:4d:87:09:37:92:11:a1:a2:39:
dc:2a:8a:bb:b2:5b:9d:ea:64:d0:18:e0:d3:32:9c:
ca:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:46:CC:62:89:36:BB:4F:C2:08:2D:B1:5D:DF:EA:C7:8F:55:3C
X509v3 Authority Key Identifier:
keyid:32:BB:51:84:13:3F:0A:D5:68:62:7F:CE:8D:A6:B0:35:4D:CE:9B:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32BB5184133F0AD568627FCE8DA6B0354DCE9BEC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TzdGKUSZ9vBvKXvJ51gxVr9cWPGMAPKXF3HabockFPg/0/323830343a383333303a633030303a3a2f33342d3334203d3e20323732313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8330:c000::/34
Signature Algorithm: sha256WithRSAEncryption
77:65:f9:37:fe:88:8f:54:09:56:25:00:f5:07:92:c6:fa:e2:
e1:cf:56:24:b0:09:9f:6f:97:39:d9:09:0d:e0:7a:fe:2e:4e:
5d:23:ca:8b:75:50:78:15:80:21:6e:32:6e:7e:a3:93:c8:2e:
67:80:66:c5:d0:3a:14:55:37:94:1a:93:df:a5:ef:7a:7e:eb:
15:e1:66:f8:6e:ea:01:c8:06:01:82:13:22:12:86:e7:d4:80:
0c:ac:57:14:59:f4:3d:7f:53:9b:a3:fd:c2:d2:50:9c:10:5e:
b6:9c:7f:e8:5c:f8:d3:84:69:12:b2:e4:ab:ac:2f:65:f7:ec:
31:32:46:5a:0f:26:37:91:78:03:e2:3c:af:ec:e3:9b:ad:ea:
4f:56:31:8b:5f:4c:08:cb:eb:b2:ce:19:2d:90:e8:bc:52:5f:
fc:e7:7b:a6:c4:90:e5:b7:49:c8:be:9d:52:49:e1:c6:9c:61:
76:a2:9f:7a:db:2d:d2:70:88:6f:94:88:8e:f5:75:43:e7:8f:
cf:2c:0e:32:09:5e:6a:72:d5:37:7d:ae:ec:19:d8:8d:4a:2d:
02:2e:8f:07:2d:f7:bd:76:12:65:0f:43:75:30:9b:59:13:74:
a9:29:56:03:a8:18:96:3a:ad:f5:74:0c:8f:47:56:53:c7:0f:
97:97:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:30 2025 by rpki-client