Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
File: 323830343a343832383a3a2f33322d3438203d3e20323637313031.roa (raw, json)
Hash identifier: zZvdqiuhb73oWEcOy8hgkY5cyDbuIr9IEjqD7VV7hUg=
Subject key identifier: 8E:05:49:C4:FF:82:57:62:DC:C0:75:47:2E:B2:FA:7F:78:4C:9F:02
Certificate issuer: /CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
Certificate serial: 044DCF3F3D1DD3CFB738B1F1F7BD4BEE3CE5DDBB
Authority key identifier: B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
Signing time: Thu 04 Apr 2024 20:37:13 +0000
ROA not before: Thu 04 Apr 2024 20:32:13 +0000
ROA not after: Thu 03 Apr 2025 20:37:13 +0000
asID: 267101
IP address blocks: 2804:4828::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:4d:cf:3f:3d:1d:d3:cf:b7:38:b1:f1:f7:bd:4b:ee:3c:e5:dd:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B81349D6DE12F72CBE07E6A9581BD93607C25C4E
Validity
Not Before: Apr 4 20:32:13 2024 GMT
Not After : Apr 3 20:37:13 2025 GMT
Subject: CN=8E0549C4FF825762DCC075472EB2FA7F784C9F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:8d:f8:4d:d7:e5:3d:50:86:f4:59:f6:1d:9d:
4c:a1:cd:6b:0a:81:4f:55:d9:98:80:f0:e4:e8:89:
ec:1d:5b:47:d8:91:bf:49:e7:f3:4f:51:e5:e8:7b:
20:77:e3:a8:fc:dc:ea:94:51:49:3e:67:79:a1:f3:
de:08:d8:58:b5:94:f3:cb:6f:1c:4b:07:33:7e:91:
59:3a:40:1d:fe:e4:3a:09:cb:45:a2:c2:4a:a3:a8:
2c:48:69:8d:5e:89:3c:b7:af:5f:04:7d:93:f5:9f:
98:03:d9:2d:fe:44:7d:a4:44:6f:9a:a9:07:3e:b0:
2a:c9:2f:a0:12:0b:e0:25:7b:08:95:ed:58:30:3f:
89:29:ae:08:46:5c:30:e9:3c:14:7e:fe:7c:c2:c2:
9d:b4:35:0b:f5:c9:3d:9d:b3:f4:40:93:64:cd:dc:
25:8a:27:e4:c5:59:8f:2c:ea:29:b1:b0:f9:23:15:
8a:58:0d:1c:13:19:09:20:08:fc:0a:59:58:c2:05:
8a:8e:d6:03:12:11:09:50:89:c1:a0:1c:aa:d5:02:
2b:10:4a:12:4a:71:91:1c:99:a5:37:32:91:e3:8a:
0b:da:92:58:fd:18:20:d1:d3:be:5e:98:80:aa:77:
d8:7e:4d:77:d7:c5:ad:69:03:d7:8b:34:5d:de:0b:
98:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:05:49:C4:FF:82:57:62:DC:C0:75:47:2E:B2:FA:7F:78:4C:9F:02
X509v3 Authority Key Identifier:
keyid:B8:13:49:D6:DE:12:F7:2C:BE:07:E6:A9:58:1B:D9:36:07:C2:5C:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B81349D6DE12F72CBE07E6A9581BD93607C25C4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/qhsfNURJG7vJfHV1fKgYi8zmvC2T4Bd23M8qizS8V2s/1/323830343a343832383a3a2f33322d3438203d3e20323637313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4828::/32
Signature Algorithm: sha256WithRSAEncryption
89:98:61:99:7a:1b:42:45:fd:ac:f6:b2:53:e7:5b:5b:db:51:
d2:d4:19:fe:3a:03:d8:db:78:82:e8:07:25:b9:8d:a0:e5:8a:
b7:4f:05:6e:40:eb:0a:59:b6:b5:4a:4e:d0:1a:55:90:81:5f:
90:1d:1e:a8:74:2b:1d:8c:0b:a4:64:6f:ea:f4:3f:14:11:64:
e3:d3:b3:82:1d:3e:68:1f:14:93:9d:25:e4:3e:69:0c:c2:7f:
ca:40:a2:6a:8b:79:92:e7:63:d3:f0:5f:53:b5:28:00:9a:78:
5c:5c:d5:35:7b:da:35:82:59:b7:04:64:c8:80:3b:60:db:d2:
a8:db:7b:e4:d8:45:5f:30:e7:1c:f0:39:f7:1a:a5:d2:c6:e3:
75:64:b4:8d:bd:12:17:f9:21:d0:d8:55:52:af:cf:bc:42:86:
64:2c:96:66:ac:05:e6:9e:42:39:4e:ae:82:b5:a7:39:64:f4:
5b:83:14:c9:fe:5a:46:4f:94:d6:0e:27:d0:c9:0a:22:22:8b:
f4:a2:69:5c:83:11:e2:62:e5:48:93:38:d9:97:01:18:04:5d:
aa:1d:af:ba:84:c7:7a:b5:eb:d2:eb:ae:a2:41:dc:32:7f:eb:
4a:77:cd:a1:e5:47:eb:b2:49:f3:86:7e:c3:56:17:63:76:c4:
4a:13:a7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:25:30 2025 by rpki-client