Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa
File: 323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa (raw, json)
Hash identifier: DyCXKE2nGT9j5rgpvbdYaWN/fpzOrZToABkXUhjKi+8=
Subject key identifier: C1:3B:31:81:77:FE:AD:F2:90:BE:63:3F:05:22:57:61:EF:DA:F1:BE
Certificate issuer: /CN=FE87A6B4A867FB246AF3F307808DC99592129232
Certificate serial: 4D03DD1320E5749FB20A8C695F31425957FBF100
Authority key identifier: FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa
Signing time: Fri 21 Feb 2025 21:50:48 +0000
ROA not before: Fri 21 Feb 2025 21:45:48 +0000
ROA not after: Fri 20 Feb 2026 21:50:48 +0000
asID: 270494
IP address blocks: 2804:6cd0:f110::/44 maxlen: 44
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:03:dd:13:20:e5:74:9f:b2:0a:8c:69:5f:31:42:59:57:fb:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE87A6B4A867FB246AF3F307808DC99592129232
Validity
Not Before: Feb 21 21:45:48 2025 GMT
Not After : Feb 20 21:50:48 2026 GMT
Subject: CN=C13B318177FEADF290BE633F05225761EFDAF1BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:c6:41:62:40:0f:5b:e5:17:88:42:30:66:
62:eb:23:73:3a:e7:b7:e0:b9:89:2b:24:5c:b9:94:
de:f8:69:af:7f:c2:a2:1a:01:2c:7a:1e:b6:2c:bd:
b9:6b:2d:38:f6:c5:1f:8e:0c:d0:58:38:58:2d:02:
5c:94:40:45:45:0d:d0:88:8e:62:59:43:38:8d:68:
c0:72:9c:e6:b8:44:78:27:23:e6:ee:2f:04:56:6c:
47:88:64:86:fe:7e:e1:4b:7e:50:ab:f0:6a:31:fd:
45:ba:0d:11:9e:74:b5:ca:da:3f:94:de:98:de:33:
06:8e:ca:15:fa:8c:85:81:e8:fa:06:b9:61:44:fd:
9e:05:68:0c:cc:37:b0:63:60:b3:6a:81:39:53:91:
2b:1c:22:8a:c4:c7:b6:fd:27:2d:e5:d6:2d:c1:ac:
11:c2:81:48:5d:3f:41:33:be:94:8c:2f:52:87:33:
10:d9:cd:21:1f:f0:2a:4c:6a:0c:f4:8a:32:e7:cd:
8e:61:09:7d:c9:37:6f:2a:45:ca:2e:cd:d7:0d:aa:
95:e5:cb:77:41:ff:93:12:1b:7e:ca:16:18:2f:fe:
ef:fd:f4:28:15:9c:2a:9e:5c:d9:ba:f1:5e:c9:a8:
98:10:3a:1d:3f:80:dd:9a:9f:b1:f6:fb:3e:e6:96:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:3B:31:81:77:FE:AD:F2:90:BE:63:3F:05:22:57:61:EF:DA:F1:BE
X509v3 Authority Key Identifier:
keyid:FE:87:A6:B4:A8:67:FB:24:6A:F3:F3:07:80:8D:C9:95:92:12:92:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/FE87A6B4A867FB246AF3F307808DC99592129232.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE87A6B4A867FB246AF3F307808DC99592129232.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CFuvBKgAASFkt6RN1xA2C6J4NLvpaubFFFrF5wunjXjA/0/323830343a366364303a663131303a3a2f34342d3434203d3e20323730343934.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6cd0:f110::/44
Signature Algorithm: sha256WithRSAEncryption
66:21:8a:a3:f9:ba:af:7b:f9:36:3f:95:2b:86:af:ec:ab:92:
53:50:26:7d:9a:76:53:ad:a7:ad:7e:f0:7a:db:91:57:b5:99:
45:a9:b1:d1:39:e6:9a:b5:ed:07:32:61:c8:a3:6a:65:b3:30:
f8:3f:8f:aa:55:bc:07:d3:1f:a0:2d:a2:23:2e:1b:59:9e:0f:
b5:74:b6:0f:31:ff:8b:db:91:37:83:bc:ca:0a:5b:b0:03:d6:
8f:5a:1d:6d:9a:7c:8b:bf:97:e9:8d:8d:68:7a:91:f7:26:dc:
a9:f0:eb:eb:d5:3e:1a:94:d7:09:92:ec:c1:8c:c2:1c:eb:59:
ae:24:0d:a3:0e:75:ba:8e:d4:b7:79:6b:76:1d:6d:f6:31:12:
c2:b0:98:8c:1c:46:ae:be:7f:e9:4d:cc:ca:f5:b5:a6:96:e9:
af:7f:8e:8e:b0:98:b2:84:5c:28:e2:a5:0f:f7:c7:99:20:e5:
ee:a2:83:bf:a3:5e:a7:ee:22:cc:8f:77:81:ed:0b:f2:83:5d:
19:86:9f:11:a4:b6:35:3b:ea:05:1f:c2:c4:d5:37:b6:65:ff:
59:76:6d:59:51:fd:65:8e:e2:36:fc:a4:87:7b:af:45:95:1c:
b8:f2:2f:e0:6a:78:1e:b7:47:9a:5c:d7:a3:c0:5d:e8:83:a8:
e6:88:dd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:15 2025 by rpki-client