Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a316335343a3a2f33322d313238203d3e203631363530.roa
File: 323830343a316335343a3a2f33322d313238203d3e203631363530.roa (raw, json)
Hash identifier: JOs+kg9fJWtXEOhO2ow2rx4nkmG6CkNd3DpuIWhptNU=
Subject key identifier: D7:DD:04:FA:B4:85:E4:38:F9:58:F1:C9:42:F9:C8:F3:0D:86:25:5E
Certificate issuer: /CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Certificate serial: 5B9C9D1D33EF5F81DFDD4D80E5FF8749354F1E31
Authority key identifier: 3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a316335343a3a2f33322d313238203d3e203631363530.roa
Signing time: Mon 17 Mar 2025 15:03:41 +0000
ROA not before: Mon 17 Mar 2025 14:58:41 +0000
ROA not after: Mon 16 Mar 2026 15:03:41 +0000
asID: 61650
IP address blocks: 2804:1c54::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9c:9d:1d:33:ef:5f:81:df:dd:4d:80:e5:ff:87:49:35:4f:1e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5FFE4EFF6120F9AF6411651E451BC850DA97E3
Validity
Not Before: Mar 17 14:58:41 2025 GMT
Not After : Mar 16 15:03:41 2026 GMT
Subject: CN=D7DD04FAB485E438F958F1C942F9C8F30D86255E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:46:72:e2:29:0e:b7:4b:36:a8:1c:63:75:a1:
0e:07:91:e0:a6:30:a4:49:3f:f3:7d:ef:6c:c1:35:
fa:1f:94:e2:ee:ff:43:0f:2a:cf:5f:ec:cb:8f:80:
8d:02:1e:2a:41:ce:7a:cc:2b:6b:36:f0:8e:8b:e3:
21:5f:34:05:52:f6:86:87:ee:5e:b5:1a:08:d3:f9:
1f:03:02:e5:39:89:3a:a6:d9:ca:f4:33:91:c9:74:
12:fa:6c:de:b4:d1:24:17:66:8d:8a:1c:ee:a9:aa:
8e:4c:8b:4c:4c:bc:27:d2:81:83:9c:70:ea:59:66:
08:e7:4a:35:78:03:e1:4b:29:88:20:70:72:5e:e3:
2a:2f:9e:ea:e7:42:f4:48:b1:d5:f6:2d:63:f8:65:
cd:13:e4:3f:12:d5:bb:6d:75:61:f7:2e:cc:d2:49:
a4:b7:a1:e0:92:36:8a:9b:5e:12:10:6a:48:c6:5e:
61:ff:86:bd:48:da:26:b2:6d:25:f8:ad:9a:bb:20:
73:d0:dd:fa:04:4f:fd:57:05:1c:36:c7:42:ee:1e:
51:c7:55:86:5e:36:7e:f7:c1:ba:bf:e0:50:b8:1e:
3e:41:46:8e:dc:ec:43:56:e7:c5:56:89:6e:3d:ca:
c1:27:0f:6f:5d:b2:20:53:db:d7:3c:4a:f7:ab:38:
10:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DD:04:FA:B4:85:E4:38:F9:58:F1:C9:42:F9:C8:F3:0D:86:25:5E
X509v3 Authority Key Identifier:
keyid:3B:5F:FE:4E:FF:61:20:F9:AF:64:11:65:1E:45:1B:C8:50:DA:97:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5FFE4EFF6120F9AF6411651E451BC850DA97E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQzWMHW4dL8srzo7aH1Fn3seZQLqRss72W4r8UbRRQG9/0/323830343a316335343a3a2f33322d313238203d3e203631363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c54::/32
Signature Algorithm: sha256WithRSAEncryption
c2:af:a3:48:cb:a3:bb:5f:c2:7d:6a:fe:5d:de:d1:f1:84:8d:
9d:e8:f3:ab:db:b2:bc:27:bf:fa:d8:f9:23:a3:5d:ba:44:74:
e5:cf:27:11:d3:6a:a3:89:12:0a:f6:46:f7:b7:07:c5:9a:e3:
63:f5:1e:a4:a3:d5:68:b1:88:4f:de:bc:74:44:ba:f2:b0:2c:
e2:4d:18:cb:be:80:f6:a3:69:50:7c:64:08:f8:59:7e:ac:0a:
52:e1:7c:e8:b2:9f:32:13:0f:f2:59:15:0c:b6:4e:4a:7e:18:
96:7c:09:ed:77:1d:f7:59:59:6f:70:c3:d5:93:2c:7e:94:60:
76:e8:6d:5f:7f:75:50:ae:f8:7b:cb:6a:fb:ee:a2:70:74:7b:
d9:86:03:8e:b7:3f:80:61:0c:13:b1:82:a3:5e:24:7b:c3:65:
9f:8b:bf:12:6a:5b:0d:69:63:24:e2:61:81:bc:ad:e4:e6:41:
03:2e:04:c1:c8:61:04:aa:5e:8d:6e:1b:25:a9:21:89:2d:18:
60:e8:cb:64:ca:f5:74:3c:ad:87:b0:7a:03:e7:82:60:45:9b:
5d:37:24:63:bd:6f:3f:75:f4:51:f9:56:56:d7:90:50:62:a2:
cd:51:32:de:e1:f4:a1:49:4a:40:f9:1b:bc:7b:e7:2d:b7:fc:
7c:3f:2c:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:09 2025 by rpki-client