Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a613030303a3a2f33362d3336203d3e20323731323930.roa
File: 323830343a373933303a613030303a3a2f33362d3336203d3e20323731323930.roa (raw, json)
Hash identifier: 3xOgoQezyRYos4YHPh2rjAWgLb3E0CMMGqVZxwdGEz4=
Subject key identifier: 32:9B:10:CB:7A:20:E2:8E:A5:92:7C:4D:66:2A:C2:B6:97:61:92:2E
Certificate issuer: /CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Certificate serial: 211C28E0A09C3B4B37025723522C33AEBF5EBC55
Authority key identifier: 2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a613030303a3a2f33362d3336203d3e20323731323930.roa
Signing time: Thu 30 Jan 2025 21:06:20 +0000
ROA not before: Thu 30 Jan 2025 21:01:20 +0000
ROA not after: Thu 29 Jan 2026 21:06:20 +0000
asID: 271290
IP address blocks: 2804:7930:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:1c:28:e0:a0:9c:3b:4b:37:02:57:23:52:2c:33:ae:bf:5e:bc:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62
Validity
Not Before: Jan 30 21:01:20 2025 GMT
Not After : Jan 29 21:06:20 2026 GMT
Subject: CN=329B10CB7A20E28EA5927C4D662AC2B69761922E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:28:e5:a5:0c:e0:bb:e9:b5:b6:51:27:bb:
11:f9:69:b0:75:bf:0b:c0:4d:01:66:c9:3e:ab:77:
7a:bd:38:1e:8a:f4:09:4e:6e:8f:c5:64:36:b1:d6:
d5:53:95:b5:b9:8d:38:c9:92:52:0f:74:09:b3:a4:
06:b7:79:02:bf:7d:59:5f:57:47:ee:a4:7e:9c:55:
1e:d8:51:11:08:ac:55:f2:01:83:ed:16:5c:51:91:
0d:46:8d:3a:4e:5e:40:f7:51:9f:62:f8:cf:56:f1:
fb:7e:2f:d4:c2:a1:d2:d5:a0:fc:cb:53:2a:a7:a7:
ad:ea:b9:2a:68:6e:15:f3:59:0f:3e:2c:91:54:56:
46:89:ad:91:56:93:64:b5:1c:40:26:3d:59:1e:2d:
77:47:87:b6:84:4d:f3:0a:47:98:f9:6a:27:2f:8c:
fa:48:ed:f3:1a:30:f2:ea:e4:84:fc:e1:6b:31:b8:
63:81:6f:65:b6:f5:da:d9:83:31:38:d8:5f:e5:5c:
84:0f:4d:a1:f0:ff:ea:30:99:1d:6b:c6:92:4d:de:
b0:66:9d:7d:9b:64:3b:ec:3c:29:3c:e8:24:06:84:
6e:22:2a:82:87:e3:12:b0:85:82:27:8f:fa:e4:57:
20:64:02:14:bb:c5:e5:4c:df:75:c6:a8:d2:bd:e5:
f2:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9B:10:CB:7A:20:E2:8E:A5:92:7C:4D:66:2A:C2:B6:97:61:92:2E
X509v3 Authority Key Identifier:
keyid:2D:88:D2:4B:F4:0A:E9:E1:6A:0E:49:68:44:8E:C1:E1:F5:C8:7F:62
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2D88D24BF40AE9E16A0E4968448EC1E1F5C87F62.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CB7RZoa9CDV2sgTyt7cQ5zX5HN4EPpr5jjEqfaCiMdV7/0/323830343a373933303a613030303a3a2f33362d3336203d3e20323731323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7930:a000::/36
Signature Algorithm: sha256WithRSAEncryption
79:ec:6a:bd:9f:be:9d:27:40:c5:91:44:4d:98:92:c7:33:cc:
ea:88:47:2c:71:59:db:ce:68:3a:03:09:b2:68:f3:b3:c3:45:
f2:08:66:99:6b:bf:dc:7e:e0:eb:1c:78:dd:06:e5:b3:0e:5f:
c6:f8:a2:c3:51:35:a4:26:e7:96:59:c4:0b:bd:21:8a:37:cc:
d5:f3:2c:49:6d:63:c9:01:45:31:83:a4:52:dd:f9:3c:ba:cd:
7e:be:e1:63:ef:89:10:bd:5f:f3:2d:d7:91:2c:24:4b:af:8a:
82:f5:44:5f:c0:58:de:54:45:a0:37:d8:3b:dc:88:68:47:06:
bb:eb:34:8d:9e:86:3b:a4:c6:b1:d8:e2:2e:f6:39:41:33:a1:
dd:86:88:63:ae:c0:ee:55:c2:7e:34:9c:3a:39:64:d9:4f:2b:
31:f0:cf:32:78:a7:c6:35:de:e1:e6:2e:2b:35:da:6a:f8:2e:
25:ce:fe:84:76:24:4a:9a:a3:da:2c:3f:91:02:41:38:b6:15:
96:95:5f:7c:20:55:8a:dd:98:f0:20:39:08:d4:71:20:fc:39:
7c:35:0a:e1:2b:9a:4d:41:82:b4:b2:28:31:2a:61:0e:25:d9:
b3:38:f9:b3:6d:bb:67:0c:39:b2:47:80:9e:84:73:d7:33:71:
6b:e7:d7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:45:31 2025 by rpki-client