Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa
File: 323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa (raw, json)
Hash identifier: V2SiM1fUMPmFoBilwLS1QfTqZjVCErcGOSV1bvmhUYY=
Subject key identifier: 48:FC:B2:45:28:B8:D2:B9:8D:17:94:52:89:F3:3E:56:CA:8D:01:AE
Certificate issuer: /CN=3E268A146165B7580B59E044B59D275B5F824225
Certificate serial: 4F43724B58F97E60F8CE89C2A5837CEC81CF731C
Authority key identifier: 3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa
Signing time: Thu 20 Mar 2025 16:05:14 +0000
ROA not before: Thu 20 Mar 2025 16:00:14 +0000
ROA not after: Thu 19 Mar 2026 16:05:14 +0000
asID: 270877
IP address blocks: 2804:72d0:f000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:43:72:4b:58:f9:7e:60:f8:ce:89:c2:a5:83:7c:ec:81:cf:73:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3E268A146165B7580B59E044B59D275B5F824225
Validity
Not Before: Mar 20 16:00:14 2025 GMT
Not After : Mar 19 16:05:14 2026 GMT
Subject: CN=48FCB24528B8D2B98D17945289F33E56CA8D01AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ad:51:d4:d9:4e:a6:63:58:a1:b2:74:e2:84:
38:f1:6f:eb:7f:40:74:c5:9b:b9:ee:ee:6b:bf:ac:
79:33:10:59:fa:30:84:57:92:1e:1d:bf:81:70:63:
5b:ba:a7:05:4d:e9:7d:a0:ea:96:03:5c:30:cf:db:
98:76:45:cf:d6:d9:55:22:c5:fa:ef:d4:e2:a6:a0:
bf:33:0a:23:39:81:82:6b:dd:f4:bc:1e:fd:87:b2:
a0:74:08:c4:05:f6:b8:a9:34:36:10:0b:1a:af:ce:
71:d5:10:0d:ff:b9:14:21:5e:ce:44:88:f6:23:72:
f8:e7:93:34:49:66:0f:6d:41:84:03:a8:64:ba:47:
de:bb:69:18:b7:b4:d0:16:86:3b:5c:83:70:44:00:
ce:b1:35:ed:d5:0e:b0:5e:26:8c:ec:7e:01:59:0e:
3c:01:20:eb:58:db:a6:f0:74:bc:20:4a:00:04:ac:
61:eb:81:c8:bc:94:53:54:bc:62:27:82:07:8d:e8:
43:6d:0a:61:ba:9d:94:9c:ad:08:b5:98:92:bf:f4:
d4:c5:82:18:b5:67:eb:e2:10:2c:b4:2a:f2:87:d3:
47:59:08:16:fb:c0:da:c2:21:f7:3c:67:03:f4:e0:
dc:07:55:36:73:13:2d:99:50:9e:38:50:47:50:37:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FC:B2:45:28:B8:D2:B9:8D:17:94:52:89:F3:3E:56:CA:8D:01:AE
X509v3 Authority Key Identifier:
keyid:3E:26:8A:14:61:65:B7:58:0B:59:E0:44:B5:9D:27:5B:5F:82:42:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/3E268A146165B7580B59E044B59D275B5F824225.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E268A146165B7580B59E044B59D275B5F824225.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AqgRWNEWfsCJfN1w5gtHXosWhkLWZqqU2MLuR9xinAEt/1/323830343a373264303a663030303a3a2f34302d3430203d3e20323730383737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:72d0:f000::/40
Signature Algorithm: sha256WithRSAEncryption
4a:73:05:bc:46:08:01:0f:bd:4c:8a:0e:2f:d4:8f:80:e3:a6:
4c:99:42:08:1a:8d:7b:48:93:39:53:10:5f:51:c5:92:6a:ac:
6a:c7:86:5c:be:f6:bc:14:f6:49:a3:34:f3:ed:80:a6:e5:81:
35:5c:e1:5b:55:1a:43:bb:b3:06:58:0e:b2:13:79:5f:38:0c:
b8:ea:e1:9f:a5:36:b7:7e:f0:f3:21:a8:96:b3:e3:d5:66:f0:
ae:00:89:f7:c8:19:7f:b2:c4:89:d9:a3:42:d6:cd:53:d7:60:
49:56:6d:1a:23:03:02:ec:99:1c:c1:90:2c:06:82:dd:dd:b4:
db:90:13:ca:b1:83:45:53:42:83:f0:74:94:5b:b5:5c:3a:d9:
1d:97:5b:23:0f:fe:e5:bb:ee:6f:9e:d1:9f:75:46:30:77:da:
af:8d:25:45:fc:cb:ad:ba:38:76:ec:45:16:c9:d2:77:7f:53:
be:c0:d5:64:f5:4d:ac:6b:c5:8c:af:7e:80:60:63:42:7f:6c:
a0:c1:34:28:da:27:52:84:27:98:95:cf:8d:2f:c2:1b:ea:5b:
e8:66:1e:82:d5:79:30:e3:df:4f:c8:b0:f7:af:0b:27:cb:8d:
f6:2d:c6:a6:ab:46:15:d4:a0:76:ed:ce:ed:a8:e9:f0:8b:7c:
85:ea:6f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:09:47 2025 by rpki-client