Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
File: 323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa (raw, json)
Hash identifier: wylYqK/I8ORnBHAfzNdnT3m+7s+K9zu/9ZfwIkw9X4c=
Subject key identifier: FB:A5:C6:8D:2E:05:0C:3F:90:5C:5A:31:23:66:32:48:7D:DE:65:F7
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 097CBD5029C6DFFFD5098DBCCAFFA9AF85988C2B
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:22 +0000
ROA not before: Wed 26 Feb 2025 19:31:22 +0000
ROA not after: Wed 25 Feb 2026 19:36:22 +0000
asID: 61851
IP address blocks: 2804:1a4c:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:7c:bd:50:29:c6:df:ff:d5:09:8d:bc:ca:ff:a9:af:85:98:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:22 2025 GMT
Not After : Feb 25 19:36:22 2026 GMT
Subject: CN=FBA5C68D2E050C3F905C5A31236632487DDE65F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:7a:f8:27:83:f3:54:60:42:2c:52:54:0e:
63:7a:24:f6:d7:60:6e:53:74:53:d5:18:8d:f8:a4:
10:e6:ad:b0:4c:ae:25:1b:80:3e:0c:8e:a4:32:87:
a6:ce:44:96:e9:a6:f8:72:b9:2c:50:b6:f8:1b:e9:
f7:1f:28:88:96:33:ef:b7:41:e3:8c:c0:fb:3d:bb:
61:7c:33:fd:c8:7d:2b:9b:fe:7f:0a:bd:e6:c8:f8:
21:97:e8:58:9f:aa:5b:94:94:03:58:da:a8:89:aa:
a8:c4:ae:e5:46:60:48:09:1b:2d:f1:f6:d7:6a:49:
02:81:c4:6b:6c:43:5c:d8:bd:7e:c4:d9:75:71:77:
b7:3a:fb:2c:fd:f7:94:3b:ac:45:a2:a1:6d:92:9e:
6c:5d:be:6b:ce:56:ab:d9:57:82:3d:91:3f:16:2b:
68:4e:e7:8b:b6:09:c8:ca:ad:05:01:9c:14:c5:1a:
b1:63:91:84:52:da:66:84:12:3f:c9:d0:4b:c7:cb:
27:9d:5c:78:79:a6:12:3e:af:76:ec:ba:e9:51:3a:
7a:67:f0:ce:5e:07:64:38:75:fe:e7:af:4e:e5:45:
c2:ec:79:c2:5a:e6:b2:e4:d0:3a:de:6e:b4:bb:b7:
6f:31:6a:8b:1f:57:e0:54:e7:4f:52:c0:81:15:4b:
5e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:A5:C6:8D:2E:05:0C:3F:90:5C:5A:31:23:66:32:48:7D:DE:65:F7
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a383030303a3a2f33332d3333203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a4c:8000::/33
Signature Algorithm: sha256WithRSAEncryption
4d:4f:21:1e:ae:83:f6:2f:db:eb:99:e2:08:64:00:6d:7c:37:
11:35:11:98:f4:7a:68:51:a1:e9:91:21:1f:9c:9c:1e:49:74:
da:f8:b4:a0:20:33:63:f8:28:84:1a:99:38:f9:43:a0:95:bd:
1e:92:49:f9:5b:bf:e0:08:99:bb:03:e6:93:05:98:58:6d:65:
e7:dc:19:bb:a0:dd:32:e0:50:ef:f3:2b:07:0a:43:b6:1e:8d:
87:84:be:6a:f0:8c:2b:61:46:36:fc:fc:8b:6b:1b:ea:95:60:
bd:7c:35:a5:35:a8:c0:ce:05:07:ba:2c:14:bf:be:0c:98:84:
26:1b:b8:7b:d2:79:5c:a2:9c:39:ec:fa:8c:4d:f1:5d:c0:06:
97:79:09:be:fd:31:cf:c5:4e:de:d4:c3:07:33:f6:f5:83:4a:
23:31:d3:68:83:82:fd:e5:6d:d3:2c:0d:36:47:a4:d9:98:9e:
04:ad:c8:1f:e1:08:99:eb:e1:1a:b3:d8:d2:c4:97:84:97:0c:
95:68:63:cf:11:19:c7:4b:21:76:cb:68:67:c3:0e:68:c1:4d:
82:22:49:ff:f6:1d:66:00:bd:84:67:95:1e:b5:02:9e:3b:61:
53:18:ab:0a:49:5e:89:a5:b8:03:90:2b:6b:61:8c:d8:d1:ca:
51:a6:8b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:05:18 2025 by rpki-client