Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
File: 323830343a366665303a3a2f33322d3336203d3e20323730363930.roa (raw, json)
Hash identifier: Xm2omUGPzMRpzIvaEMWinbCpF0ZespD6Dt+XvEcqxbg=
Subject key identifier: CB:8F:B7:03:E2:3F:51:F3:CB:A8:DF:75:38:59:D0:E1:AF:BC:08:9F
Certificate issuer: /CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Certificate serial: 67228F6C50BF9E71BA9F0BAD099D935F63171B15
Authority key identifier: 29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
Signing time: Wed 03 Apr 2024 18:38:14 +0000
ROA not before: Wed 03 Apr 2024 18:33:14 +0000
ROA not after: Wed 02 Apr 2025 18:38:14 +0000
asID: 270690
IP address blocks: 2804:6fe0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:22:8f:6c:50:bf:9e:71:ba:9f:0b:ad:09:9d:93:5f:63:17:1b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296B5A42104756A14E2651E7EAC81D02EA0F7531
Validity
Not Before: Apr 3 18:33:14 2024 GMT
Not After : Apr 2 18:38:14 2025 GMT
Subject: CN=CB8FB703E23F51F3CBA8DF753859D0E1AFBC089F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:08:29:a3:6c:09:aa:97:46:d6:9f:8c:82:58:
97:6b:05:87:4f:2e:c7:94:d4:3c:85:c9:e8:9e:0f:
8c:9d:9a:cd:d7:70:b6:7f:8b:59:78:f1:2d:c4:c5:
35:4f:c1:84:54:f9:84:3e:d4:a5:4a:71:e9:d3:b2:
86:fa:1e:3f:d5:a4:90:c9:a1:80:75:22:b8:64:c8:
98:19:8c:6a:70:c1:ff:ac:c4:41:77:c1:71:16:9d:
85:75:40:66:1e:45:80:00:3e:5d:8d:ca:68:32:67:
82:37:46:10:eb:27:0f:25:e1:3b:04:b5:02:34:d7:
2e:fb:22:bf:47:f4:4b:ef:66:0f:89:08:c5:05:6d:
e0:0e:64:0b:36:34:2a:f7:99:d5:f9:a2:3e:24:c4:
b2:5d:10:a6:f1:d4:4b:b1:29:3f:30:cb:3b:85:c4:
79:1c:2b:b0:90:63:0a:42:9f:ab:5a:4a:9b:ba:70:
06:fb:10:12:7a:0c:6b:bc:ea:d4:93:69:33:49:5f:
53:1e:35:a5:7a:4a:00:6c:24:d2:a3:1a:db:b3:0e:
db:76:9c:12:4a:d6:d0:c3:89:d8:a2:22:ed:70:c8:
7f:3e:39:f4:08:e6:09:13:d5:32:cc:80:f9:7f:cd:
f4:b4:62:b4:ab:af:42:ca:ce:9b:75:9b:e3:42:08:
ce:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:B7:03:E2:3F:51:F3:CB:A8:DF:75:38:59:D0:E1:AF:BC:08:9F
X509v3 Authority Key Identifier:
keyid:29:6B:5A:42:10:47:56:A1:4E:26:51:E7:EA:C8:1D:02:EA:0F:75:31
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/296B5A42104756A14E2651E7EAC81D02EA0F7531.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Ej7a3Nm1RhSVJP2sg3tFaJhMxFNnWagr78T1mpuuC2Hc/1/323830343a366665303a3a2f33322d3336203d3e20323730363930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6fe0::/32
Signature Algorithm: sha256WithRSAEncryption
94:74:d5:36:95:1e:6e:11:9c:35:da:87:d5:b0:f9:7d:01:6c:
88:37:11:e0:b3:c7:f2:51:b8:98:4e:96:d2:c7:9b:5d:a3:3d:
f6:c6:55:c5:47:56:ca:99:38:08:74:3c:9d:3e:df:56:66:62:
7a:9d:43:b0:73:79:ba:26:6d:96:01:b2:c3:c2:53:89:35:6d:
aa:6b:60:f3:d4:12:65:1e:4c:45:cb:39:cc:07:be:49:71:68:
97:ff:4f:56:cf:27:34:be:6b:7d:7b:6b:71:58:c2:80:5c:70:
59:f8:d1:c4:9c:3d:ee:88:ce:67:e8:a4:8d:e8:b6:db:7b:6b:
80:13:a1:9a:75:dc:e1:d0:08:8c:26:df:9c:81:23:29:cc:9e:
e8:47:e0:6b:b2:3c:a2:a1:37:3a:f1:c0:e9:31:f7:9c:a9:80:
c2:0c:c8:e7:9f:d1:1d:5c:70:97:db:0d:73:f1:d2:7a:38:9b:
18:92:40:0c:01:e4:19:d4:03:7f:6a:bd:a4:83:36:66:c0:85:
0a:fa:d1:fa:6a:41:da:d2:7e:7b:68:61:c7:8d:24:28:a0:4f:
7c:27:8d:3f:0e:ab:19:c4:ac:88:c9:e8:67:19:9a:29:1d:ef:
d2:d5:28:b3:1b:7b:14:e4:cb:9a:f2:b6:c6:c0:9b:f7:b2:28:
64:15:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:25:38 2025 by rpki-client