Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa
File: 323830343a333332343a3a2f33322d3332203d3e20323635333737.roa (raw, json)
Hash identifier: OvKV79ss/YfzHe5jw7+dZigchffOJMhCmzwoBeRgnBk=
Subject key identifier: F1:CE:ED:B9:D6:6D:65:3D:D5:6F:11:70:29:7F:2B:42:47:B4:E2:01
Certificate issuer: /CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Certificate serial: 272BCB1F24C3E8D250A2A926B9318E0588F3CA54
Authority key identifier: A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject info access: rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa
Signing time: Thu 06 Mar 2025 22:52:53 +0000
ROA not before: Thu 06 Mar 2025 22:47:53 +0000
ROA not after: Thu 05 Mar 2026 22:52:53 +0000
asID: 265377
IP address blocks: 2804:3324::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:2b:cb:1f:24:c3:e8:d2:50:a2:a9:26:b9:31:8e:05:88:f3:ca:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A4C9B133126401D92DA5457C573EA0078BF42BA8
Validity
Not Before: Mar 6 22:47:53 2025 GMT
Not After : Mar 5 22:52:53 2026 GMT
Subject: CN=F1CEEDB9D66D653DD56F1170297F2B4247B4E201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:66:41:e4:4b:c0:4f:02:22:a0:31:11:7a:d2:
13:de:ec:a7:43:7f:2d:da:79:9e:b4:f1:79:01:22:
0c:f4:25:58:8e:d2:27:09:9a:3f:3b:27:ed:fd:09:
92:d3:67:76:fa:90:58:22:01:9e:86:8d:67:02:da:
a5:83:08:a7:23:f4:e0:fe:6b:95:5b:52:88:2d:e9:
68:9a:d9:3d:8b:7b:d6:b7:68:96:b7:94:55:34:94:
db:e9:39:62:8b:25:b8:14:1d:a0:0a:c8:84:5b:e8:
de:20:16:cd:31:05:99:c1:16:84:2d:18:c3:fd:bf:
1c:25:44:3b:41:ae:b6:b2:36:65:bf:f8:fd:97:16:
90:e4:38:0d:21:0a:19:39:43:fb:d3:90:8a:3e:e8:
4c:28:a7:45:fe:e6:c6:2c:45:1f:50:4d:06:af:82:
ce:1d:bd:26:c8:0f:c5:c5:90:49:3d:c0:ff:53:4e:
d6:14:e4:d2:76:37:92:a9:a7:6c:69:f3:31:a2:0d:
86:ea:8f:11:74:0c:e8:2c:fd:7d:34:ca:22:23:f3:
be:21:8b:49:08:e0:8a:ce:9a:65:77:cf:36:4d:45:
8d:da:99:f3:6f:1a:25:38:9d:ad:fc:ea:13:e5:01:
0f:7c:bb:b4:e0:3c:71:83:d1:1c:46:36:1d:d6:b1:
bb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:ED:B9:D6:6D:65:3D:D5:6F:11:70:29:7F:2B:42:47:B4:E2:01
X509v3 Authority Key Identifier:
keyid:A4:C9:B1:33:12:64:01:D9:2D:A5:45:7C:57:3E:A0:07:8B:F4:2B:A8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A4C9B133126401D92DA5457C573EA0078BF42BA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/He7bPZqear8UkEq3odf9SEZSYvbQ9uP444qhs5qZbJGQ/1/323830343a333332343a3a2f33322d3332203d3e20323635333737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3324::/32
Signature Algorithm: sha256WithRSAEncryption
34:74:0a:65:c7:05:5f:b2:b1:e8:d1:f0:58:6f:42:cd:ee:12:
c7:e4:7b:c1:e5:1d:34:79:b6:4c:ab:1b:d5:2e:d1:1d:17:8d:
25:0e:54:09:53:c2:f0:a4:b4:6b:86:de:2f:e1:90:de:5c:30:
63:79:3d:7c:fe:17:2f:5c:a8:77:61:cd:9a:0f:06:bb:dc:a4:
29:27:a7:e1:c6:22:00:0f:85:fd:a6:b9:7f:58:39:d3:fd:e5:
10:52:70:e0:d2:6e:89:99:07:19:31:e3:74:26:23:d9:9a:34:
db:a6:f9:16:13:08:35:7f:f4:c1:5e:d6:32:a1:3e:9c:80:28:
04:aa:39:ee:f6:71:c7:c0:46:b5:8d:b1:e2:39:f0:ab:62:9f:
3f:ee:81:4e:cc:33:6f:ff:bb:a1:2c:03:1e:cf:72:b4:52:aa:
2d:8b:33:49:42:60:9b:82:c1:b5:15:e1:bc:c6:22:1a:58:1d:
16:9d:16:3e:3d:de:90:83:79:b6:17:0c:a1:e2:60:29:e6:da:
24:39:8f:cb:fc:ed:62:c2:c8:8c:17:21:a4:d3:3d:35:55:ae:
fa:45:80:88:aa:00:66:12:23:50:26:52:72:30:56:50:da:96:
95:f0:5f:56:8e:36:3d:3f:66:7b:c2:26:5f:c3:e5:18:a9:65:
65:08:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 16:13:54 2025 by rpki-client