Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
File: 323830343a313337303a3a2f33322d3438203d3e203631393031.roa (raw, json)
Hash identifier: YJyXY86R5T1PqUhzBw4EcR5VyRFsFodVqAl6n4h/KO4=
Subject key identifier: 47:F6:EF:A1:EB:9A:B4:20:CA:D2:04:BC:F3:34:A8:D5:F0:52:1C:25
Certificate issuer: /CN=4FEB85108E86A307A90034950C74C7A6630768F6
Certificate serial: 2F1CDD05F096FFE082E106E10625A9039DFD002B
Authority key identifier: 4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
Signing time: Thu 06 Mar 2025 17:33:27 +0000
ROA not before: Thu 06 Mar 2025 17:28:27 +0000
ROA not after: Thu 05 Mar 2026 17:33:27 +0000
asID: 61901
IP address blocks: 2804:1370::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:1c:dd:05:f0:96:ff:e0:82:e1:06:e1:06:25:a9:03:9d:fd:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4FEB85108E86A307A90034950C74C7A6630768F6
Validity
Not Before: Mar 6 17:28:27 2025 GMT
Not After : Mar 5 17:33:27 2026 GMT
Subject: CN=47F6EFA1EB9AB420CAD204BCF334A8D5F0521C25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:64:db:b6:cc:22:87:09:e0:4a:f0:b9:49:3d:
4d:5a:de:f1:ba:a4:85:5d:df:6d:fd:a9:c8:35:eb:
ad:a8:02:e0:1f:a5:65:5c:65:3a:88:92:e2:12:a0:
48:91:94:f7:71:78:0f:3b:0c:8a:31:11:e7:82:78:
a0:e5:46:20:71:74:11:c9:76:72:97:84:7c:52:47:
c1:82:5c:61:e3:f7:94:71:83:9f:bf:27:47:b7:05:
0c:5f:ec:2f:57:66:71:0a:7f:10:f8:58:94:06:b0:
d2:57:76:33:66:fd:f3:1d:44:eb:66:3e:c8:07:f4:
31:18:16:b0:9a:66:36:ae:f1:8c:18:55:04:8a:39:
22:2f:61:19:04:08:48:e4:0c:4f:69:37:f5:7a:d2:
2d:09:47:7d:c6:a9:3a:12:c8:61:52:95:67:2a:a2:
fd:63:0c:3d:e7:a3:54:71:30:39:d5:3b:6b:a4:15:
f2:20:d2:4a:d3:52:4b:53:59:20:84:3b:fc:08:92:
5b:17:2d:55:74:84:3e:c4:17:74:3e:cd:00:83:49:
78:b9:3c:f1:52:c8:25:87:a9:23:29:e6:6d:3b:3f:
73:4c:e4:a3:32:c4:2e:e5:5d:e1:fe:49:62:ae:3e:
58:38:a4:a9:13:00:b6:ad:46:c7:fd:8d:8d:5a:fd:
d8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:EF:A1:EB:9A:B4:20:CA:D2:04:BC:F3:34:A8:D5:F0:52:1C:25
X509v3 Authority Key Identifier:
keyid:4F:EB:85:10:8E:86:A3:07:A9:00:34:95:0C:74:C7:A6:63:07:68:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/4FEB85108E86A307A90034950C74C7A6630768F6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4FEB85108E86A307A90034950C74C7A6630768F6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9qLRr6NxcxuSfWiL2yWVnXcRNN1e43t8b26z32h7dyvC/1/323830343a313337303a3a2f33322d3438203d3e203631393031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1370::/32
Signature Algorithm: sha256WithRSAEncryption
48:1a:59:a3:89:b1:9f:62:3e:fb:5b:86:05:8a:1c:4c:8f:d3:
b4:e9:66:6c:e1:30:d9:22:37:28:ab:0e:49:fa:c8:61:e1:a5:
cf:ef:a0:aa:a8:1e:bb:1b:59:b1:e6:20:44:3e:b4:75:2c:36:
c7:56:d0:36:19:22:0b:61:f5:f2:97:1a:cb:bf:a6:f1:5b:61:
6c:0d:1b:9e:36:be:c8:38:8c:bb:3f:f9:ed:f0:2e:85:bb:3b:
ed:4e:a8:83:8c:28:4e:f9:5c:86:a2:b7:91:7e:1b:46:21:b9:
db:2b:f4:4e:5a:c7:b4:91:b8:6b:81:6c:52:a1:36:c4:4a:47:
41:9c:d2:f5:c8:7e:b4:ab:a6:be:52:4b:83:27:6c:ba:c0:5c:
f5:d8:92:63:a9:c3:1d:46:38:ac:9b:7b:1a:82:30:55:13:68:
83:8c:e4:fd:fa:f0:d6:70:e8:38:30:3e:98:b3:a7:6a:da:bf:
5e:ee:35:d8:76:a2:c3:df:99:53:06:68:e3:fe:14:c4:7c:03:
06:a1:be:8f:8c:34:1b:3a:07:e1:a2:0c:76:74:44:6c:ad:b5:
f1:75:f2:60:f0:ed:f6:08:1a:9b:b1:95:34:e9:48:0f:6a:e1:
e3:2b:31:ec:d8:eb:de:42:05:ff:b7:47:ef:36:59:8b:9a:82:
9d:d0:43:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:27:38 2025 by rpki-client