Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
File: 323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa (raw, json)
Hash identifier: 4lO2vDlrOVzRwa/OBygdvzh7o+BNdDwW0yygTozBdEc=
Subject key identifier: DE:60:A3:57:4A:15:72:C5:94:88:25:48:D9:5A:91:5D:B7:48:F3:B9
Certificate issuer: /CN=40B70D15347B5919306775141D8E2EDACEC6B310
Certificate serial: 222C826A2BC19C95C57763AEB2B43ABCE4570151
Authority key identifier: 40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
Signing time: Tue 21 Jan 2025 20:44:00 +0000
ROA not before: Tue 21 Jan 2025 20:39:00 +0000
ROA not after: Tue 20 Jan 2026 20:44:00 +0000
asID: 271504
IP address blocks: 2804:7c90:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:2c:82:6a:2b:c1:9c:95:c5:77:63:ae:b2:b4:3a:bc:e4:57:01:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40B70D15347B5919306775141D8E2EDACEC6B310
Validity
Not Before: Jan 21 20:39:00 2025 GMT
Not After : Jan 20 20:44:00 2026 GMT
Subject: CN=DE60A3574A1572C594882548D95A915DB748F3B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:6f:64:e0:c4:85:c1:a9:25:49:7d:6b:5e:
e4:14:68:95:68:2a:ac:51:ba:c1:d8:18:af:db:a3:
9c:b2:b4:72:53:0a:28:f1:b3:33:b1:97:b7:ba:68:
9d:84:e8:32:e8:00:ed:b0:a1:af:5a:65:d2:ff:05:
4f:63:4b:be:51:01:93:eb:11:08:48:c6:d7:a7:ce:
06:d3:17:b7:e0:5a:d4:73:ff:7f:9d:48:7b:e5:3b:
13:e6:22:6e:02:98:7a:3d:1e:ff:f7:9c:a0:2a:16:
f1:7a:bf:d4:bf:18:cb:ce:5e:bd:97:1e:f7:64:cd:
7b:8a:18:7c:a6:9a:0d:7a:0f:42:e7:a3:fe:9b:3c:
82:16:a8:23:6b:d5:a9:d7:8f:31:77:92:20:bd:06:
87:79:06:34:fa:e3:40:87:3b:fa:fb:76:13:45:79:
88:96:7b:10:8e:01:7a:be:46:92:78:5d:e7:33:0b:
94:77:f5:43:d7:b2:6e:07:1a:8d:52:5d:09:b8:c4:
60:de:db:41:74:0b:a7:17:05:4e:33:57:1d:cf:73:
c5:fd:9d:30:af:08:10:ec:53:91:0e:a4:97:cd:51:
1b:6a:a9:8b:c1:24:6a:69:1b:cf:9a:d9:2d:fe:25:
96:f9:58:9f:04:b1:f4:0c:cf:9a:b7:aa:0e:d1:8f:
7d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:60:A3:57:4A:15:72:C5:94:88:25:48:D9:5A:91:5D:B7:48:F3:B9
X509v3 Authority Key Identifier:
keyid:40:B7:0D:15:34:7B:59:19:30:67:75:14:1D:8E:2E:DA:CE:C6:B3:10
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/40B70D15347B5919306775141D8E2EDACEC6B310.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/40B70D15347B5919306775141D8E2EDACEC6B310.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DWP6wz7xressoSBcgXKqmQoAWFf2fr8K6hSkf1QGvL9z/0/323830343a376339303a383030303a3a2f33332d3333203d3e20323731353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c90:8000::/33
Signature Algorithm: sha256WithRSAEncryption
1b:09:01:ff:f0:1b:17:ea:de:9a:b1:f1:23:eb:cf:66:1d:69:
82:1e:71:a9:61:fc:2e:7d:96:e7:fc:bd:f5:08:5b:de:f3:e9:
3d:c5:5b:b3:e1:7a:81:c0:07:9a:ef:0d:c1:f1:85:85:a6:7d:
77:64:bf:b7:8a:ff:c6:34:52:fd:f7:fb:60:33:4d:2d:bf:cc:
96:48:01:78:65:d8:da:53:c3:73:2a:01:ae:99:c4:95:c3:b9:
04:26:c9:56:c3:5c:bf:81:c5:45:db:7d:4e:ee:3a:bc:e5:8f:
8f:4e:c0:19:b7:11:24:cf:e0:57:3f:68:da:75:d0:bc:01:35:
77:39:79:e5:09:d5:a0:43:57:2e:21:bc:96:77:66:eb:9e:bd:
a2:f2:07:c2:55:42:0d:a7:79:5a:a1:bb:3d:bb:40:c2:f9:b2:
7a:ce:03:89:24:23:41:c4:57:bc:90:68:f1:2a:f3:c0:10:5a:
25:24:02:8e:52:99:58:0b:b6:f6:18:d1:e9:f8:7c:7b:17:d8:
ae:07:fb:ab:cb:f1:c8:10:72:31:cd:0c:d5:39:ba:b5:d1:67:
97:f7:70:77:39:dd:ab:f0:0a:46:69:04:19:fa:72:09:20:9d:
c4:45:02:51:37:16:06:3d:97:22:e4:b3:b6:11:c4:84:60:d1:
35:e5:2c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 07:53:09 2025 by rpki-client