Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa
File: 323830343a343936383a3a2f33332d3333203d3e20323632363235.roa (raw, json)
Hash identifier: UOjAer8TDgeM2LRf7zqn6v3Ks/2ExBnNcoj+fR7K9ks=
Subject key identifier: BB:8B:2F:06:24:BE:D4:98:8F:10:96:DC:01:42:E8:2F:FB:FE:58:DC
Certificate issuer: /CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
Certificate serial: 1E999590E9585F57FFFCC25184A125125BE7C5C9
Authority key identifier: F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa
Signing time: Mon 20 Jan 2025 17:19:57 +0000
ROA not before: Mon 20 Jan 2025 17:14:57 +0000
ROA not after: Mon 19 Jan 2026 17:19:57 +0000
asID: 262625
IP address blocks: 2804:4968::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:99:95:90:e9:58:5f:57:ff:fc:c2:51:84:a1:25:12:5b:e7:c5:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C
Validity
Not Before: Jan 20 17:14:57 2025 GMT
Not After : Jan 19 17:19:57 2026 GMT
Subject: CN=BB8B2F0624BED4988F1096DC0142E82FFBFE58DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:ca:27:11:d0:49:7d:f6:00:cd:7a:5c:1d:
66:06:f1:81:61:8e:e6:5e:53:47:66:0a:4c:86:46:
fd:01:33:b7:58:92:1d:e6:ec:e0:a4:15:a7:f4:31:
d5:72:ec:4e:15:1f:d2:d3:f1:a9:03:af:a9:0c:25:
db:c6:bc:56:f4:01:dc:b9:bf:1f:4d:ca:e7:c3:54:
d0:5b:f1:aa:c1:06:fb:f5:ea:c2:9e:f8:ad:e5:e0:
95:3c:eb:68:cd:ac:df:00:24:b3:ab:64:a0:ef:14:
62:6a:6a:a2:cc:8a:14:5d:cf:3b:68:b4:09:51:ca:
07:c7:1e:70:16:38:7d:a9:ce:53:d4:03:14:4f:3d:
25:43:ab:2f:99:6c:07:a2:4a:7d:78:50:72:20:99:
1d:32:b6:29:88:11:b8:41:bb:c1:dc:e0:14:f6:b2:
ed:75:5b:6b:90:98:c0:9c:ad:e3:c6:4c:b2:b4:94:
74:67:47:e0:d5:3d:b3:53:18:03:4d:ee:22:3f:0f:
34:72:47:8b:a3:6e:da:2c:92:b8:fb:ae:bb:b5:43:
9c:eb:e3:d0:eb:9a:24:f1:fb:12:c6:21:f0:e7:50:
57:9d:6d:b4:d7:ea:8b:d2:7b:6b:2f:1b:17:ef:a9:
f4:8c:0d:c9:e7:55:9c:d4:ba:35:ff:01:64:21:ae:
46:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:2F:06:24:BE:D4:98:8F:10:96:DC:01:42:E8:2F:FB:FE:58:DC
X509v3 Authority Key Identifier:
keyid:F0:90:C1:B1:E7:CE:0D:D0:BC:17:FD:70:96:B3:9B:80:E8:B2:53:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F090C1B1E7CE0DD0BC17FD7096B39B80E8B2531C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9Sk5mcnN9JasBkusbUy2FGgsQ3RoCop9p3UvprkHfCc/0/323830343a343936383a3a2f33332d3333203d3e20323632363235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4968::/33
Signature Algorithm: sha256WithRSAEncryption
31:6e:01:5a:cb:39:a9:8a:8b:31:03:58:c8:59:52:3f:4b:42:
0e:3d:07:2a:6a:5c:da:28:eb:2e:ec:f9:f6:4a:98:7a:3d:fd:
8a:48:cf:f6:45:6e:3d:79:d7:3a:ef:a9:94:75:3d:2c:8a:65:
91:a7:42:fb:d4:c5:c3:8a:d7:a7:8f:a8:58:77:00:ca:88:2d:
a4:b4:b0:42:a4:ab:64:b7:a7:ec:e1:87:03:cb:db:88:29:5d:
5d:98:b3:cf:ea:65:e1:46:52:19:f3:d1:ac:e6:0c:fc:50:1f:
7d:7f:60:0d:e4:f5:5b:82:c9:d6:67:a9:c9:88:5b:a5:7a:4c:
31:95:7b:88:65:d4:8a:9a:de:68:08:3d:62:0a:74:60:48:8d:
67:63:b5:70:55:16:a4:eb:09:f4:b7:b2:c7:c0:8f:1a:f2:ae:
9e:c3:31:61:cb:5b:66:4b:c7:af:2f:a1:3d:29:45:b5:f4:f3:
52:61:0c:8c:00:b4:79:de:ce:49:95:35:2d:28:b7:ed:1b:bd:
4f:91:a6:c6:71:8e:08:9f:4a:3d:7e:10:06:4b:cf:0e:c1:bf:
0c:30:c7:d2:8e:3a:02:00:95:58:22:af:87:3a:72:40:ba:34:
4e:98:38:72:63:97:23:1b:c7:7f:ba:da:7b:5b:59:93:83:d7:
96:b2:0e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:32:44 2025 by rpki-client