Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
File: 323830343a366532303a3a2f33322d3332203d3e20323730353737.roa (raw, json)
Hash identifier: PVq+hF7vsW69/LZUNpWq+A3qzKDzP7Q3cU3sANu0X9Q=
Subject key identifier: 0E:E2:CE:0D:0F:D7:D4:5D:1A:76:F2:CC:C9:41:E7:9C:67:84:C0:0E
Certificate issuer: /CN=24C0BF59215339684BA80028158EEDE0FD534D91
Certificate serial: 20B63CB1A0246C84A0B610CF6B5AEAF75CBCFD52
Authority key identifier: 24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
Signing time: Fri 31 Jan 2025 18:37:20 +0000
ROA not before: Fri 31 Jan 2025 18:32:20 +0000
ROA not after: Fri 30 Jan 2026 18:37:20 +0000
asID: 270577
IP address blocks: 2804:6e20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b6:3c:b1:a0:24:6c:84:a0:b6:10:cf:6b:5a:ea:f7:5c:bc:fd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24C0BF59215339684BA80028158EEDE0FD534D91
Validity
Not Before: Jan 31 18:32:20 2025 GMT
Not After : Jan 30 18:37:20 2026 GMT
Subject: CN=0EE2CE0D0FD7D45D1A76F2CCC941E79C6784C00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:25:01:d5:25:2a:fb:7b:af:b3:f7:1b:92:
b2:32:f7:2e:d7:ab:52:9d:05:ad:b9:8f:d2:8f:80:
ec:e9:27:80:d3:87:49:5c:61:ae:cb:0f:07:bb:f4:
c9:b0:36:60:07:92:e6:44:d4:d9:08:d1:d5:7e:06:
94:5e:0b:60:a9:5e:0f:5c:35:47:30:cd:8a:c5:96:
c0:4b:68:71:69:07:a0:97:ec:d3:33:34:78:9a:66:
c5:05:80:4a:a5:2a:5a:bd:ca:db:ba:6e:40:ec:3a:
6e:21:a1:01:c9:8f:86:7b:d5:a0:5f:d6:c0:5f:f5:
9f:64:24:5b:3c:fe:7d:b4:45:22:1d:7c:6b:0f:bb:
d0:5e:73:b0:13:e5:86:f2:b9:5b:47:8f:08:bb:db:
11:c1:09:e1:84:67:d9:87:eb:7b:4f:95:fc:fb:b0:
e1:b0:ce:e5:66:bc:5a:d1:fd:c3:e5:ff:47:7f:db:
ab:dc:5b:fc:71:7b:cc:a7:74:d6:c3:6c:5a:5b:e9:
d6:da:fc:2e:a8:66:10:1d:e2:b1:62:a4:0a:e4:26:
95:67:32:bb:d5:05:b9:ca:25:83:7e:dc:b2:51:76:
c4:a6:5a:74:f3:fd:2c:35:d0:01:77:02:2e:4e:34:
cf:26:b4:b7:d6:fe:66:2b:22:a4:05:db:ea:49:39:
e6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E2:CE:0D:0F:D7:D4:5D:1A:76:F2:CC:C9:41:E7:9C:67:84:C0:0E
X509v3 Authority Key Identifier:
keyid:24:C0:BF:59:21:53:39:68:4B:A8:00:28:15:8E:ED:E0:FD:53:4D:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/24C0BF59215339684BA80028158EEDE0FD534D91.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/24C0BF59215339684BA80028158EEDE0FD534D91.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GH4iq9yvgzz33hq1od6xMSpoxm9SxffuerNgL6KXvWs/0/323830343a366532303a3a2f33322d3332203d3e20323730353737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6e20::/32
Signature Algorithm: sha256WithRSAEncryption
05:c1:85:11:60:76:a7:56:8f:69:cc:10:97:8d:40:87:cf:c5:
f0:a0:33:02:01:3b:00:d6:4b:65:86:41:09:59:89:2f:c4:21:
91:4e:8c:c5:a9:1c:86:67:ea:70:70:96:02:c7:76:a0:9a:9d:
02:20:62:4d:46:7d:59:68:5b:21:c0:e7:8a:1a:b9:de:5b:33:
82:bf:a3:be:a2:13:17:d5:97:53:6c:09:e4:81:66:13:36:cc:
c0:38:46:32:cd:5b:6c:65:8b:81:9f:46:30:7c:6b:fa:82:2b:
9e:ea:98:cb:c2:b4:2f:2b:34:8e:ca:54:b9:67:95:ed:3f:9e:
d3:4e:67:31:dc:43:2a:7f:5e:54:2f:fd:9f:a9:8f:ce:92:e9:
ae:36:e5:78:91:00:dd:35:b8:f8:1a:92:b6:b5:c9:10:d1:2a:
0c:35:39:21:3e:06:fa:37:aa:cc:c0:65:d0:77:df:a3:00:aa:
70:6e:f1:b2:4c:d4:c8:ed:d7:a9:db:11:3e:0d:48:81:c9:11:
21:19:0d:ed:a9:82:ed:25:4a:b6:cf:db:9d:da:3c:cc:59:7b:
da:d9:9b:30:fc:41:3d:36:75:48:dd:82:64:35:fe:eb:22:d2:
67:f9:b7:02:31:b2:bf:20:4f:9d:43:a9:86:78:7a:e7:d8:12:
c2:44:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:41:51 2025 by rpki-client