Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d3332203d3e203631383531.roa
File: 323830343a316134633a3a2f33322d3332203d3e203631383531.roa (raw, json)
Hash identifier: 5yTLGq8waJEGn0gRIF0pZ06rq8u5n8+C7dJePkN4F/g=
Subject key identifier: 14:64:10:22:9A:AF:02:F1:36:6E:D8:C1:70:D8:C8:31:10:4E:8E:E2
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 642817125CA867882B10E2525391DB24CF3B3A1C
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d3332203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:21 +0000
ROA not before: Wed 26 Feb 2025 19:31:21 +0000
ROA not after: Wed 25 Feb 2026 19:36:21 +0000
asID: 61851
IP address blocks: 2804:1a4c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:28:17:12:5c:a8:67:88:2b:10:e2:52:53:91:db:24:cf:3b:3a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:21 2025 GMT
Not After : Feb 25 19:36:21 2026 GMT
Subject: CN=146410229AAF02F1366ED8C170D8C831104E8EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:90:c8:d9:91:75:99:dd:5c:d0:57:e0:37:30:
4e:06:c0:47:95:c6:5c:94:ee:68:fc:e0:ea:e0:66:
84:cb:a9:11:8d:30:2f:0e:3b:ed:1c:da:bd:95:ac:
8b:db:1d:a4:b3:77:d5:ea:e2:b2:d1:7d:42:82:7d:
ec:36:fc:02:ea:0a:d3:f5:8f:c9:92:e0:ad:15:ac:
07:9e:59:85:10:d3:52:d9:5d:30:ee:73:68:6c:2b:
0f:60:27:2e:fd:64:f0:dc:b5:9a:7e:f4:3f:87:b3:
06:c3:10:37:48:79:15:50:cf:e6:30:1e:4f:33:04:
e6:a3:46:19:71:97:1c:18:bb:39:38:a7:9c:b9:f5:
53:40:78:40:87:2d:ec:83:6f:cb:fb:a1:a7:c7:09:
9c:c3:55:2e:28:3f:73:de:43:20:23:7c:e3:27:8a:
1e:9b:84:bc:12:82:45:db:fb:e6:a4:90:32:b7:ba:
26:a9:4b:55:ba:bf:a0:23:c4:52:13:2e:9c:c3:b1:
fd:c2:cd:53:83:cb:b2:a1:d5:3d:ea:4f:dd:54:4b:
8b:75:1e:28:10:eb:d7:4e:82:f4:7a:66:59:42:ce:
de:6e:51:a2:2a:85:22:59:be:86:fd:8e:e4:64:e2:
c0:59:b4:c3:ee:df:f5:75:46:1b:ba:67:c5:b9:b2:
04:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:64:10:22:9A:AF:02:F1:36:6E:D8:C1:70:D8:C8:31:10:4E:8E:E2
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33322d3332203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a4c::/32
Signature Algorithm: sha256WithRSAEncryption
0a:ff:9a:87:41:dc:8a:3b:15:ec:25:dc:50:2b:49:f1:63:51:
8d:4f:76:93:8c:49:99:13:3d:ea:ce:17:fd:67:9d:f3:51:be:
6b:b9:10:e3:74:ce:6e:7e:ac:8f:14:c5:47:f0:5e:7a:e1:2d:
98:57:66:b2:ee:9e:4f:f4:85:f5:49:c3:98:ef:90:36:c9:40:
72:d1:09:a7:26:09:d4:f3:90:f3:65:58:2e:2b:72:01:04:f7:
5a:70:8f:b3:f8:db:5a:b0:2e:25:c9:42:6a:be:3e:3c:34:8e:
ac:0a:97:4d:9e:17:35:f0:77:2c:65:39:c1:6a:0a:0c:ff:7b:
52:0c:e2:96:d1:c0:8e:61:0b:cd:f7:78:b9:8d:e1:a6:f7:6c:
1b:bf:4c:6d:25:51:e6:ef:cd:dd:33:31:bb:27:b6:dc:ad:6b:
60:89:38:90:0c:f5:ac:69:45:db:b4:30:e3:50:85:ff:a2:d9:
97:88:86:b9:ea:33:b8:f6:29:0b:38:ec:97:50:af:12:14:e8:
9e:d8:e7:71:57:7b:d4:d5:a7:05:0c:61:f8:e7:da:3d:a6:72:
b9:cd:11:ce:2c:df:7a:4a:1f:1b:1b:f7:bb:f7:73:3f:7f:bb:
2e:bf:22:50:1e:0f:ef:fd:ef:12:ee:ae:2c:50:71:c1:a4:c6:
fb:21:0b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:23 2025 by rpki-client