Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa
File: 323830343a346261633a3a2f33322d3438203d3e20323637333233.roa (raw, json)
Hash identifier: oPFqpf5Op+v8rGQlGqfBQ32uY9U/H+U7LkIyce1o8k8=
Subject key identifier: 26:BF:93:DF:A6:D7:DB:DA:FF:4F:E8:C9:7E:1D:13:46:D6:50:7C:A8
Certificate issuer: /CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0
Certificate serial: 5572F1549C003F7B1EBCBC953C0E5183CBB7465F
Authority key identifier: FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa
Signing time: Thu 23 Jan 2025 12:57:41 +0000
ROA not before: Thu 23 Jan 2025 12:52:41 +0000
ROA not after: Thu 22 Jan 2026 12:57:41 +0000
asID: 267323
IP address blocks: 2804:4bac::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:72:f1:54:9c:00:3f:7b:1e:bc:bc:95:3c:0e:51:83:cb:b7:46:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0
Validity
Not Before: Jan 23 12:52:41 2025 GMT
Not After : Jan 22 12:57:41 2026 GMT
Subject: CN=26BF93DFA6D7DBDAFF4FE8C97E1D1346D6507CA8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:38:17:68:08:38:41:f4:26:d5:e0:a4:6a:e5:
89:ec:b2:19:19:6c:61:e3:92:5c:6d:9a:0a:18:07:
ea:9c:09:43:17:1c:67:aa:84:11:bc:70:fc:fa:ca:
7c:b1:10:44:9f:28:ff:9c:70:5a:b5:ea:49:38:77:
59:91:44:3d:9d:09:2d:77:ca:2b:3d:f0:14:6a:f6:
a2:30:aa:1d:1d:28:e8:8e:fa:e6:16:d8:17:73:8c:
f2:98:a4:04:c2:12:26:a4:c7:c6:eb:87:8b:4e:8f:
df:5e:33:44:88:48:44:97:c6:5f:7b:7b:54:51:b5:
6b:af:06:1b:a7:ec:d0:f4:39:1e:68:23:18:fb:11:
d4:f9:34:e4:a5:bf:36:ce:64:72:61:bb:57:65:05:
9e:d3:89:a6:75:5b:81:d3:ed:7e:f5:d5:a6:7d:48:
f1:ae:6a:fa:71:e8:f7:bb:af:df:5c:ba:91:1b:a8:
23:0f:77:bc:8a:5b:80:d2:b1:2b:0d:6e:9a:12:af:
ee:1c:39:e5:68:40:61:27:bb:09:68:b9:06:e0:64:
ae:eb:f1:28:58:67:62:ee:a8:53:4b:24:33:11:07:
96:5d:ed:d8:a2:e1:69:78:0d:5d:d2:c3:28:d8:35:
66:85:83:e4:29:28:48:12:cc:1d:30:53:8c:64:e6:
63:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BF:93:DF:A6:D7:DB:DA:FF:4F:E8:C9:7E:1D:13:46:D6:50:7C:A8
X509v3 Authority Key Identifier:
keyid:FD:8D:30:E8:6F:5B:B3:42:34:68:76:9C:A0:DC:A6:BE:69:FC:B1:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FD8D30E86F5BB3423468769CA0DCA6BE69FCB1E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/YbuM6i5GQNLi7BbEEqPQ1U4TKFbJXKzCUS2sbXgxf7W/0/323830343a346261633a3a2f33322d3438203d3e20323637333233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4bac::/32
Signature Algorithm: sha256WithRSAEncryption
2c:7a:3a:21:1f:8e:42:8c:fc:8e:d8:37:b8:fa:a9:90:8c:a9:
dc:db:f4:22:38:0d:ce:ca:d2:b2:8a:76:85:85:e4:f0:36:11:
19:f5:54:be:24:98:60:91:c7:90:5e:75:60:7c:16:b5:4b:aa:
cd:e4:8a:cb:db:22:44:e3:57:cb:97:39:2b:49:65:da:a7:f4:
49:13:19:d7:81:d5:f9:9a:96:18:ba:81:f7:12:53:73:8b:30:
30:4f:41:2f:b3:dc:cf:a4:02:f4:e4:4a:47:16:84:ca:6f:ce:
8f:80:2f:fb:83:46:0c:91:ab:13:15:6e:ab:ad:10:56:5e:94:
70:d4:48:0a:61:c5:d6:60:15:1b:cc:41:6d:bd:85:e2:41:0c:
b7:dd:82:2f:ae:f6:c7:e0:5c:55:c4:69:38:7d:c1:f2:50:51:
f9:59:16:fc:6b:08:5f:ca:79:28:22:dc:a9:b3:31:f3:cd:1f:
b3:ec:40:a6:29:76:81:83:dc:16:67:c5:5e:dd:40:f0:d9:f6:
e4:e9:52:f6:19:cd:a4:81:31:3b:c9:93:0b:58:47:d7:9c:3d:
8e:c5:2d:0a:50:66:4f:1f:4a:ba:b5:c0:37:fb:2e:3a:22:c3:
53:b8:28:ac:46:13:54:96:09:82:a8:47:50:00:81:cb:d4:62:
d0:c1:7a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:24:26 2025 by rpki-client