Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa
File: 323830343a316562303a3a2f33322d3438203d3e20323634343434.roa (raw, json)
Hash identifier: rbjYgSymgqrMaINQFLjjRvbJHQYNsGQUp9cUYv1uMko=
Subject key identifier: FB:1C:5C:D8:35:AE:2D:67:CD:0E:61:4D:04:BC:C6:44:AC:3E:52:FF
Certificate issuer: /CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Certificate serial: 38B63E601D9D52CDA2BACCCB445DE27F47388698
Authority key identifier: 99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa
Signing time: Wed 05 Mar 2025 20:54:48 +0000
ROA not before: Wed 05 Mar 2025 20:49:48 +0000
ROA not after: Wed 04 Mar 2026 20:54:48 +0000
asID: 264444
IP address blocks: 2804:1eb0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b6:3e:60:1d:9d:52:cd:a2:ba:cc:cb:44:5d:e2:7f:47:38:86:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99448BDECD83ABA3D08AD5929B682374FE13BE98
Validity
Not Before: Mar 5 20:49:48 2025 GMT
Not After : Mar 4 20:54:48 2026 GMT
Subject: CN=FB1C5CD835AE2D67CD0E614D04BCC644AC3E52FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e0:1d:ae:b5:08:c0:9e:13:f3:2f:4d:e0:db:
0e:61:a9:8c:08:9c:0f:1e:6a:c3:9b:77:96:45:1e:
22:f9:dd:7b:07:60:e2:b1:84:07:62:8a:b0:8e:d9:
6d:3a:ae:b7:40:91:04:6a:45:0f:bb:da:85:c5:df:
f9:29:e8:4c:aa:93:a6:dc:9a:12:c6:c7:af:49:e1:
f7:e1:48:7f:cb:0e:53:60:50:ca:ef:5b:c3:8e:27:
02:b9:00:2d:d6:d9:77:c5:16:66:e0:d7:2c:56:a0:
48:e9:9e:93:f3:df:b2:1e:6b:3b:6f:01:16:5e:33:
e8:88:a7:9a:e0:97:27:49:0e:ae:cc:37:3d:ac:56:
0f:00:10:e4:c5:63:b6:f7:cb:cb:80:47:c0:c6:a5:
f1:57:a8:b4:3a:72:ad:ad:1a:07:84:fb:b5:25:60:
6d:16:c1:53:e4:aa:5d:b4:e4:ca:3b:bf:46:7a:ea:
24:11:51:ce:d4:fb:74:20:1b:b0:51:8d:20:21:5a:
93:a3:b7:66:61:fb:71:87:bf:5e:af:0e:f8:63:05:
1e:79:c5:a2:61:12:33:8f:4d:84:72:49:fa:94:d3:
ca:86:3e:e4:ae:4e:35:b2:d9:84:36:4f:1c:27:e8:
aa:ca:55:76:be:af:b1:36:40:ef:15:6f:56:05:ce:
0a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:5C:D8:35:AE:2D:67:CD:0E:61:4D:04:BC:C6:44:AC:3E:52:FF
X509v3 Authority Key Identifier:
keyid:99:44:8B:DE:CD:83:AB:A3:D0:8A:D5:92:9B:68:23:74:FE:13:BE:98
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99448BDECD83ABA3D08AD5929B682374FE13BE98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HxE5ZuxqjJkWw9hf4g9s1Rv24w4X4NypADJ3DpgogAqr/1/323830343a316562303a3a2f33322d3438203d3e20323634343434.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1eb0::/32
Signature Algorithm: sha256WithRSAEncryption
3b:2f:f4:80:21:fa:5a:37:0b:b9:0b:88:ea:20:f0:2a:c1:29:
a1:14:d7:5d:4e:f5:b1:d5:04:87:13:d4:a8:32:96:38:17:85:
4f:5c:24:a9:ec:6b:6b:42:b1:b1:52:77:d2:1b:f2:31:4c:2a:
32:fa:da:d1:3b:86:c1:22:24:d2:95:df:0a:c8:20:7d:76:b2:
43:c1:6c:21:6e:da:b8:01:6d:41:f9:f8:88:88:db:e8:ec:ea:
3f:50:eb:30:41:a6:62:8c:8c:62:0f:56:98:f6:73:44:d7:fc:
9b:4a:dd:37:1a:39:d6:22:eb:90:e4:db:a4:49:07:a1:17:92:
99:0d:16:1c:16:50:41:3f:af:fa:3e:1b:95:cd:df:19:35:68:
1d:02:41:58:42:df:a6:f8:37:32:78:f9:b2:32:b6:27:62:ee:
5c:d7:a3:49:c3:0f:dd:64:84:16:f1:79:7f:d8:23:77:3e:92:
cf:d6:bf:88:8a:53:85:6b:8c:58:3a:b0:66:99:38:b4:22:85:
4b:5f:1c:9e:06:83:3f:8a:e7:d3:8d:f6:37:06:c4:2a:61:e7:
2e:d7:3d:d4:c4:24:27:9c:88:fd:f0:a9:5e:c3:f5:fc:e5:54:
fb:2f:4e:40:13:61:86:7f:a3:8e:6d:21:3b:6c:6f:f0:68:2b:
f9:fd:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:33:53 2025 by rpki-client