Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa
File: 323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa (raw, json)
Hash identifier: JJ0D66Z0BKmH7GPg5/IjBI3wRwQ2LEAoBlgIetRB9zQ=
Subject key identifier: 82:B0:72:3D:C3:85:0F:D6:C2:CE:76:90:B6:05:F6:B9:33:E5:54:D9
Certificate issuer: /CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
Certificate serial: 3DF67373B93BBCB3C71FDD2D9252614B8AAD1160
Authority key identifier: 93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa
Signing time: Wed 20 Dec 2023 17:25:51 +0000
ROA not before: Wed 20 Dec 2023 17:20:51 +0000
ROA not after: Wed 18 Dec 2024 17:25:51 +0000
asID: 269444
IP address blocks: 2804:64b8:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:f6:73:73:b9:3b:bc:b3:c7:1f:dd:2d:92:52:61:4b:8a:ad:11:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E
Validity
Not Before: Dec 20 17:20:51 2023 GMT
Not After : Dec 18 17:25:51 2024 GMT
Subject: CN=82B0723DC3850FD6C2CE7690B605F6B933E554D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:61:b2:a7:d9:dd:cf:cb:6c:3b:a5:f8:b5:8f:
5d:de:3f:0d:d0:33:c1:b3:a7:fb:df:d1:80:7c:06:
13:b7:1a:3b:2f:de:5d:ca:2f:89:1f:9d:ba:eb:63:
95:27:9d:08:d9:87:d7:a5:e1:a8:dd:36:0f:7d:d2:
e1:0d:5f:79:c9:f4:a6:21:43:69:c0:f9:b3:9b:f6:
48:9a:d5:a7:7c:a6:7c:cf:f2:11:e2:55:5f:cb:57:
a6:68:29:f0:68:10:a7:04:10:6e:4b:40:b7:52:25:
a0:d8:b5:d4:ee:8a:23:28:31:c1:f0:05:bb:dc:09:
5e:25:91:d1:31:0d:7c:09:35:af:8a:ed:f6:0a:fb:
95:6f:10:db:19:75:2d:8d:b3:37:b7:13:82:ea:8d:
b6:c3:98:d9:af:f8:b8:fb:ea:c1:56:38:f7:94:3f:
d4:d3:2b:fe:29:dd:1a:d1:3b:bf:2a:03:c6:fc:da:
90:3e:64:9c:05:f7:81:7c:ab:d2:bc:0d:c4:1c:fb:
06:d1:1c:ac:75:85:78:02:24:6e:13:a0:55:2f:4d:
a1:7d:56:41:3d:f4:8c:fa:98:b6:9d:14:b5:bf:ea:
61:65:9b:1b:79:69:d4:e3:5b:b1:8a:02:ef:09:21:
c1:7b:cf:60:60:65:b8:76:20:77:d8:da:23:3a:9c:
7c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B0:72:3D:C3:85:0F:D6:C2:CE:76:90:B6:05:F6:B9:33:E5:54:D9
X509v3 Authority Key Identifier:
keyid:93:E9:F7:EA:4A:E4:44:9B:26:A7:5D:2A:43:E8:83:E4:6A:A5:AA:8E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93E9F7EA4AE4449B26A75D2A43E883E46AA5AA8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GzZ3edMAnw4gjJbUpWieJmxB1RGciR9M7ExxkbbkNfZk/1/323830343a363462383a343030303a3a2f33342d3334203d3e20323639343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64b8:4000::/34
Signature Algorithm: sha256WithRSAEncryption
84:8d:8d:41:8f:c1:d3:4e:2d:1f:26:60:06:32:d1:03:a9:6b:
4f:40:5a:21:92:a2:e5:16:54:3a:89:54:da:34:81:dc:ca:d3:
af:e1:af:21:8a:13:3c:9b:a9:1c:f0:e7:55:ea:90:e6:a7:78:
36:e1:1b:72:09:0c:52:52:ca:6e:fe:92:55:d7:b0:46:d9:0c:
43:32:80:04:e4:89:5c:e2:dc:a5:d4:c3:00:84:1b:04:70:7d:
3a:14:23:00:d7:6d:5c:b1:8b:32:f0:67:4a:7a:aa:a8:1b:ee:
d5:48:9f:e2:08:57:7a:c1:8d:90:57:90:70:66:d9:04:06:1f:
79:e5:af:9a:1c:3a:2b:3f:0d:06:cd:77:b1:4c:af:19:2a:d4:
35:b4:2d:4a:f7:af:10:93:3b:50:e3:5e:a7:4b:f2:9b:bf:66:
da:12:6b:e2:27:8d:1f:5d:4b:26:db:17:e3:32:6f:d7:2a:4a:
d1:d3:d0:df:45:d4:e5:47:56:03:d8:1c:10:35:d8:26:2a:35:
1c:e1:18:03:99:34:82:1d:1b:9b:c0:55:ad:b4:24:f7:4f:21:
49:80:0b:fb:41:b0:66:b0:9a:e6:fb:25:cf:24:df:d5:fe:34:
da:bb:08:99:8c:bb:8d:a0:0c:41:c7:ac:c1:c8:89:f3:cb:f4:
d7:b7:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 10:08:43 2025 by rpki-client