Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
File: 323830343a343934343a3a2f33322d3336203d3e20323637313734.roa (raw, json)
Hash identifier: 2+CyEwEwI6Y4MD2mIo1LTA8DNvss+3doYn4uufN0Fgg=
Subject key identifier: 94:C9:5D:EB:E9:4C:0F:42:CD:6B:B6:1B:D3:77:88:51:F4:F5:FB:CA
Certificate issuer: /CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Certificate serial: 72AEF88D241D0C5817093A544B41A2DD10C0C3C8
Authority key identifier: 3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
Signing time: Thu 04 Apr 2024 08:59:11 +0000
ROA not before: Thu 04 Apr 2024 08:54:11 +0000
ROA not after: Thu 03 Apr 2025 08:59:11 +0000
asID: 267174
IP address blocks: 2804:4944::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ae:f8:8d:24:1d:0c:58:17:09:3a:54:4b:41:a2:dd:10:c0:c3:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156
Validity
Not Before: Apr 4 08:54:11 2024 GMT
Not After : Apr 3 08:59:11 2025 GMT
Subject: CN=94C95DEBE94C0F42CD6BB61BD3778851F4F5FBCA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:06:e0:ca:68:71:ff:e7:eb:86:94:ab:5a:63:
ce:8b:44:9e:27:a9:30:c9:a8:38:bf:ab:ec:3b:99:
53:c7:bb:72:b9:63:8e:2b:75:9d:27:f5:da:64:8a:
aa:cd:cd:d3:98:89:72:ca:af:b9:1a:61:73:21:f0:
aa:cc:66:fc:4c:6b:2f:67:90:77:b9:cb:0b:ea:7e:
d9:53:78:70:8f:7e:e2:eb:b0:ab:15:70:44:73:06:
03:35:18:3e:77:59:d4:7e:d7:e0:94:64:e7:0f:97:
ea:08:aa:87:b1:b7:5d:93:5f:91:19:58:45:c5:b0:
49:03:32:13:ad:6a:a5:7c:b5:02:7b:ee:fe:1a:5c:
e3:4a:5f:64:c1:e3:7c:a8:05:ac:8e:69:74:54:11:
f0:b7:80:4f:23:ef:8e:e2:e7:d6:6d:98:5c:c3:4c:
0d:c2:b7:2c:76:04:1f:17:59:73:42:43:4e:96:ce:
80:6c:34:e8:c6:26:d9:48:d5:fc:ab:58:93:58:43:
c8:a3:5d:f5:ee:96:fc:94:1d:ef:d1:21:87:5f:37:
3b:14:56:22:cb:66:4f:ca:45:7b:0f:49:b3:83:00:
ba:51:ea:90:16:3d:e1:64:b1:2c:0b:37:9c:b2:02:
72:8a:44:3a:a4:30:d9:12:ec:1c:06:f1:36:4c:da:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:C9:5D:EB:E9:4C:0F:42:CD:6B:B6:1B:D3:77:88:51:F4:F5:FB:CA
X509v3 Authority Key Identifier:
keyid:3C:E2:7E:93:82:4D:1A:8C:BB:A8:C9:A4:EF:11:5E:F9:DC:A0:01:56
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3CE27E93824D1A8CBBA8C9A4EF115EF9DCA00156.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XJLBamvyshzYPgBEsywpRrG5FoEeZNmvgADc6ex88ne/1/323830343a343934343a3a2f33322d3336203d3e20323637313734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4944::/32
Signature Algorithm: sha256WithRSAEncryption
2a:0c:7a:e8:0f:ed:72:c0:e2:09:9b:02:eb:d1:6e:e3:41:f1:
b4:4e:bf:b5:4b:32:ea:9a:18:94:05:32:34:fc:cb:e1:0e:4c:
54:1a:2d:a2:4b:89:37:b9:79:28:e1:a5:2f:c9:40:37:5c:a8:
6a:9f:5a:14:24:fa:cc:c0:d2:64:87:9b:c9:23:b9:7d:a9:ed:
1d:4b:e9:1c:bf:a0:71:36:43:2d:1c:12:9b:18:98:22:ff:4b:
8e:ef:b3:1d:6b:1e:07:43:2c:09:c6:f3:76:a9:73:af:35:b1:
05:9b:80:d7:87:ad:4f:17:a3:a3:61:0f:08:1e:93:06:86:31:
e8:c1:a1:d2:b7:c1:b4:af:74:d6:71:7f:1b:05:d5:a6:f8:ff:
25:49:ae:f9:f7:4a:83:81:1e:73:6f:5e:d5:84:ac:be:aa:d2:
5b:0b:df:dc:5c:68:f3:20:45:b7:3b:b8:b9:5e:c8:c0:d9:2c:
3c:07:f9:55:c7:68:87:c8:78:30:34:d5:f8:65:db:a1:29:72:
d7:a4:3b:6c:7c:cf:74:f7:17:f2:ac:fa:70:d0:03:e7:01:3d:
ae:a0:b2:56:d1:4c:fb:ca:bd:97:80:4e:de:0d:18:e5:37:a1:
69:f1:c6:34:2e:1f:9e:31:e5:d0:3f:a2:1a:79:c4:52:fa:6e:
f8:8e:89:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:05:18 2025 by rpki-client