Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa
File: 323830343a313566633a3a2f33322d3438203d3e203238333539.roa (raw, json)
Hash identifier: XKB0nsVrZlWP0JWP/+JJkbuR7z0KEytY1sWrSToq2/0=
Subject key identifier: C3:EB:D0:0D:4F:DB:BC:23:4F:7D:40:F1:97:F7:E5:EC:11:74:01:D4
Certificate issuer: /CN=1FF4D84F5EA18738B398382BB8664840225008F9
Certificate serial: 0CC5B621766769194A51BA69BFC3F8476694DE46
Authority key identifier: 1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa
Signing time: Fri 14 Mar 2025 17:47:19 +0000
ROA not before: Fri 14 Mar 2025 17:42:19 +0000
ROA not after: Fri 13 Mar 2026 17:47:19 +0000
asID: 28359
IP address blocks: 2804:15fc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:c5:b6:21:76:67:69:19:4a:51:ba:69:bf:c3:f8:47:66:94:de:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1FF4D84F5EA18738B398382BB8664840225008F9
Validity
Not Before: Mar 14 17:42:19 2025 GMT
Not After : Mar 13 17:47:19 2026 GMT
Subject: CN=C3EBD00D4FDBBC234F7D40F197F7E5EC117401D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:ab:47:5f:bb:3b:b8:49:f2:7a:2a:70:53:
1e:e2:2d:d3:ea:5b:a2:89:51:00:fa:47:b5:e5:2e:
90:f4:3f:72:84:86:a1:67:18:04:ef:53:a0:f9:9a:
9f:3a:02:65:5e:1c:a6:de:6d:6c:7b:53:51:3e:fb:
d0:0f:d1:f5:20:8d:d6:eb:c6:45:c4:a5:48:2b:be:
52:50:6d:a0:05:ab:59:1a:47:fe:3d:9c:17:40:9e:
73:01:ea:40:cd:12:41:a2:34:99:d2:02:f0:40:e5:
14:0f:e4:61:ac:60:8c:c8:b5:d6:e3:8e:1f:56:3e:
f0:fb:c6:ab:d3:a1:b2:fd:3f:45:f1:1d:8b:b1:62:
7c:3c:57:9b:e4:74:e6:9c:e0:45:16:cc:29:a3:74:
af:f3:c2:b1:b9:ad:ce:a2:ee:77:39:ec:a2:dd:59:
e8:92:bb:d1:d5:fc:bd:1d:0c:26:40:40:4c:a5:5a:
a5:37:28:e3:83:41:4a:ab:58:2c:a2:ce:5e:d2:18:
63:07:60:99:47:e2:e7:3a:c5:c6:07:23:7c:c1:a8:
cc:53:9b:c6:36:2f:0c:a1:90:df:db:12:5f:d1:f0:
c3:7e:15:94:76:d1:45:64:78:b9:3c:bb:f1:f5:8e:
e5:df:4a:9a:0d:5c:d4:de:01:fa:07:08:4e:41:22:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:EB:D0:0D:4F:DB:BC:23:4F:7D:40:F1:97:F7:E5:EC:11:74:01:D4
X509v3 Authority Key Identifier:
keyid:1F:F4:D8:4F:5E:A1:87:38:B3:98:38:2B:B8:66:48:40:22:50:08:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/1FF4D84F5EA18738B398382BB8664840225008F9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1FF4D84F5EA18738B398382BB8664840225008F9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4FtDnpYJkCJsdtSqjYoh3RFwoCL9PAWCdJKSumxxJQi/0/323830343a313566633a3a2f33322d3438203d3e203238333539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:15fc::/32
Signature Algorithm: sha256WithRSAEncryption
41:40:42:32:d4:58:9b:d2:c8:a0:1d:ce:2a:89:ad:fe:98:d8:
36:18:1a:ed:ce:d0:72:84:5d:f4:a6:18:17:31:85:d8:a4:7c:
4a:ac:07:22:cd:12:7b:67:1c:0f:8e:1e:db:50:5c:39:ec:ea:
f6:69:f6:db:60:6e:46:c4:88:fc:36:8f:db:6c:7d:d6:ab:0a:
4c:e4:e9:ef:e1:d5:c5:fe:38:4f:d1:13:d6:89:47:ab:98:a5:
09:74:4c:4a:e3:ed:69:91:58:9e:3e:c5:32:a1:4d:98:96:96:
1c:52:ce:56:5d:e7:f4:fa:dc:49:e7:1b:43:63:c8:70:32:d2:
79:ce:ec:31:44:30:cb:74:e5:0b:48:db:87:ca:cb:22:4e:22:
8d:8c:95:f9:a9:53:ca:e4:f5:10:e7:9f:f0:90:2b:5a:99:bf:
b0:ce:43:83:3c:b5:c3:9e:55:3c:65:ac:66:f3:32:e6:0b:0e:
04:bd:da:1b:10:ae:68:a5:38:bd:15:f2:18:21:cf:ef:42:4a:
e5:7f:7c:59:53:5e:df:6d:ac:d0:f1:2c:dd:53:57:e3:51:66:
81:37:5f:f7:31:07:ce:e6:f2:07:b7:ed:93:b5:bb:37:b5:20:
85:ad:ed:4c:fe:c8:84:b0:4c:ff:a4:13:ac:fe:7f:93:6f:ec:
fb:90:ea:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:17:15 2025 by rpki-client