Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a3a2f33342d3334203d3e20323730353631.roa
File: 323830343a366465303a3a2f33342d3334203d3e20323730353631.roa (raw, json)
Hash identifier: OqmHU0CJ9eZF2zVN71C2hMWL48r1LqaXCljBcUn/1AA=
Subject key identifier: 97:41:89:4D:27:4E:67:1E:D3:7A:05:50:41:26:57:46:BC:64:46:1A
Certificate issuer: /CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Certificate serial: 0B4DA805E33C35A6D56306A6CF8EAD0F7489E675
Authority key identifier: D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a3a2f33342d3334203d3e20323730353631.roa
Signing time: Thu 12 Dec 2024 01:44:24 +0000
ROA not before: Thu 12 Dec 2024 01:39:24 +0000
ROA not after: Thu 11 Dec 2025 01:44:24 +0000
asID: 270561
IP address blocks: 2804:6de0::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:4d:a8:05:e3:3c:35:a6:d5:63:06:a6:cf:8e:ad:0f:74:89:e6:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D76AC9525C9299F8D9F26853A5246419EB9913D9
Validity
Not Before: Dec 12 01:39:24 2024 GMT
Not After : Dec 11 01:44:24 2025 GMT
Subject: CN=9741894D274E671ED37A055041265746BC64461A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:43:f9:8e:dc:52:ba:5e:5c:2e:f7:04:13:
a9:14:04:99:f8:87:da:ad:df:5f:39:bf:37:e6:b3:
d3:85:73:56:cf:22:cc:e0:ad:2b:21:50:1e:26:20:
f8:d8:56:32:c3:6a:7f:3d:cb:8f:9d:54:27:ff:fc:
63:92:5e:07:2f:ee:97:bb:cc:c6:35:30:9e:73:97:
e6:57:a4:b0:40:ed:51:f5:d3:67:54:67:ea:ee:c7:
d2:f7:43:80:2e:49:5f:e0:61:8f:0a:cd:35:68:54:
a2:17:70:f8:04:43:7f:62:80:00:c1:a2:8a:da:26:
c5:23:f5:83:67:44:0d:60:8f:3d:03:d6:fe:ce:b1:
27:e9:4a:ab:ba:ae:0d:58:f4:d3:47:ad:68:4f:4d:
fc:48:47:4a:9c:5d:98:3b:94:4a:88:12:1a:02:93:
ab:bd:87:a6:d4:9d:9d:a4:0e:11:fd:48:dd:ab:c8:
a9:ae:5d:76:46:7f:97:0b:dd:4b:75:e0:63:19:27:
39:78:f4:3e:a5:60:d2:1e:6d:99:db:5c:51:7e:e1:
d3:78:2f:02:ae:c6:49:b2:f0:68:a1:e0:55:84:73:
78:7a:65:63:0d:ba:7f:7a:4d:b3:24:1f:1f:45:48:
bc:5e:98:76:dc:a7:70:4f:ff:7a:cc:ea:73:af:ba:
25:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:41:89:4D:27:4E:67:1E:D3:7A:05:50:41:26:57:46:BC:64:46:1A
X509v3 Authority Key Identifier:
keyid:D7:6A:C9:52:5C:92:99:F8:D9:F2:68:53:A5:24:64:19:EB:99:13:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/D76AC9525C9299F8D9F26853A5246419EB9913D9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D76AC9525C9299F8D9F26853A5246419EB9913D9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/R5ERwantmUB5UDeJmMzkfbpspJvdexfkURpQonmzJkT/0/323830343a366465303a3a2f33342d3334203d3e20323730353631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6de0::/34
Signature Algorithm: sha256WithRSAEncryption
2c:3c:75:c0:5e:d9:3a:14:e6:92:e8:40:5b:a0:bd:4c:88:f5:
9c:6f:76:ec:35:48:81:0e:db:65:76:4a:d9:e6:7d:02:c4:c4:
63:9a:e6:b9:77:e9:cd:95:0d:12:7c:59:04:5c:fe:c6:72:26:
ee:f5:07:3e:08:15:5f:5b:a3:39:f2:39:bd:9f:fb:46:bd:60:
f9:6f:38:fc:61:3b:75:52:3a:71:04:47:ad:cb:aa:b6:a6:e7:
b2:34:da:8d:bb:bf:d3:39:0c:a9:8a:f4:a1:2f:76:15:b9:f7:
5d:ce:f2:4d:2b:7b:39:f6:b6:85:a3:68:2e:c9:97:c9:e9:d9:
5a:6a:ae:e6:78:8c:ec:ce:54:71:ef:85:b2:91:d9:87:b7:0f:
d4:f6:57:be:d3:a9:17:57:3a:da:54:6d:e1:16:db:02:21:05:
0e:55:49:28:50:32:60:bc:36:ac:6c:fe:c4:df:76:cd:b8:d4:
79:be:39:42:c0:29:42:09:05:06:46:9d:bd:26:59:68:fb:9f:
59:87:2d:e6:c3:3f:c7:85:38:36:55:60:ac:74:c4:2c:45:f2:
50:75:2b:90:4a:91:de:58:5f:ac:1b:1a:e7:02:d8:32:f3:c2:
a0:95:21:f3:6e:d5:05:d9:ea:dd:0d:ae:16:d0:a0:5c:d7:9b:
2a:68:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:32:19 2025 by rpki-client