Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
File: 323830343a3266343a3a2f33322d3332203d3e203533313138.roa (raw, json)
Hash identifier: FLOV3J4ELHykDuxEoc8TQNldBLQr0uQtj2VTGfj6c0Q=
Subject key identifier: 73:39:C2:DF:93:2C:44:7D:79:E0:97:F3:C2:B0:A3:CE:0C:F5:0F:56
Certificate issuer: /CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Certificate serial: 6EAEA03126EE828DF0DA12739B7E746E810EDF44
Authority key identifier: AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
Signing time: Wed 05 Mar 2025 19:00:06 +0000
ROA not before: Wed 05 Mar 2025 18:55:06 +0000
ROA not after: Wed 04 Mar 2026 19:00:06 +0000
asID: 53118
IP address blocks: 2804:2f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:ae:a0:31:26:ee:82:8d:f0:da:12:73:9b:7e:74:6e:81:0e:df:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFF600EA088C0C0C3160D75A952506A94913C8A8
Validity
Not Before: Mar 5 18:55:06 2025 GMT
Not After : Mar 4 19:00:06 2026 GMT
Subject: CN=7339C2DF932C447D79E097F3C2B0A3CE0CF50F56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:64:2b:09:20:3c:14:c0:30:26:27:c5:4c:90:
23:62:a7:70:63:a0:73:57:a5:b3:19:f0:f5:1c:c1:
2b:6f:46:a7:16:b0:26:b6:9a:a1:25:c1:99:60:b6:
d3:2c:bc:0d:ee:01:30:eb:19:3f:00:89:6f:f2:7f:
42:5f:c3:25:b9:e6:ad:bc:32:d0:cc:b5:ed:91:f1:
77:ed:3b:69:0c:50:8d:f6:65:7e:a6:51:ae:6c:54:
e2:2b:48:ac:76:41:21:ab:75:72:eb:a6:1a:51:ee:
48:f7:63:57:e2:d5:23:1f:32:e6:80:b4:97:e0:95:
13:bf:1b:94:37:9b:ee:9d:55:8e:a6:cd:dd:80:2a:
fe:77:03:67:4c:4d:2b:39:4b:1d:87:75:d1:eb:0c:
98:5b:d3:ab:f0:98:a9:ee:0d:cf:f8:11:ec:1a:74:
d6:01:c1:ac:a0:d3:69:85:65:00:9a:c5:a3:0f:1c:
3d:a0:65:88:19:96:f4:4a:0c:91:7c:1f:db:1e:55:
00:c8:51:87:6f:cd:84:60:04:c5:64:46:98:18:96:
3d:15:03:ff:43:28:32:97:74:9d:06:c1:ef:d7:37:
27:32:8e:0f:08:35:75:52:41:6e:e1:6c:0e:ed:9c:
5f:63:fb:5b:8c:1a:44:65:68:10:d4:7e:ac:2a:54:
f6:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:39:C2:DF:93:2C:44:7D:79:E0:97:F3:C2:B0:A3:CE:0C:F5:0F:56
X509v3 Authority Key Identifier:
keyid:AF:F6:00:EA:08:8C:0C:0C:31:60:D7:5A:95:25:06:A9:49:13:C8:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFF600EA088C0C0C3160D75A952506A94913C8A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/1/323830343a3266343a3a2f33322d3332203d3e203533313138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f4::/32
Signature Algorithm: sha256WithRSAEncryption
10:fd:8c:4f:27:19:5e:47:9a:a4:ac:9a:0d:7d:20:0c:ff:46:
dd:5f:8c:7f:94:03:1c:77:d0:1d:00:d1:51:10:a5:91:f5:7d:
d2:cb:ae:93:b0:c4:c9:d8:3d:ae:82:8e:0e:da:63:b2:4d:b5:
4f:7a:3c:15:17:36:fa:81:66:ac:46:47:a2:bc:cb:79:5c:c0:
aa:fc:ef:fd:ef:4a:9f:7e:05:1e:7f:12:7d:11:af:bd:87:d1:
45:a0:fd:5c:35:d9:f4:79:72:90:2f:d8:0a:f1:ba:d0:94:79:
5d:01:ca:ae:9d:f7:53:35:f5:82:b5:9e:68:8f:6c:70:89:b4:
e4:23:2b:a0:f2:d9:12:89:aa:17:30:0b:86:92:09:e4:23:62:
9e:e9:ee:d4:88:c9:f1:7e:3f:99:8b:10:ab:01:23:4e:b8:e5:
47:87:33:33:34:42:7d:ee:3d:67:01:37:ae:36:21:9b:8c:81:
ec:ab:22:58:39:95:ad:c7:cf:a1:4a:b4:e6:15:4b:89:23:e1:
8d:a8:7e:00:32:38:f3:f9:7b:3c:28:e3:a2:cf:d9:56:7c:a9:
c7:37:cb:dc:46:f7:fd:3d:f8:48:a1:f7:83:68:91:2f:9b:a1:
80:d6:c8:f2:24:1e:ba:bf:ec:d5:f3:42:c7:a7:67:f0:73:dc:
10:3a:9d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:35:09 2025 by rpki-client