Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323033.roa
File: 323830343a373762303a3a2f33322d3634203d3e20323033.roa (raw, json)
Hash identifier: TfhvZsVQPpPsqhjZSL944/an9xjOEkOdPioRPKsNvFI=
Subject key identifier: 7D:EC:13:C9:87:D7:E5:BE:C0:4A:4C:CC:6C:21:8D:C7:2E:F6:48:48
Certificate issuer: /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial: 03E060E94CE27BA6A0DF40C88B2DC68A5533F8A5
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323033.roa
Signing time: Wed 05 Mar 2025 23:58:50 +0000
ROA not before: Wed 05 Mar 2025 23:53:50 +0000
ROA not after: Wed 04 Mar 2026 23:58:50 +0000
asID: 203
IP address blocks: 2804:77b0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:e0:60:e9:4c:e2:7b:a6:a0:df:40:c8:8b:2d:c6:8a:55:33:f8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
Validity
Not Before: Mar 5 23:53:50 2025 GMT
Not After : Mar 4 23:58:50 2026 GMT
Subject: CN=7DEC13C987D7E5BEC04A4CCC6C218DC72EF64848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:38:d4:da:92:a1:0a:32:2d:1d:2e:9e:1d:3c:
00:fc:a1:15:a4:9f:80:c9:d3:c7:17:24:da:21:30:
86:01:5b:07:f0:85:25:bc:76:bf:a5:e8:e1:51:cb:
92:53:18:cb:b6:f8:46:12:fb:ed:10:01:81:e7:f2:
a2:74:7f:11:62:87:8d:d5:4b:ea:42:b5:5d:58:73:
9f:28:90:8b:50:70:e8:b7:39:ee:88:f2:bd:ea:20:
0c:31:cf:07:4c:1d:f3:f8:28:9c:e0:f9:7f:98:85:
b7:38:27:6a:fe:58:ab:fd:54:79:ea:79:eb:3b:52:
22:41:fa:85:dc:6d:bf:36:24:8e:29:87:87:47:b8:
83:e3:54:01:a3:36:56:3f:06:e1:ee:25:1d:bf:ab:
30:6b:1c:94:99:7d:dd:d3:5e:9d:3f:0b:bd:0d:d6:
cf:5e:9f:84:eb:2d:3e:46:08:13:69:f1:c2:37:e8:
57:81:8f:27:20:bc:9c:a8:6d:d5:54:98:2a:47:3e:
aa:9f:36:17:8d:dd:58:e8:3d:59:a4:ca:e9:28:95:
c8:17:72:37:0b:18:8b:59:5b:5e:44:7c:74:a4:1d:
fc:64:c5:cf:15:57:5a:bc:ad:a3:94:e9:f8:0d:5e:
55:b9:1d:aa:ed:8d:f3:18:6b:13:da:0e:21:e5:5a:
33:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EC:13:C9:87:D7:E5:BE:C0:4A:4C:CC:6C:21:8D:C7:2E:F6:48:48
X509v3 Authority Key Identifier:
keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e20323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77b0::/32
Signature Algorithm: sha256WithRSAEncryption
56:09:8a:b7:42:dd:49:af:02:27:6f:2c:c1:4d:b5:0e:6b:8b:
a7:15:a4:6f:42:7b:d4:76:7a:b7:a6:6a:50:30:19:4c:cc:2b:
de:db:a0:e5:f2:f0:f0:5a:76:a6:eb:71:61:ea:08:95:b0:d9:
74:72:19:dc:5d:c1:bc:a6:1f:53:aa:2b:6e:6c:33:71:d8:2e:
99:50:6d:e9:0f:8a:62:1a:be:eb:31:28:2a:5a:3a:94:ac:a1:
58:e4:a3:3c:33:70:a0:c8:58:a8:46:32:4c:34:f4:18:73:de:
50:45:47:fe:73:4d:f8:b9:76:d7:5a:15:d7:6c:8c:9f:d5:47:
f8:22:d1:0a:f2:de:e3:3c:00:cd:39:ac:a8:c0:cd:b1:5c:78:
61:a2:68:e1:18:8a:6a:18:0e:0f:3b:ae:32:64:ab:16:8b:a5:
56:8f:1f:13:fe:bd:90:6d:5d:68:fa:81:47:31:fe:d5:dc:c0:
d6:93:12:60:20:66:f4:3d:f8:68:73:1b:cc:bb:54:c4:7d:46:
4a:e4:fb:d1:0e:34:3f:a3:84:00:36:ac:d0:28:75:41:94:aa:
98:1f:47:fe:d2:2b:1e:0c:a6:8f:bc:b7:df:94:32:c6:65:28:
f3:0e:f9:b9:d0:28:b3:0b:bc:57:85:24:29:0e:0c:49:d3:27:
cd:db:aa:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:54:18 2025 by rpki-client