Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa
File: 323830343a316134633a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier: cB3fRPQeBcq4GRy0DPn/+TGZbiExz+Lhj8lcK+EiFgg=
Subject key identifier: CF:A8:EF:5E:E1:A2:A9:05:C8:A8:E0:A5:2A:71:37:3D:CA:45:92:58
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 3739A5FA4AAF214AA1588EC03408CE1B2E0F1843
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:22 +0000
ROA not before: Wed 26 Feb 2025 19:31:22 +0000
ROA not after: Wed 25 Feb 2026 19:36:22 +0000
asID: 61851
IP address blocks: 2804:1a4c::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:39:a5:fa:4a:af:21:4a:a1:58:8e:c0:34:08:ce:1b:2e:0f:18:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:22 2025 GMT
Not After : Feb 25 19:36:22 2026 GMT
Subject: CN=CFA8EF5EE1A2A905C8A8E0A52A71373DCA459258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d5:fa:e6:53:47:e5:90:dd:3e:9d:eb:62:fc:
e4:e8:f4:08:0d:98:0e:d4:bd:ad:6c:91:9d:99:c7:
2f:a9:78:17:90:df:2d:05:c7:74:6d:ef:b0:a1:57:
3d:37:bf:c0:61:92:dd:47:9b:bc:0f:ac:1d:82:da:
fc:49:3b:f6:3e:24:72:a1:87:12:23:ac:1d:bb:c1:
02:7f:2c:8c:8d:5b:e0:d1:f4:34:66:82:07:9b:a4:
d3:82:58:90:65:21:63:7f:75:89:63:56:52:d1:92:
0a:53:a5:0e:18:1d:73:2e:34:32:69:31:c4:80:3a:
4d:71:21:7e:d4:f7:2f:fd:a6:1f:98:c8:eb:6a:7f:
1c:17:27:4c:a4:75:16:ac:b2:c2:62:46:8d:b0:b4:
17:86:b1:6b:e0:a7:a3:0f:53:cd:e3:0a:46:d7:6d:
e3:00:20:1d:ce:46:db:a8:cd:ae:a9:a1:de:19:0f:
01:d0:05:7e:ce:f7:61:dd:24:2a:94:45:9b:c5:5a:
b1:63:03:76:8e:1c:3c:43:00:6e:6b:71:e9:f8:57:
0c:60:b0:06:f6:0c:35:7a:e8:f1:3d:e3:ca:f6:5b:
57:5f:81:83:5c:05:f1:56:86:d4:a5:98:d5:6b:a4:
17:2a:2a:69:ed:51:3c:fe:b0:0c:b9:8c:3c:fa:96:
34:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A8:EF:5E:E1:A2:A9:05:C8:A8:E0:A5:2A:71:37:3D:CA:45:92:58
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a3a2f33342d3334203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a4c::/34
Signature Algorithm: sha256WithRSAEncryption
0e:27:5f:9d:5b:fd:6b:2f:8f:ee:18:99:ac:c7:b6:58:e3:c5:
86:b4:ad:ef:c5:1f:8b:dd:c0:9e:16:26:86:a1:c1:5c:2e:8c:
b5:06:61:36:d8:b7:6e:31:3b:60:9c:5e:be:76:37:e2:c9:1b:
fc:70:08:fa:41:2e:5c:08:ec:fc:89:e7:4d:16:84:1c:50:da:
c5:ca:d9:a9:e9:c4:20:ef:a3:76:15:c0:ba:a7:d9:7a:4c:be:
e1:45:dd:83:69:08:bf:4e:c6:a7:f8:81:cf:ea:5e:0a:39:4e:
e7:0f:bd:32:eb:95:17:01:6a:41:e1:07:5b:22:69:24:97:34:
ac:ba:1b:e9:3e:dc:30:ea:6c:30:f1:1d:bc:06:c9:48:93:93:
0b:61:59:ea:05:3d:97:58:d0:33:69:8d:a9:9b:52:1a:cb:6a:
28:94:0a:fe:86:56:22:e7:36:87:8c:df:1e:ce:b9:28:1d:39:
de:d5:98:92:3e:a6:cf:5f:f6:ba:71:81:7c:73:3b:98:77:a0:
6f:87:95:ce:a3:56:a4:eb:ef:3f:de:ab:93:c4:2a:bd:92:47:
5e:40:7a:db:c3:d1:e0:b4:ca:65:7f:f4:6d:91:59:28:bb:df:
81:a2:fc:c9:37:22:19:5c:2a:a2:1b:ee:86:08:ef:04:e9:a0:
6b:84:ee:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:57:57 2025 by rpki-client