Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
File: 323830343a343363383a3a2f33322d3336203d3e20323637353839.roa (raw, json)
Hash identifier: 8Gs+UV6nO+bLlDoxgdD+eVl74rMk1Zi2fSdRQ1UAf1M=
Subject key identifier: 85:A2:2A:D6:F0:E3:63:98:60:1F:E7:FD:94:32:E3:5A:B1:C6:8B:B0
Certificate issuer: /CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Certificate serial: 1411F3C38CE0065C93DB3DA89C01272FD62E2052
Authority key identifier: AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
Signing time: Thu 06 Mar 2025 21:47:56 +0000
ROA not before: Thu 06 Mar 2025 21:42:56 +0000
ROA not after: Thu 05 Mar 2026 21:47:56 +0000
asID: 267589
IP address blocks: 2804:43c8::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:11:f3:c3:8c:e0:06:5c:93:db:3d:a8:9c:01:27:2f:d6:2e:20:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC
Validity
Not Before: Mar 6 21:42:56 2025 GMT
Not After : Mar 5 21:47:56 2026 GMT
Subject: CN=85A22AD6F0E36398601FE7FD9432E35AB1C68BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:45:6d:cb:25:69:82:cd:19:97:31:c1:c4:d3:
c5:db:ba:60:4e:0c:11:96:3f:7b:2c:1f:c7:9a:f8:
71:eb:25:aa:29:b8:5b:95:14:e5:d1:c4:57:dc:7f:
0a:fa:49:7e:e8:e2:69:0c:c7:df:c3:be:ce:c7:2f:
d5:e6:44:d3:6c:50:e7:cd:8c:49:2f:d9:d8:8f:ea:
28:01:37:8a:d3:06:2f:be:89:3d:ce:46:cd:62:88:
27:92:2e:5a:1f:14:ea:dd:ce:cc:90:1a:61:f4:c9:
d6:f5:6c:42:57:61:48:db:57:59:d4:a0:be:ad:67:
47:93:05:7c:5a:5e:05:86:fb:b6:f3:8c:72:81:11:
d9:52:d2:80:09:fa:f6:63:68:6b:6e:01:78:78:fa:
ae:f2:00:bd:d1:75:73:9c:04:96:2e:60:a1:23:e5:
50:01:41:7a:b1:77:2b:47:ae:d6:04:fa:69:8c:d9:
79:14:26:5b:ec:b4:3a:3a:9b:67:17:b4:60:a7:0c:
19:38:eb:dd:d6:27:a9:25:f8:00:8a:14:01:ef:8c:
55:59:0c:79:10:fb:7c:5f:98:be:01:49:2e:ba:5e:
7c:fc:7f:04:88:66:bc:ad:ee:29:c5:20:58:d3:4b:
33:d4:7e:e2:6c:d1:34:71:5d:15:e5:2d:a8:aa:d0:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:A2:2A:D6:F0:E3:63:98:60:1F:E7:FD:94:32:E3:5A:B1:C6:8B:B0
X509v3 Authority Key Identifier:
keyid:AF:CA:87:E4:AD:03:5B:5E:4C:A0:ED:A1:C4:C0:42:C6:9B:FE:91:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFCA87E4AD035B5E4CA0EDA1C4C042C69BFE91EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7KpwKJjGy6R95EFPa7iQd6PJJyvpQQC9hxS2rZti1Bxg/1/323830343a343363383a3a2f33322d3336203d3e20323637353839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:43c8::/32
Signature Algorithm: sha256WithRSAEncryption
5b:21:72:89:f9:b6:21:27:4a:d7:5d:cd:f8:e2:48:c9:d0:5f:
fb:5b:77:3d:ea:00:05:2d:cb:02:ff:a6:13:5a:2d:cd:63:b4:
d9:40:25:47:ce:6a:c6:5c:a2:bc:f0:79:9c:1c:99:f5:82:f3:
66:63:f3:bf:fe:23:67:dc:00:14:92:e7:91:35:9d:cb:5a:de:
f9:17:d6:8e:34:cb:02:45:ff:51:60:3b:e0:1c:ba:0c:b2:c2:
b4:a8:90:3c:03:f1:0c:42:d3:35:29:21:34:8a:94:6e:a1:71:
4c:e8:63:89:e3:cc:80:6a:35:a4:ec:de:6d:3e:51:8d:d2:94:
82:a7:fc:3f:80:6f:98:e4:4e:03:23:9b:48:9c:3c:10:0a:66:
65:aa:c9:bc:9a:02:30:fe:02:1d:76:69:d0:f7:49:0b:fd:1c:
73:04:06:d7:8c:e9:0c:2f:3b:61:89:25:e3:11:15:cd:c9:dc:
84:d0:ff:54:01:a6:23:a9:10:e4:c9:4f:eb:86:df:71:f2:57:
f3:9f:3f:66:21:a4:d5:7e:75:e4:cf:48:98:5f:c4:19:e3:40:
46:d1:d6:2a:21:a8:0a:00:1d:80:f3:85:a5:b2:54:93:7a:8a:
e2:2a:03:a1:20:18:c0:78:95:12:82:aa:7c:2a:2d:b9:ac:83:
f5:58:b8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:43:41 2025 by rpki-client