Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
File: 323830343a373762303a3a2f33322d3634203d3e203532363339.roa (raw, json)
Hash identifier: o349UaGnmpYNa7t/kX8rmblh2WEubzLVjwP0Phpyigw=
Subject key identifier: 94:72:B2:35:0F:BD:95:58:0F:F3:80:93:22:CC:17:93:AF:48:6D:5A
Certificate issuer: /CN=BF45F5442049793490E484E18AD1516C8FDC8087
Certificate serial: 439596E2A8878CD707F615FB4FDC888A3834B300
Authority key identifier: BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
Signing time: Wed 05 Mar 2025 23:58:51 +0000
ROA not before: Wed 05 Mar 2025 23:53:51 +0000
ROA not after: Wed 04 Mar 2026 23:58:51 +0000
asID: 52639
IP address blocks: 2804:77b0::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:95:96:e2:a8:87:8c:d7:07:f6:15:fb:4f:dc:88:8a:38:34:b3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF45F5442049793490E484E18AD1516C8FDC8087
Validity
Not Before: Mar 5 23:53:51 2025 GMT
Not After : Mar 4 23:58:51 2026 GMT
Subject: CN=9472B2350FBD95580FF3809322CC1793AF486D5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:7c:b6:ed:e6:ae:bf:83:98:dc:a4:50:09:
8f:0d:80:09:5f:21:bf:40:ab:ba:35:ab:6a:3b:6a:
fa:a2:e9:e3:9b:31:81:d6:84:70:a0:f4:b0:57:79:
b7:d7:da:f2:7c:08:48:f0:48:25:36:e5:f5:be:26:
83:c3:3b:50:6c:9b:e0:c1:2c:ae:07:fe:34:3c:59:
50:c1:8e:34:1b:38:02:5b:8a:2d:0e:d1:3d:75:8f:
fa:07:ec:26:67:88:09:ff:4a:60:5f:b4:fe:17:f7:
40:a1:79:b1:1b:3b:8a:4c:9c:e0:80:5b:47:19:5a:
09:13:df:78:85:44:ef:15:bc:c5:f2:be:04:30:33:
7c:f0:9d:74:bf:b0:cf:37:4f:63:a9:86:4a:2e:ae:
49:25:78:5b:4f:42:c4:d5:05:d7:0d:c7:3b:6c:c6:
a8:e8:fa:5b:45:15:86:f5:8a:8a:88:e8:7f:da:49:
7c:f8:7d:73:4c:65:b3:27:d9:dd:d8:eb:c5:cf:4e:
50:6e:e2:e1:c0:ec:04:d6:b6:90:70:ad:d0:88:e3:
66:c4:75:76:78:15:a3:ea:ec:00:86:61:4b:3f:5d:
72:92:08:f7:fc:6b:20:f7:17:65:f7:c6:2e:6d:43:
c8:5e:3f:5c:29:fa:a6:4c:6f:5b:8b:38:cb:83:07:
51:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:72:B2:35:0F:BD:95:58:0F:F3:80:93:22:CC:17:93:AF:48:6D:5A
X509v3 Authority Key Identifier:
keyid:BF:45:F5:44:20:49:79:34:90:E4:84:E1:8A:D1:51:6C:8F:DC:80:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/BF45F5442049793490E484E18AD1516C8FDC8087.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF45F5442049793490E484E18AD1516C8FDC8087.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CC4KQtBQWxTj1nYa7TNhUvx9xma7ZryF1UkzNvarSXEi/1/323830343a373762303a3a2f33322d3634203d3e203532363339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77b0::/32
Signature Algorithm: sha256WithRSAEncryption
13:ef:e1:fa:35:18:ff:e3:0a:ec:03:68:aa:8e:0d:9a:07:4a:
9c:ea:69:da:71:7c:dd:bb:13:42:f5:cf:2c:14:ec:8b:7a:83:
4f:94:c4:73:5f:6c:a9:9a:54:0c:31:d3:cf:bd:d3:6f:38:5b:
c8:43:80:e2:64:0b:1d:99:cf:cc:0b:51:a8:37:80:b4:ef:ed:
44:d1:15:5c:95:c4:68:7f:92:fd:80:be:a4:6a:10:62:8b:df:
f5:40:a8:1e:a0:ba:1c:99:20:52:10:17:a8:a4:e4:bc:c1:fa:
76:02:f1:4c:f3:d9:07:6a:86:df:01:7c:34:6c:dc:d3:b8:2f:
dd:87:17:06:43:88:3d:0d:c8:8e:bd:ac:69:25:b4:7d:09:d1:
8c:2f:ec:47:af:87:43:e8:f2:0c:b2:57:e1:69:b3:6f:5b:e6:
75:b4:02:3b:23:dd:ca:31:c8:84:2a:f1:6d:93:51:ac:4a:14:
4a:93:2b:a5:a7:dd:bd:88:06:ed:52:bd:5e:84:e6:3b:e8:b8:
87:61:69:f5:71:d9:64:88:c2:d6:eb:fe:f8:be:84:b4:09:7a:
da:96:2a:ec:5c:79:b7:ab:c3:7b:85:e0:a5:ae:24:8c:01:9f:
e2:a8:f9:cc:1e:cf:6e:81:fc:04:5d:5e:fc:d2:ac:75:5c:57:
81:d9:d6:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:37:47 2025 by rpki-client