Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa
File: 323830343a316634633a3a2f33322d3430203d3e20323639313735.roa (raw, json)
Hash identifier: BlJGcQY3XLk4jRhjDMJkpS4CE+ebNWaUcZBXoBZOoQU=
Subject key identifier: 76:7A:B8:AA:79:67:E7:95:86:27:FD:85:6F:D9:7A:56:5D:B7:4C:1A
Certificate issuer: /CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Certificate serial: 5989A1F1047DC6A52268BF43B24823E41648B580
Authority key identifier: D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa
Signing time: Tue 20 Feb 2024 14:46:04 +0000
ROA not before: Tue 20 Feb 2024 14:41:04 +0000
ROA not after: Tue 18 Feb 2025 14:46:04 +0000
asID: 269175
IP address blocks: 2804:1f4c::/32 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:89:a1:f1:04:7d:c6:a5:22:68:bf:43:b2:48:23:e4:16:48:b5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Validity
Not Before: Feb 20 14:41:04 2024 GMT
Not After : Feb 18 14:46:04 2025 GMT
Subject: CN=767AB8AA7967E7958627FD856FD97A565DB74C1A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:b7:37:53:db:ad:e0:7d:bf:9b:99:b0:2d:
4c:2c:b3:46:82:fd:61:bb:b5:d9:55:6b:0a:f7:b0:
31:67:72:63:45:a3:61:2d:34:cc:3b:9b:b8:85:7f:
1e:74:05:6c:2e:2a:f7:2b:4c:7b:67:64:f0:22:04:
53:6d:c1:10:44:da:91:11:3c:b8:15:e7:b1:fb:da:
00:66:1a:c7:d7:d5:c6:d0:a7:28:4b:79:07:6e:19:
af:43:d8:bd:ea:27:46:b6:d6:d0:e8:24:dd:1a:57:
da:f6:28:20:43:4b:13:fc:93:62:3d:ee:5c:ae:94:
6c:50:f7:9d:bd:42:68:8b:0b:70:5c:3e:7a:8f:35:
5b:53:c8:6a:38:e5:e2:ff:13:70:0c:6b:35:51:9e:
2d:c1:87:e2:0b:85:d9:49:52:10:d2:02:e1:85:70:
23:8a:3f:2d:e8:0c:c3:bf:2e:b6:1d:b8:47:99:bf:
b7:cd:4e:ee:a2:52:93:12:8c:43:89:db:25:6c:57:
7f:ae:c9:2c:87:f9:8f:3e:45:98:e9:1b:fc:94:20:
62:24:07:6f:c2:80:2f:b0:38:7e:fb:f8:81:d5:f7:
b6:64:09:86:8e:fd:70:b5:fe:cf:4a:44:63:34:39:
cb:95:4d:aa:16:05:0c:00:8f:a7:03:ce:8e:f3:b0:
dd:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7A:B8:AA:79:67:E7:95:86:27:FD:85:6F:D9:7A:56:5D:B7:4C:1A
X509v3 Authority Key Identifier:
keyid:D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1f4c::/32
Signature Algorithm: sha256WithRSAEncryption
5b:fa:ed:56:21:1f:d3:8b:65:5c:56:ca:02:95:e7:c4:8c:de:
63:af:60:3d:18:87:b2:74:83:7c:ca:11:a5:41:92:1d:10:85:
d4:d6:8a:86:09:9e:40:d3:6c:85:d8:92:fa:90:49:82:ab:a8:
fc:4d:63:a6:e6:67:f4:b2:6c:fa:6f:45:66:a5:2f:5a:2b:26:
22:0f:c7:8f:6e:be:cf:77:05:3f:61:1d:b1:6e:cd:01:12:99:
a0:a5:e4:e4:73:98:11:70:91:13:33:48:65:fa:59:a9:38:81:
2c:b5:df:1e:5e:ae:b4:79:bf:ea:d5:77:7b:cc:67:2f:14:b8:
a8:d6:28:29:63:a5:60:81:7f:73:e7:7d:91:12:a2:6b:71:96:
8d:1c:ef:d7:1a:f8:8e:fb:d1:55:35:12:fa:82:9a:6a:d2:e9:
bd:99:3b:48:9f:fd:18:63:f0:a1:bb:82:ac:ab:a7:3d:71:be:
01:b9:bb:e5:b5:93:7a:db:f9:56:b3:cb:51:42:26:a2:b7:5c:
90:3a:b5:6b:47:40:1e:b1:c4:f4:35:60:71:d5:df:0e:81:f4:
cc:62:30:10:04:c7:e9:66:64:62:dd:3b:76:5b:51:b0:9c:7f:
20:ca:ea:d6:1b:76:c8:b1:ae:13:9d:69:29:7a:24:e4:88:25:
a3:0f:32:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 22 23:18:15 2025 by rpki-client