Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
File: 323830343a383630343a3a2f33332d3333203d3e20323732363134.roa (raw, json)
Hash identifier: 8WR8xc4ZGM0f+zlkAhJy6bqD0JCpANsXoSJDWDSFckk=
Subject key identifier: 3C:BF:6C:6C:29:8C:87:33:58:B8:8A:E8:47:FB:FF:96:5A:E1:02:B7
Certificate issuer: /CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Certificate serial: 02DA9C5FEBB374AFB580008E03700CB797F87893
Authority key identifier: 35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
Signing time: Wed 20 Mar 2024 13:43:25 +0000
ROA not before: Wed 20 Mar 2024 13:38:25 +0000
ROA not after: Wed 19 Mar 2025 13:43:25 +0000
asID: 272614
IP address blocks: 2804:8604::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:da:9c:5f:eb:b3:74:af:b5:80:00:8e:03:70:0c:b7:97:f8:78:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3508ABC74EC71F9482F4469C06D817E172192BCC
Validity
Not Before: Mar 20 13:38:25 2024 GMT
Not After : Mar 19 13:43:25 2025 GMT
Subject: CN=3CBF6C6C298C873358B88AE847FBFF965AE102B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:60:c2:92:41:4c:ad:e6:6d:a7:01:b6:4c:89:
b5:6c:2b:46:90:9d:96:a8:fe:45:59:8f:14:61:2f:
17:40:02:a1:4a:27:75:d4:d2:27:0e:4f:b6:21:c8:
19:c3:15:8e:99:71:39:3a:07:2b:23:d7:fb:fb:72:
8d:38:34:13:53:43:b2:1a:11:ac:72:02:e7:57:ec:
4d:c5:ce:24:79:9b:ee:0b:c6:be:c6:5a:68:c1:4e:
45:9c:e5:1f:d1:e9:f5:72:a8:c0:1c:f5:0e:43:e1:
95:b7:45:4c:7a:62:59:bc:87:73:b3:cf:fa:f4:6b:
2a:1d:13:92:79:07:9c:7a:e4:d7:55:70:32:b1:ed:
85:b6:f1:f0:99:30:27:70:78:74:0b:a1:0f:32:f2:
de:67:da:da:d1:85:13:3e:e7:c2:ce:96:87:85:d6:
56:5c:11:f4:64:58:17:89:d3:da:34:f4:b1:6b:3c:
a0:00:94:c9:72:2e:23:11:e4:2d:1f:bb:d3:11:83:
9e:d6:fd:2e:e8:ff:16:06:6f:1a:e7:83:1e:a3:e1:
7f:a3:f7:b4:f7:17:66:90:a1:c8:80:12:76:d1:94:
9f:9f:a0:7c:34:3a:bd:71:b6:5b:2d:92:bf:6d:94:
b0:d8:aa:8c:bc:90:7f:19:fd:f3:bd:d6:ba:08:cb:
48:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BF:6C:6C:29:8C:87:33:58:B8:8A:E8:47:FB:FF:96:5A:E1:02:B7
X509v3 Authority Key Identifier:
keyid:35:08:AB:C7:4E:C7:1F:94:82:F4:46:9C:06:D8:17:E1:72:19:2B:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/3508ABC74EC71F9482F4469C06D817E172192BCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3508ABC74EC71F9482F4469C06D817E172192BCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYy4aJMPvzackkLHg4k9oHHHZ7gjnErkQPJUasvp6anN/0/323830343a383630343a3a2f33332d3333203d3e20323732363134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8604::/33
Signature Algorithm: sha256WithRSAEncryption
3a:f9:06:5c:08:ae:42:ba:f3:67:12:47:5d:5a:cc:1d:d7:7d:
6e:3e:86:14:e4:e2:2c:9c:b4:3e:0e:8c:61:21:6f:99:33:f1:
56:2a:63:31:bc:a8:44:49:56:c3:46:7f:67:19:5e:12:6c:0a:
dc:23:a2:ed:76:98:99:49:83:18:0b:67:92:5c:b5:71:9b:a7:
69:0f:f1:08:ba:f4:1d:0e:99:5f:85:90:ce:c7:04:d9:44:80:
6e:52:c8:a6:04:a6:ff:fd:5d:c5:86:f4:87:ef:ac:54:02:f9:
4c:5b:e9:52:8b:00:80:db:6a:cf:fa:e6:e5:d3:86:30:3c:a1:
9a:7b:ba:d8:93:a8:bf:ed:4f:3b:9c:a7:c5:7c:27:fc:d6:36:
cc:04:dd:c0:93:a5:16:75:38:3a:0a:a2:61:9a:bf:e0:41:49:
f4:04:b0:32:c9:7e:96:7e:2d:e7:2e:5d:04:d1:ac:62:be:45:
8e:e2:69:95:46:e6:b2:9e:41:91:31:07:88:c8:51:65:eb:a1:
48:0c:9c:35:00:03:d8:e7:e7:9b:e2:08:c2:d9:55:e7:7e:a3:
e0:55:35:bd:3e:85:e2:05:a2:18:4f:44:82:93:fa:db:02:0a:
db:07:b2:3a:11:a0:e2:03:9c:bc:74:b7:0a:39:f6:b3:a0:ef:
32:f2:4c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 12:33:37 2025 by rpki-client