Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa
File: 323830343a346437633a3a2f33322d3333203d3e20323638313939.roa (raw, json)
Hash identifier: CAM/WYef7uiYYymXCh6rT5Ckopg0xyaL5/FxV+wW1hM=
Subject key identifier: FC:F1:E7:0D:1F:9D:A5:14:C3:AF:4F:4E:F1:A7:F2:7E:41:F7:E7:67
Certificate issuer: /CN=542D9C840562F883EEEB31312431BBFDA6230C9F
Certificate serial: 14A5A3572E035E81DFB9C9A41A57CF57B081F3BD
Authority key identifier: 54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa
Signing time: Thu 06 Mar 2025 11:43:40 +0000
ROA not before: Thu 06 Mar 2025 11:38:40 +0000
ROA not after: Thu 05 Mar 2026 11:43:40 +0000
asID: 268199
IP address blocks: 2804:4d7c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a5:a3:57:2e:03:5e:81:df:b9:c9:a4:1a:57:cf:57:b0:81:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542D9C840562F883EEEB31312431BBFDA6230C9F
Validity
Not Before: Mar 6 11:38:40 2025 GMT
Not After : Mar 5 11:43:40 2026 GMT
Subject: CN=FCF1E70D1F9DA514C3AF4F4EF1A7F27E41F7E767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1b:a0:ec:44:30:e3:94:a8:e4:6e:23:21:2e:
4d:6e:32:22:95:70:ea:fe:f1:4b:39:a9:f2:24:18:
60:8d:3a:bc:c3:a6:9c:c3:8f:7a:b4:80:a5:04:10:
56:17:e3:9e:77:58:14:47:2f:fd:be:d3:b1:ec:58:
3e:6f:7e:10:b0:9b:e8:a5:db:30:30:2f:ad:4a:97:
2a:61:3e:d6:80:a3:ea:9c:24:a0:66:96:6d:93:0f:
d6:be:ab:87:00:38:46:c9:e3:db:75:8f:61:18:d0:
dd:47:f6:a3:41:5a:de:22:40:23:45:9d:a1:b3:9a:
94:b6:7c:a4:b5:98:a0:b4:42:51:02:ac:64:8f:c4:
e2:b5:cf:6a:52:00:29:29:16:97:2e:66:fa:c3:26:
b2:ef:1d:aa:04:36:c1:02:d4:24:d7:85:e6:f2:08:
7a:05:3d:fd:bc:0f:85:4a:a9:24:28:b7:fb:68:13:
03:72:d7:f7:34:c9:15:b9:45:61:ad:67:64:48:eb:
04:4a:a4:1b:4b:54:17:bc:f4:30:8c:27:0d:a3:3f:
fe:1f:61:be:99:5e:f9:8d:45:f1:f9:e3:af:a6:a0:
8e:ab:83:8e:72:6c:48:c1:b4:db:76:47:c8:ff:8a:
42:b3:75:96:9a:1a:a9:c2:83:33:72:8f:37:ba:f7:
ea:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F1:E7:0D:1F:9D:A5:14:C3:AF:4F:4E:F1:A7:F2:7E:41:F7:E7:67
X509v3 Authority Key Identifier:
keyid:54:2D:9C:84:05:62:F8:83:EE:EB:31:31:24:31:BB:FD:A6:23:0C:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/542D9C840562F883EEEB31312431BBFDA6230C9F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/542D9C840562F883EEEB31312431BBFDA6230C9F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/1/323830343a346437633a3a2f33322d3333203d3e20323638313939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d7c::/32
Signature Algorithm: sha256WithRSAEncryption
30:0a:42:ae:bc:7f:60:63:69:af:d5:8a:46:a0:07:28:b1:e5:
d6:fc:86:d2:9c:08:b1:20:d3:ca:33:88:87:cf:c7:23:d8:25:
b9:f9:14:f7:8c:31:45:0c:3e:16:e7:0c:24:0b:56:7e:3f:4b:
9f:15:0f:37:45:bd:30:9b:a0:42:88:55:4e:7f:cf:b1:f3:c8:
03:39:14:1e:e5:d5:f9:e5:98:d6:77:1c:19:16:d0:fb:86:7a:
bc:34:ff:4b:0b:5b:15:ba:b6:e3:4d:18:b4:80:49:6d:d6:4c:
5a:9a:2f:98:d0:77:35:40:45:1a:e6:2e:c1:1a:d7:b7:ce:e2:
01:13:6a:06:db:c5:8a:a2:a8:e4:38:b2:9c:ea:ee:ca:00:ea:
6b:b3:75:57:9c:7d:44:90:67:30:c2:82:40:3a:ba:ed:e9:de:
40:8a:5a:ec:d8:65:db:bb:41:f0:d5:e4:e6:ec:d1:3b:54:2d:
4d:16:04:54:cf:9c:15:b0:b3:65:53:5d:cf:76:41:e0:c8:6f:
51:1c:15:85:98:91:b7:1a:31:08:33:56:f9:09:95:87:bc:9a:
c5:5f:76:b7:ce:86:e5:c1:f0:a2:f7:86:2c:5e:e4:18:b9:e2:
ab:29:49:12:8c:4b:e2:82:c3:6c:37:30:eb:1d:2d:f0:21:af:
09:da:6f:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:25:40 2025 by rpki-client