Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
File: 323830343a333536633a3a2f33322d3332203d3e20323636323835.roa (raw, json)
Hash identifier: QZ+sQae2Cmtdq0s4aoEHcq2cIT9KrgVnuypkqDKkgGo=
Subject key identifier: 43:9E:09:04:50:44:51:4A:F4:14:62:6F:1A:31:9E:92:01:37:FE:DD
Certificate issuer: /CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Certificate serial: 54544776AE0D24877CFE907C25B340FD6942AACF
Authority key identifier: 4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
Signing time: Wed 04 Dec 2024 11:53:16 +0000
ROA not before: Wed 04 Dec 2024 11:48:16 +0000
ROA not after: Wed 03 Dec 2025 11:53:16 +0000
asID: 266285
IP address blocks: 2804:356c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:54:47:76:ae:0d:24:87:7c:fe:90:7c:25:b3:40:fd:69:42:aa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ECB9B0B1B0DFBCA0197481108B068FF845655C6
Validity
Not Before: Dec 4 11:48:16 2024 GMT
Not After : Dec 3 11:53:16 2025 GMT
Subject: CN=439E09045044514AF414626F1A319E920137FEDD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:4c:d1:99:5d:48:11:d9:38:23:0e:8c:60:
46:48:8e:37:7f:ac:9d:c4:e0:db:c2:d0:6a:c6:7e:
a0:51:e0:71:84:83:79:1e:35:05:d3:b5:74:5d:93:
20:a7:d1:16:40:f6:6a:8f:11:19:31:bd:04:aa:d2:
92:19:a0:13:83:e4:7f:92:b6:37:59:0f:fa:76:4d:
21:74:96:87:52:32:be:b4:07:7f:a9:af:79:33:3d:
9a:7f:d3:c0:9b:43:0e:66:ed:48:6e:ec:83:e8:af:
71:76:68:d9:12:57:7a:38:b1:1f:ad:50:52:2a:a2:
69:29:24:94:23:67:86:c6:98:17:30:fb:ed:65:11:
f6:d8:27:14:ae:40:52:58:f1:d7:63:28:8a:c1:9d:
9d:45:7f:f1:ae:68:27:87:d7:5e:df:69:9e:ad:c4:
76:f1:77:84:73:e5:f2:17:d8:bc:7e:ff:f0:6e:83:
a3:2f:48:72:17:ad:16:2c:fe:26:29:8c:ff:11:5d:
ef:54:a9:48:3f:17:00:7a:85:21:9c:6e:27:5f:5a:
37:c5:65:b5:7f:fe:16:4e:35:1a:ca:90:7c:78:f1:
47:97:92:9d:17:6c:59:28:65:26:92:d5:6b:60:5c:
cf:bd:39:83:4d:00:a9:13:fc:e8:76:4e:85:bd:79:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9E:09:04:50:44:51:4A:F4:14:62:6F:1A:31:9E:92:01:37:FE:DD
X509v3 Authority Key Identifier:
keyid:4E:CB:9B:0B:1B:0D:FB:CA:01:97:48:11:08:B0:68:FF:84:56:55:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4ECB9B0B1B0DFBCA0197481108B068FF845655C6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEFaM6Ts27ZAdJfrogPycr4TMGrSX8px4cHd3s6vaJUm/0/323830343a333536633a3a2f33322d3332203d3e20323636323835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:356c::/32
Signature Algorithm: sha256WithRSAEncryption
32:8b:cc:bf:8f:4d:25:a2:b5:65:9d:8c:7b:bb:88:7e:29:91:
cc:f1:ee:4e:4b:42:01:e3:91:ca:45:8a:6f:d0:37:0a:b3:92:
44:21:63:25:3d:55:e8:51:17:16:45:c6:92:5c:51:94:95:a2:
c5:e1:37:fd:fa:17:71:c2:38:c8:4d:74:9c:89:74:c3:a5:da:
fd:ff:f0:55:a2:1e:19:c0:88:5f:54:d0:b3:24:f1:5b:0c:ff:
1d:a7:42:bc:c7:6c:92:a2:24:f1:2c:af:c5:8a:d0:06:ab:74:
7b:e7:88:b0:23:9a:96:72:f7:01:25:0d:0e:99:71:9c:7d:de:
9d:27:d0:fd:0a:f3:77:a4:70:be:ee:7e:aa:4a:57:52:3c:c9:
03:66:6e:3c:aa:2d:02:4a:7e:ba:ed:a2:99:e3:b2:d2:04:51:
c3:47:14:c1:9b:ac:08:5d:1f:52:e0:98:7c:ae:26:b5:1c:8c:
72:66:db:29:2c:2e:7a:4e:cd:0d:37:02:b6:28:93:17:b2:d7:
ef:21:7f:36:b8:a4:5b:ea:eb:da:49:57:9e:84:75:5a:f4:c3:
73:d1:40:8e:bb:7a:c5:99:2c:09:b1:da:05:93:52:d1:2b:73:
9c:1b:b5:21:a2:6a:f3:50:19:4e:c9:46:14:38:10:44:8e:71:
b7:e6:5d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:56:51 2025 by rpki-client