Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa
File: 323830343a3464343a3a2f33322d3438203d3e20323632343639.roa (raw, json)
Hash identifier: aT+6GMt2PyHoUTOuoJMU/SkxyCwpxEdRXIWImEuMc8w=
Subject key identifier: 6B:5F:21:08:F9:05:09:62:E5:51:1D:A9:8F:48:B5:DF:31:A2:1E:B0
Certificate issuer: /CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
Certificate serial: 2C63D65741022407EBDB74335A021BE22EC26A46
Authority key identifier: 9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa
Signing time: Wed 12 Mar 2025 16:28:05 +0000
ROA not before: Wed 12 Mar 2025 16:23:05 +0000
ROA not after: Wed 11 Mar 2026 16:28:05 +0000
asID: 262469
IP address blocks: 2804:4d4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:63:d6:57:41:02:24:07:eb:db:74:33:5a:02:1b:e2:2e:c2:6a:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43
Validity
Not Before: Mar 12 16:23:05 2025 GMT
Not After : Mar 11 16:28:05 2026 GMT
Subject: CN=6B5F2108F9050962E5511DA98F48B5DF31A21EB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:4d:d8:ef:a3:bb:2a:c2:6f:aa:f0:7d:66:
15:97:ac:70:69:5b:25:1a:1e:c0:ac:11:60:04:ae:
76:c6:0e:6b:97:e0:98:43:fc:79:73:08:fe:e3:b6:
a3:b4:3d:e2:61:b0:80:6e:3a:b9:df:fc:7f:ab:5d:
6b:13:cf:c4:c9:c5:b4:83:6d:b1:2a:87:16:52:01:
0d:97:d8:d0:c8:16:ad:3b:fc:30:69:6a:30:2f:0d:
9d:a0:8b:67:c7:b1:b8:04:15:87:ec:2a:9d:35:bd:
c4:f5:40:13:85:ee:24:d9:ad:75:09:41:f6:9a:09:
7d:5a:ea:47:d7:e3:60:2f:ea:f0:3b:7b:c2:04:62:
af:c1:41:74:88:8b:91:d0:c2:7d:93:9b:f4:0e:cb:
a2:06:2a:95:f6:35:76:ea:f7:39:5c:15:ba:24:23:
6e:21:9d:e4:f3:e1:3d:b5:c9:ea:1e:68:35:b3:88:
1e:15:93:37:a1:5d:61:5d:07:01:f7:50:8d:9d:e4:
90:0e:b9:f6:28:1e:00:2a:65:b2:9d:74:3c:95:62:
9e:25:ca:6e:43:5b:1a:ca:24:4f:d1:e5:1f:9d:b6:
c8:e6:68:a2:38:4d:b1:29:33:55:db:41:42:a8:6b:
e0:3a:43:2a:ed:4e:0e:2e:55:92:d5:de:c4:53:e9:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:21:08:F9:05:09:62:E5:51:1D:A9:8F:48:B5:DF:31:A2:1E:B0
X509v3 Authority Key Identifier:
keyid:9A:F0:CB:FF:E3:00:0E:7D:89:21:1B:15:F5:EA:30:C8:FA:6C:5F:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9AF0CBFFE3000E7D89211B15F5EA30C8FA6C5F43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K2diqeiYDg7D2PBfWfwTa4Lr6MQEWcridkNhGxF8tg2/0/323830343a3464343a3a2f33322d3438203d3e20323632343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d4::/32
Signature Algorithm: sha256WithRSAEncryption
44:d3:64:92:41:49:72:a1:e8:cc:70:1a:4d:a9:22:f6:bc:c0:
b0:4c:31:fc:28:f6:4d:84:37:ee:0f:12:01:7c:00:c9:78:4c:
4b:5f:ad:12:42:17:59:00:5b:29:d7:15:fc:33:65:94:c6:44:
b1:3a:bd:5c:32:de:56:0c:c6:7e:cb:15:7e:f6:c1:40:cf:96:
6f:99:61:75:65:48:79:fc:1f:6b:31:f2:77:81:bf:ab:1d:fc:
6b:80:57:ef:b6:38:56:83:c0:13:8f:f5:bc:fe:55:10:4d:8b:
71:b2:9f:92:fd:55:f3:b7:bd:f6:fe:37:e2:0a:41:aa:eb:67:
eb:a1:a2:bc:ca:7d:ab:d2:8e:21:20:57:8e:e9:e6:ad:2f:b6:
2f:5b:bf:9d:0c:fd:d7:e0:0e:f2:6d:a2:e3:ed:09:7d:c3:af:
c1:fc:0c:c7:7e:0b:c9:ed:d5:46:8f:84:31:a3:f0:73:a5:f7:
06:43:d5:cc:3c:d4:3b:16:dc:09:c4:ec:46:4c:8f:53:e3:06:
f4:a7:2d:92:57:aa:3e:f2:64:fb:51:68:e5:5c:c2:75:6b:a3:
d5:c6:d2:a4:e0:16:d9:38:1f:37:61:0a:70:3a:bd:ea:42:db:
6e:a2:46:39:1a:0a:f5:05:da:6b:cf:3d:12:c3:f5:b7:75:3a:
f7:bd:39:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:59 2025 by rpki-client