Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
File: 323830343a333665383a3a2f33322d313238203d3e203532393234.roa (raw, json)
Hash identifier: sA5gjL1c1K6kOh4AIhoDEP5hGYvi8RisrOq6fwrgnVc=
Subject key identifier: 29:3D:1B:34:E4:5A:3B:17:39:0A:A5:B4:4A:42:5C:AF:14:64:8B:8D
Certificate issuer: /CN=88F45CA9F42577057740B3862841E292FEE58105
Certificate serial: 6BEBFC4D1C27637E12C81A4F4B3C3DC6C157F1E2
Authority key identifier: 88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
Signing time: Sat 09 Nov 2024 13:58:33 +0000
ROA not before: Sat 09 Nov 2024 13:53:33 +0000
ROA not after: Sat 08 Nov 2025 13:58:33 +0000
asID: 52924
IP address blocks: 2804:36e8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:eb:fc:4d:1c:27:63:7e:12:c8:1a:4f:4b:3c:3d:c6:c1:57:f1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88F45CA9F42577057740B3862841E292FEE58105
Validity
Not Before: Nov 9 13:53:33 2024 GMT
Not After : Nov 8 13:58:33 2025 GMT
Subject: CN=293D1B34E45A3B17390AA5B44A425CAF14648B8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4c:d6:6d:85:bd:2a:05:11:06:92:c9:a3:80:
d6:be:c6:34:6d:96:71:f2:80:d0:cb:a3:18:fe:7f:
d9:a6:34:6b:b3:40:36:18:71:57:eb:8e:c6:7d:0b:
13:47:f0:be:2f:66:78:d4:e9:69:cc:ff:72:9d:52:
61:6c:6f:fc:96:93:41:13:df:c4:b9:f2:51:31:06:
83:7e:96:55:e2:19:e5:70:02:9b:18:1c:98:85:3f:
ea:15:c3:ae:d1:a3:a5:63:d5:94:09:90:68:b7:84:
32:23:63:bb:f2:64:0f:ba:5b:0e:18:53:32:f9:e3:
18:0d:54:93:4b:46:68:8f:95:66:cb:91:c3:1a:ec:
96:92:4d:70:cd:b3:c3:1c:e0:63:07:a4:3b:1b:3e:
41:4c:32:92:1c:a3:33:e6:98:a9:88:a7:2b:a4:e2:
11:ff:b5:96:3b:e2:e8:28:7c:71:bd:d8:4f:30:7b:
1b:7e:9b:35:13:ea:7e:b7:73:6a:11:b8:f2:05:53:
0b:63:70:f5:2b:d3:7a:c6:09:59:5b:31:91:fd:f3:
9f:ce:a3:b0:72:e9:01:d1:46:25:e5:82:af:cf:cd:
a3:06:0c:9a:fa:d9:fb:80:97:0d:bb:92:f0:58:f0:
55:2f:5c:81:27:79:b7:e7:34:f8:5a:4b:66:01:c0:
e4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3D:1B:34:E4:5A:3B:17:39:0A:A5:B4:4A:42:5C:AF:14:64:8B:8D
X509v3 Authority Key Identifier:
keyid:88:F4:5C:A9:F4:25:77:05:77:40:B3:86:28:41:E2:92:FE:E5:81:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/88F45CA9F42577057740B3862841E292FEE58105.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/88F45CA9F42577057740B3862841E292FEE58105.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D2srcrSJbVnhuLhYhBs3rpRTCq7mZyurXFmHWninBGMF/0/323830343a333665383a3a2f33322d313238203d3e203532393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:36e8::/32
Signature Algorithm: sha256WithRSAEncryption
ca:20:1a:85:a8:3b:a1:2a:e5:ca:41:94:a8:9a:8e:8d:92:34:
22:aa:03:f1:a4:a1:c0:e1:1b:14:6e:ac:25:c2:fe:17:1b:70:
c5:7c:f7:01:55:4d:e4:46:c8:ed:7c:71:df:23:42:9d:e6:1b:
ab:e8:3b:4e:93:6a:38:fe:aa:b5:d1:bc:e7:4d:98:d6:aa:bc:
76:59:11:85:ad:15:cb:7a:ed:54:a8:2d:84:00:fb:0c:e3:87:
44:15:b3:5e:39:b2:28:2b:b9:79:e6:f0:53:ae:62:a4:a6:76:
01:3e:0f:02:92:7a:7b:6d:05:13:83:03:c8:06:af:88:cc:35:
0a:b5:50:ca:05:c5:be:2b:d3:d5:26:7e:07:e7:d4:81:8c:00:
3e:81:f4:95:ed:db:f3:c9:76:8b:9e:67:69:da:7c:fe:b2:00:
12:26:87:af:c2:50:6d:1f:67:ed:a5:9d:0f:bb:2f:80:c1:eb:
1c:c8:66:ec:81:d9:5a:7c:9f:79:62:40:e7:7b:82:1a:5f:6a:
d2:4f:20:9b:e1:26:af:dc:31:68:17:41:e7:5c:fc:16:1e:47:
c5:cb:0b:21:93:4c:e8:81:e5:7d:d6:92:2a:1c:eb:2c:e2:d1:
2c:71:ad:91:22:4c:d2:7c:58:dd:f2:6e:c4:fb:88:1b:8f:17:
a8:28:c0:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:07:27 2025 by rpki-client