Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
File: 323830343a353830383a3a2f33322d3332203d3e20323638313031.roa (raw, json)
Hash identifier: mbsHctgNTFi5Hu5ZqhnVT2jLlhteKtTNG1nz9qwqqUg=
Subject key identifier: 86:D1:D3:F3:3F:79:C8:1C:AB:44:49:37:35:6B:55:84:43:BC:2A:AB
Certificate issuer: /CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Certificate serial: 4D52FD9EE9AA8B061BB53BD4928ECE475F660A04
Authority key identifier: 91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
Signing time: Wed 05 Mar 2025 19:00:07 +0000
ROA not before: Wed 05 Mar 2025 18:55:07 +0000
ROA not after: Wed 04 Mar 2026 19:00:07 +0000
asID: 268101
IP address blocks: 2804:5808::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:52:fd:9e:e9:aa:8b:06:1b:b5:3b:d4:92:8e:ce:47:5f:66:0a:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912EC49C89BDC1DCBECB52C922BE4EC94D79882A
Validity
Not Before: Mar 5 18:55:07 2025 GMT
Not After : Mar 4 19:00:07 2026 GMT
Subject: CN=86D1D3F33F79C81CAB444937356B558443BC2AAB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7a:b2:04:60:33:43:27:c5:f6:80:75:d6:4d:
62:ae:0c:07:59:73:10:2f:ce:1f:a2:5a:c8:ac:f5:
82:76:22:40:4e:71:72:59:e5:f7:cc:02:09:3d:0d:
10:69:c4:29:3a:8b:5d:94:ee:e4:2b:89:a2:df:cf:
05:c8:10:e9:98:42:37:a7:ad:41:49:ed:11:44:ea:
dd:23:a4:46:ba:1d:50:2e:7c:6d:e1:f3:a4:08:de:
46:cb:58:94:d4:86:a8:ff:03:b9:6d:d0:87:16:1d:
a9:df:af:bb:fb:31:9c:89:7e:7e:2e:62:f6:17:53:
3b:cc:9e:4c:63:9e:09:78:02:61:c7:10:dd:53:86:
f9:09:ca:67:9d:cc:f4:fc:99:b0:d8:69:27:b6:ec:
7e:a1:2e:f4:d3:49:5b:46:c5:34:07:a4:91:77:ae:
a9:a9:d5:08:65:89:3a:09:21:fd:92:9f:d2:d2:a1:
de:87:66:f0:ae:eb:01:c7:57:73:48:bd:d0:73:49:
e3:a9:2a:ed:92:67:aa:8e:24:d5:d5:4f:84:b9:6a:
9d:87:85:01:ba:d3:78:8a:ec:16:3e:df:71:74:cf:
f8:ac:9f:d4:c0:83:e8:97:91:44:64:31:12:cc:1a:
b4:90:7b:82:d5:fb:f5:06:86:ca:98:0e:e6:d1:09:
4d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D1:D3:F3:3F:79:C8:1C:AB:44:49:37:35:6B:55:84:43:BC:2A:AB
X509v3 Authority Key Identifier:
keyid:91:2E:C4:9C:89:BD:C1:DC:BE:CB:52:C9:22:BE:4E:C9:4D:79:88:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/912EC49C89BDC1DCBECB52C922BE4EC94D79882A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5RjVaa2YNsvSy25YTvLnvu1uSeSPdKrSN27NXCuqJKNX/1/323830343a353830383a3a2f33322d3332203d3e20323638313031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5808::/32
Signature Algorithm: sha256WithRSAEncryption
66:b0:5f:e1:44:92:88:30:a9:1a:01:9b:c7:7e:37:81:fa:bb:
04:1b:34:d9:03:10:41:fb:c1:e7:62:50:c4:01:27:ca:12:49:
ad:34:e0:aa:80:85:a1:8a:72:19:2c:d3:3b:99:1c:06:6f:9d:
db:e9:e9:b0:c7:3f:ca:a6:ad:dd:19:6b:d8:fe:88:dd:84:2c:
ea:5a:5f:ce:a6:db:86:f9:81:02:3a:06:a5:2b:53:13:95:78:
4d:9f:e5:dd:42:77:b6:c6:47:2e:8a:f0:60:72:33:f6:f4:2d:
02:4f:de:6f:a3:38:f6:45:7e:62:81:fd:44:7a:e2:32:91:42:
08:04:2b:d6:23:dd:31:53:ee:34:34:a8:fe:76:fe:e8:3b:11:
c1:63:a1:e9:59:8b:76:66:bb:c2:35:a6:c6:ea:bc:1c:8a:bf:
51:b6:8c:47:48:6d:99:8d:00:ac:69:72:44:91:16:5b:08:12:
38:67:27:04:1a:d1:25:07:31:39:95:6f:89:2d:ea:20:ca:56:
19:22:89:7b:41:a6:b8:5c:f8:0c:8f:5e:63:b7:0f:83:b7:7e:
af:8d:2a:75:71:53:d3:44:fd:11:3c:c4:f1:ca:f4:e5:bc:26:
26:57:9d:90:c9:d7:90:b1:d9:5b:cb:44:3a:8a:1b:38:44:67:
67:ae:26:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:54:33 2025 by rpki-client