Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/323830343a333433383a3a2f33322d313238203d3e203533313836.roa
File: 323830343a333433383a3a2f33322d313238203d3e203533313836.roa (raw, json)
Hash identifier: 1/1UFALIlLCxs81WEk531928Qkby3KRxWhdwchnepzQ=
Subject key identifier: AF:FC:E4:D2:68:2B:9A:AF:42:1B:60:8B:05:DA:D3:7D:C8:2C:53:80
Certificate issuer: /CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Certificate serial: 461CDC5276F213A132E478534E9405D3B1498241
Authority key identifier: 6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/323830343a333433383a3a2f33322d313238203d3e203533313836.roa
Signing time: Thu 13 Mar 2025 17:12:56 +0000
ROA not before: Thu 13 Mar 2025 17:07:56 +0000
ROA not after: Thu 12 Mar 2026 17:12:56 +0000
asID: 53186
IP address blocks: 2804:3438::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:1c:dc:52:76:f2:13:a1:32:e4:78:53:4e:94:05:d3:b1:49:82:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6F6E41F37AB48469D1CE88AD1951EB232B517B50
Validity
Not Before: Mar 13 17:07:56 2025 GMT
Not After : Mar 12 17:12:56 2026 GMT
Subject: CN=AFFCE4D2682B9AAF421B608B05DAD37DC82C5380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:ba:51:9c:be:4e:43:eb:d9:45:ad:07:e6:
fb:66:6e:c6:53:f1:18:aa:fc:85:81:c3:f8:10:55:
55:37:a5:67:3c:47:78:4d:04:33:1e:78:e1:a6:f5:
cc:0b:ae:cf:e1:9f:33:29:23:10:db:e2:74:e9:66:
93:1d:ed:81:fc:f6:32:f1:60:73:c5:29:db:c4:62:
ed:70:d8:e6:47:c3:21:95:2a:30:60:48:41:21:b5:
36:d4:9c:7c:eb:5f:7e:d6:55:1d:ce:88:a1:bf:4e:
17:1f:c0:38:23:af:87:86:4b:bf:37:70:72:7b:b6:
75:b0:ee:63:c3:a8:01:68:f7:3e:bb:68:13:d6:21:
81:57:8d:86:47:ee:bb:52:41:cc:d1:8b:b0:96:8a:
75:10:eb:23:44:81:6d:a9:17:5e:61:5a:5a:f8:9d:
01:53:dd:ca:c1:3b:65:43:78:bd:c8:4e:d4:52:6f:
ce:dd:8e:2a:50:8b:f9:f9:4a:0b:37:b9:36:9d:24:
b6:18:cf:da:e9:7a:ef:ab:9b:93:67:65:5a:69:a7:
d7:7e:9b:cf:d4:37:c6:89:0f:5a:f2:50:3b:27:f7:
01:15:24:fa:96:09:ba:aa:f1:bf:b4:92:10:bb:eb:
35:ba:3a:48:ce:81:9a:c2:d0:ab:56:34:09:41:10:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FC:E4:D2:68:2B:9A:AF:42:1B:60:8B:05:DA:D3:7D:C8:2C:53:80
X509v3 Authority Key Identifier:
keyid:6F:6E:41:F3:7A:B4:84:69:D1:CE:88:AD:19:51:EB:23:2B:51:7B:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/6F6E41F37AB48469D1CE88AD1951EB232B517B50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6F6E41F37AB48469D1CE88AD1951EB232B517B50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8ftYav9f7DCXpFnKyC7AVHyFUFSRtnmuVsyWFcy23HFW/0/323830343a333433383a3a2f33322d313238203d3e203533313836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3438::/32
Signature Algorithm: sha256WithRSAEncryption
9c:0a:16:c7:33:cf:1a:8e:61:82:d1:f2:ee:4b:2f:3b:24:21:
02:15:21:43:2c:f4:9e:90:db:db:54:4f:b7:b5:9a:87:c4:51:
ce:4a:6b:99:91:0c:c1:11:6e:51:1e:b2:6a:41:e2:4b:f4:fc:
50:39:91:d8:93:1d:1d:c8:79:6c:c4:8e:2b:e9:d0:59:47:7e:
6c:08:74:9d:f2:18:aa:40:44:46:1d:4b:26:b7:56:d7:fb:85:
df:7c:5c:79:85:b1:2c:82:75:a8:93:38:2b:76:69:24:4d:98:
51:94:59:60:7f:c6:17:b2:eb:19:11:f5:0c:b5:83:6d:c2:f9:
fe:b6:2b:4a:e0:1b:0d:d2:15:29:97:9a:75:90:3d:49:ea:99:
8e:a4:a0:c3:39:af:79:b1:88:b8:f0:2c:4e:6a:bd:36:bc:5c:
9f:c5:68:a9:56:52:eb:db:1f:8f:0f:af:88:a8:5e:e4:f9:f9:
90:f4:69:d6:ef:cd:5a:a5:f8:34:0c:ee:05:7f:4e:45:92:aa:
ed:58:b6:47:f8:24:77:6d:8c:5b:e5:6d:3a:94:44:7f:42:0a:
d9:30:1e:56:a9:4d:ff:b6:c4:14:a5:e1:46:f6:d8:e5:6c:ee:
7e:69:41:ca:55:28:0e:b0:2d:4b:3e:bd:9f:20:94:ec:8e:b5:
ba:21:ca:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:09:32 2025 by rpki-client