Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
File: 323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (raw, json)
Hash identifier: JKjEt0hETRYlcDbmWQLZvhZ9xRQwxepiQuRghmhAfoA=
Subject key identifier: 6F:37:6C:3C:86:E1:4C:F8:B1:00:30:2E:8A:04:87:A3:11:03:D8:6E
Certificate issuer: /CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
Certificate serial: 1D145D6C5EEB9404F6FC41F71595FFB11F2331F5
Authority key identifier: CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
Subject info access: rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
Signing time: Thu 06 Mar 2025 02:52:43 +0000
ROA not before: Thu 06 Mar 2025 02:47:43 +0000
ROA not after: Thu 05 Mar 2026 02:52:43 +0000
asID: 268944
IP address blocks: 2804:5cfc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:14:5d:6c:5e:eb:94:04:f6:fc:41:f7:15:95:ff:b1:1f:23:31:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053
Validity
Not Before: Mar 6 02:47:43 2025 GMT
Not After : Mar 5 02:52:43 2026 GMT
Subject: CN=6F376C3C86E14CF8B100302E8A0487A31103D86E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8d:6d:af:d8:88:d7:77:b7:f3:04:20:1d:1f:
d8:1f:fa:b9:be:74:95:8a:85:fd:04:f6:65:bb:d8:
eb:c0:fe:a3:35:ea:d1:db:85:19:e6:bc:ce:55:e4:
8f:d8:b0:05:1c:86:df:93:04:08:03:41:fd:a0:21:
4b:68:70:fc:64:47:5d:8b:40:46:e4:82:cc:06:bc:
91:29:9c:15:a8:60:d7:60:35:51:bb:b6:8f:51:9e:
f6:86:f7:aa:5c:d6:52:c8:f7:13:45:84:5d:08:f0:
30:de:be:c4:3a:5f:8c:16:48:d7:66:ed:0a:49:23:
7c:b6:ba:09:ac:d1:54:05:8e:57:df:7e:96:8e:0c:
55:83:f7:10:4c:aa:f4:66:f6:15:91:17:8a:92:e5:
19:43:71:89:d1:40:51:75:80:8d:62:55:c0:31:83:
96:b6:06:d8:24:b2:ea:63:99:02:2d:2b:24:87:8b:
86:3b:35:3d:c8:86:36:d0:c7:69:4e:84:41:64:a7:
bc:f7:6c:3a:a3:84:28:2e:49:91:34:1e:e6:fd:81:
e3:0d:7e:dc:17:ce:4b:03:8a:96:a3:61:17:bd:e5:
5f:d1:7c:2d:e5:14:77:4f:ba:10:02:38:2e:3b:5c:
05:49:e9:8f:8b:bc:27:9d:fa:bb:a7:75:92:60:fe:
2d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:37:6C:3C:86:E1:4C:F8:B1:00:30:2E:8A:04:87:A3:11:03:D8:6E
X509v3 Authority Key Identifier:
keyid:CF:FC:3D:38:9E:E6:BA:B7:CC:D5:F6:60:D6:30:A8:BE:8E:1A:E0:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CFFC3D389EE6BAB7CCD5F660D630A8BE8E1AE053.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/1/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cfc::/32
Signature Algorithm: sha256WithRSAEncryption
70:4f:c5:d5:6c:4e:19:bc:da:1a:1f:87:a8:d4:3b:bc:f8:db:
0a:be:70:da:4b:d5:65:ee:b5:c4:0b:40:d5:68:93:9f:9a:66:
b2:c9:a2:40:d0:d4:ce:ff:86:af:b0:dc:63:e3:15:2d:3b:b3:
63:44:80:61:9b:9c:a3:ee:31:67:95:b5:ab:95:7d:87:f2:ef:
f7:de:f1:f7:83:64:52:2c:a3:a5:ef:27:19:9c:d2:70:fe:62:
97:e1:82:30:bc:72:52:57:5f:a1:d2:98:45:c9:85:bf:15:62:
67:23:78:c9:e5:0d:cf:42:5c:8e:94:62:e9:4d:47:2e:86:3f:
e8:7c:38:32:5b:76:dd:bc:93:ce:fb:74:e5:a5:06:75:35:ae:
23:a6:ba:5a:bb:a1:67:48:77:4c:97:ee:2f:5c:8f:30:f7:0b:
f2:1f:11:a0:47:94:e6:8d:e1:91:eb:c4:13:6a:1d:83:e1:a9:
72:cc:60:ed:d4:9f:7d:fa:12:0d:b2:bd:68:ca:06:43:67:d0:
6b:d0:81:55:72:2d:ed:87:9a:18:25:f5:b8:4b:fd:61:ef:19:
92:cb:94:a3:0f:5d:ee:da:fa:00:e9:29:30:40:15:c4:ce:76:
60:9c:bd:fe:bf:6c:97:96:96:97:68:d2:65:f5:34:6b:1a:28:
f7:c5:3d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 04:27:05 2025 by rpki-client