Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
File: 323830343a6366383a3a2f34382d313238203d3e203532353830.roa (raw, json)
Hash identifier: pYp5Mcg6/iB+L2zJ5cdoF6NHmoY/HgpIFJxitWA0ZSc=
Subject key identifier: E8:1C:FC:04:8A:1A:2F:CB:26:C8:A0:90:69:00:26:A3:E2:44:8A:C9
Certificate issuer: /CN=FF36173E097169BA044538B64258000B42FABD8C
Certificate serial: 5EEE5B70E7FF62D0E17C49E935F24FBCA7FA724F
Authority key identifier: FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
Signing time: Fri 14 Feb 2025 19:28:23 +0000
ROA not before: Fri 14 Feb 2025 19:23:23 +0000
ROA not after: Fri 13 Feb 2026 19:28:23 +0000
asID: 52580
IP address blocks: 2804:cf8::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:ee:5b:70:e7:ff:62:d0:e1:7c:49:e9:35:f2:4f:bc:a7:fa:72:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FF36173E097169BA044538B64258000B42FABD8C
Validity
Not Before: Feb 14 19:23:23 2025 GMT
Not After : Feb 13 19:28:23 2026 GMT
Subject: CN=E81CFC048A1A2FCB26C8A090690026A3E2448AC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9c:e1:dd:d9:39:0f:d5:9a:5a:0a:43:19:a9:
d7:16:9f:42:fe:ae:18:56:d1:85:b9:ad:0e:50:b5:
fd:99:10:d0:46:5a:fc:c7:e2:10:80:e4:b3:0c:7c:
5d:de:ca:46:f7:6e:d5:34:2f:87:3c:7d:bf:b4:af:
2b:67:46:53:90:05:4a:5a:69:fa:04:dc:20:d7:02:
82:7e:a0:1e:7b:99:35:1c:01:18:0f:80:aa:ef:3f:
42:d1:94:8a:f8:4b:b6:f8:ce:11:cc:db:5b:e1:73:
d0:b7:ff:f9:28:73:8d:ab:08:3b:69:7c:d4:97:6e:
2a:76:88:08:21:0b:74:17:1f:e2:b7:d0:2f:89:12:
4a:5a:32:4b:77:ae:41:ef:b0:cc:4c:3f:63:68:36:
28:67:5d:72:5a:25:d2:fc:08:34:a5:dd:e1:54:01:
54:09:ea:78:f9:08:49:e4:d1:0e:19:08:64:d8:6b:
92:b8:80:55:20:22:6f:bb:04:e6:d9:09:3b:e8:66:
a0:04:69:c7:10:96:b0:1a:22:0b:13:f5:76:aa:44:
8f:c1:84:ce:de:41:0c:aa:17:71:72:49:dd:20:e1:
87:05:1d:52:55:ba:e8:fe:46:b8:b2:0b:7e:bf:bd:
d6:f6:9a:10:5f:b1:c0:d2:cb:e8:f4:b4:19:9b:c0:
b1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:1C:FC:04:8A:1A:2F:CB:26:C8:A0:90:69:00:26:A3:E2:44:8A:C9
X509v3 Authority Key Identifier:
keyid:FF:36:17:3E:09:71:69:BA:04:45:38:B6:42:58:00:0B:42:FA:BD:8C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/FF36173E097169BA044538B64258000B42FABD8C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FF36173E097169BA044538B64258000B42FABD8C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HpT8jiBWmyN3RxnjGoPcYGpVRwuVF3dMVwRev3FNzti1/0/323830343a6366383a3a2f34382d313238203d3e203532353830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:cf8::/48
Signature Algorithm: sha256WithRSAEncryption
2e:a8:2e:46:ac:a5:0f:b7:50:03:20:b5:15:72:f9:41:99:5d:
cc:23:f2:17:fe:ed:dd:c3:74:54:7d:de:d3:5f:2f:53:7b:fe:
1b:83:a0:c1:a2:e8:05:33:23:5a:2d:8b:c0:c2:3c:02:ee:fb:
83:10:be:2f:9c:6e:a5:b8:2b:3d:19:43:43:86:7d:df:c0:dd:
b9:9c:a3:fc:ba:e2:c7:b1:cf:94:5f:1b:7a:3b:99:3f:db:52:
b1:7a:90:5f:01:97:35:d6:43:60:66:fe:47:ec:29:e4:62:7f:
98:3f:6f:ca:45:0b:38:c9:26:70:23:20:d8:10:77:b0:87:49:
e3:3b:ce:5b:d8:f0:42:51:35:95:a4:dc:29:99:12:07:7f:7b:
fd:ac:09:1f:61:12:9e:79:c0:cd:ac:98:a2:28:b9:a0:28:e2:
6c:7d:b6:9a:8e:21:b1:24:f6:5d:19:96:de:1a:5f:eb:8a:65:
7a:ae:75:5a:8b:08:63:5a:85:1b:99:5a:c6:f7:ad:0b:79:f8:
45:1c:28:77:6a:86:f8:8f:a7:20:c1:08:63:80:5d:63:45:86:
11:60:7e:70:18:f3:bf:5a:32:e6:d9:3b:32:16:82:ce:5c:f5:
2d:44:d0:10:9f:e7:ce:6d:20:e9:e1:2c:46:6d:30:4e:2e:5d:
df:3a:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:25:03 2025 by rpki-client