Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a653030303a3a2f33362d3336203d3e20323638383337.roa
File: 323830343a356235633a653030303a3a2f33362d3336203d3e20323638383337.roa (raw, json)
Hash identifier: WGO8hSYvROJvD0u85WdhZfVUEOELjut0Tmqd2FFwzEI=
Subject key identifier: 29:89:59:6F:11:AF:42:60:19:CC:F3:C9:41:E9:19:5B:1D:37:D8:72
Certificate issuer: /CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Certificate serial: 0C96114A3E60B0399D78262F20F26C189DF50759
Authority key identifier: D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a653030303a3a2f33362d3336203d3e20323638383337.roa
Signing time: Thu 03 Apr 2025 12:39:17 +0000
ROA not before: Thu 03 Apr 2025 12:34:17 +0000
ROA not after: Thu 02 Apr 2026 12:39:17 +0000
asID: 268837
IP address blocks: 2804:5b5c:e000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:96:11:4a:3e:60:b0:39:9d:78:26:2f:20:f2:6c:18:9d:f5:07:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D42A166806CE2D015B2B090F188263BB4BB4BC43
Validity
Not Before: Apr 3 12:34:17 2025 GMT
Not After : Apr 2 12:39:17 2026 GMT
Subject: CN=2989596F11AF426019CCF3C941E9195B1D37D872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:56:59:92:c7:07:36:c7:35:fc:31:e2:1c:
7a:06:6c:3f:f4:53:d4:9a:f8:31:c0:04:4f:6b:ad:
e5:75:bd:71:b7:ed:d8:4c:f2:19:d9:d0:e1:03:2e:
91:1e:d5:83:23:76:b2:36:29:ee:6d:7a:55:a9:46:
ca:82:27:5b:e5:3c:eb:20:5b:17:54:b9:c3:ce:f9:
76:50:c7:ed:77:82:99:97:a0:51:36:40:49:13:24:
cd:32:1f:fc:88:b4:c3:b5:ec:05:4a:fe:d0:90:6d:
b6:98:7b:26:2e:b9:37:6b:09:97:0f:ac:66:8a:9a:
b9:c2:95:87:16:ed:c8:49:de:1a:bd:6d:68:4e:c9:
92:33:52:44:6b:a3:2a:60:7e:d6:9b:23:bc:b5:98:
0e:e1:ab:e8:8c:83:cb:30:e5:ce:06:aa:54:0a:9b:
80:35:e8:e9:d2:2f:f8:59:01:39:54:ab:e3:d4:d2:
f0:bd:48:3f:e3:4c:8b:74:6b:2d:ed:1a:da:eb:1f:
f2:d1:dd:ef:81:92:36:39:05:b0:45:25:ea:45:b9:
7e:2b:8b:d4:7a:0f:e3:62:67:41:5e:61:98:5f:47:
50:fb:93:d6:11:bb:63:a2:ab:72:f1:37:14:36:69:
8d:01:17:b7:75:aa:fd:9f:81:92:d2:a0:ec:df:df:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:89:59:6F:11:AF:42:60:19:CC:F3:C9:41:E9:19:5B:1D:37:D8:72
X509v3 Authority Key Identifier:
keyid:D4:2A:16:68:06:CE:2D:01:5B:2B:09:0F:18:82:63:BB:4B:B4:BC:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/D42A166806CE2D015B2B090F188263BB4BB4BC43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D42A166806CE2D015B2B090F188263BB4BB4BC43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TxvZDcndZwcDx21YJeXS7YcmoPNYzAmVRtv4Xkjs3Aj/0/323830343a356235633a653030303a3a2f33362d3336203d3e20323638383337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5b5c:e000::/36
Signature Algorithm: sha256WithRSAEncryption
77:2a:55:ec:48:97:9e:a8:d1:88:f1:9c:60:5a:38:93:a9:d7:
5e:64:81:41:6f:91:f5:47:42:36:52:55:ad:42:93:68:32:66:
69:d9:e4:c4:f4:8d:89:ab:ad:86:5d:b2:4d:03:c5:43:d2:52:
59:ae:50:8f:74:12:af:8b:1c:6f:fe:7b:cd:e1:db:f2:60:0f:
16:a0:0a:e0:14:90:67:80:a2:e5:b9:ea:32:cb:2d:81:65:a0:
17:2a:65:17:a9:6f:c5:81:5c:7f:f2:50:11:a5:98:b0:65:e5:
9e:47:a3:b9:c2:3e:4d:c8:40:3d:c1:50:3d:1a:b8:67:bf:97:
6d:5c:30:3d:c8:7a:88:b5:85:10:3e:34:d8:61:34:8f:c2:81:
b8:ac:65:b5:29:0a:d8:7e:3b:cc:10:0e:70:cc:99:e5:f7:4a:
27:cd:28:50:ae:66:a1:a8:65:2a:24:5b:58:94:06:9e:26:ac:
39:1a:33:d6:b6:54:89:08:75:5a:31:71:9f:41:7f:20:25:33:
3f:cc:ee:bd:e1:d3:50:fd:96:49:f9:96:42:42:b5:30:09:41:
60:2a:c9:b1:46:5c:1a:67:23:3a:41:15:72:34:55:cc:58:ff:
63:24:03:3a:0d:90:4b:9c:28:34:01:ee:ed:df:e9:2b:ca:99:
70:3a:26:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 21:41:02 2025 by rpki-client