Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
File: 323830343a356362303a3a2f33322d313238203d3e20323638393234.roa (raw, json)
Hash identifier: BwS45nXi6oAW9Y7XhgzjQNNdqyquXPI691KCYKsk178=
Subject key identifier: 8A:12:B7:0A:94:9F:94:01:9D:9C:11:1C:2A:9F:30:49:E1:55:D9:59
Certificate issuer: /CN=99458C436EB47240ED6CE38C98F0C11325461970
Certificate serial: 445BA8E1CA955F60E04DD2F7655A968435BD49C5
Authority key identifier: 99:45:8C:43:6E:B4:72:40:ED:6C:E3:8C:98:F0:C1:13:25:46:19:70
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99458C436EB47240ED6CE38C98F0C11325461970.cer
Subject info access: rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
Signing time: Mon 27 Jan 2025 16:51:22 +0000
ROA not before: Mon 27 Jan 2025 16:46:22 +0000
ROA not after: Mon 26 Jan 2026 16:51:22 +0000
asID: 268924
IP address blocks: 2804:5cb0::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:5b:a8:e1:ca:95:5f:60:e0:4d:d2:f7:65:5a:96:84:35:bd:49:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99458C436EB47240ED6CE38C98F0C11325461970
Validity
Not Before: Jan 27 16:46:22 2025 GMT
Not After : Jan 26 16:51:22 2026 GMT
Subject: CN=8A12B70A949F94019D9C111C2A9F3049E155D959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:86:fb:21:70:99:1d:fb:71:25:b1:b9:28:
40:10:c6:8a:61:43:c1:c4:40:77:0d:23:71:77:47:
77:84:a8:58:7d:96:af:17:fb:7b:59:fa:ac:fd:3b:
0e:16:e0:ad:a4:57:a3:eb:af:03:30:f0:ad:ab:d4:
32:15:4e:53:05:30:19:47:f3:5a:ed:04:90:da:87:
5f:21:76:8d:bc:af:6f:35:47:f6:ac:13:51:f4:49:
33:03:12:8a:d8:d4:34:87:3e:79:b7:1a:f4:41:62:
32:1d:a5:58:04:1b:bf:dd:6d:16:d5:eb:f3:fb:b2:
8a:76:f1:00:21:45:56:c2:bd:f8:63:bf:2f:ab:53:
ad:aa:cc:e3:0a:08:a5:6c:fa:b8:33:94:dd:17:0c:
dc:2b:78:16:06:0f:9f:e4:12:a7:b2:92:c9:f9:ee:
15:57:f4:a8:73:2d:19:45:a2:3b:01:33:07:c5:15:
1c:6c:1a:f6:df:51:25:8a:fc:93:12:ab:bf:be:c9:
04:c5:57:f7:5b:5f:e1:90:1a:7a:6d:f0:2e:0b:3a:
c2:68:f3:dd:81:cf:31:fc:62:ca:91:97:1c:ba:fc:
47:31:e1:20:69:9b:9c:bb:03:ce:d4:5d:83:50:cb:
fb:09:06:84:91:74:e5:fa:91:84:33:a7:df:80:5e:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:12:B7:0A:94:9F:94:01:9D:9C:11:1C:2A:9F:30:49:E1:55:D9:59
X509v3 Authority Key Identifier:
keyid:99:45:8C:43:6E:B4:72:40:ED:6C:E3:8C:98:F0:C1:13:25:46:19:70
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/99458C436EB47240ED6CE38C98F0C11325461970.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/99458C436EB47240ED6CE38C98F0C11325461970.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/528Nrddr8YmBsCjcXJtuPmKv4hpxAdFhQaARnGJJgUpt/0/323830343a356362303a3a2f33322d313238203d3e20323638393234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cb0::/32
Signature Algorithm: sha256WithRSAEncryption
0d:d8:fc:e7:2c:c9:46:b5:d0:4f:c7:5b:ae:17:a3:51:ae:d9:
31:fe:96:6b:28:08:0c:96:35:42:27:f9:fa:d1:32:ae:0c:cf:
25:13:50:86:75:08:4a:8a:be:a3:59:50:82:1a:07:81:df:30:
36:c5:9d:7a:37:29:7d:cb:5c:ab:84:b4:60:24:08:21:54:d2:
5f:cc:53:c6:ce:67:3e:e0:62:68:66:0e:de:fc:97:3e:22:87:
4e:2e:32:53:7b:06:c1:db:d2:e7:02:e7:73:01:c8:42:02:2f:
4b:17:74:56:91:6d:69:5c:c0:47:ea:2b:30:24:e2:dd:5a:d0:
33:6d:40:69:42:fc:9f:e8:8c:79:33:82:5c:45:d6:df:e6:ff:
b1:2c:9f:c5:dc:e9:b5:7e:ad:ce:50:04:ea:dc:cf:c3:5e:ce:
b6:c4:3e:b7:da:b0:86:3a:5f:7d:5d:06:b1:9d:d9:5d:db:50:
a2:e5:be:5c:46:f6:21:ad:91:90:12:0b:fa:75:01:7d:08:00:
28:f9:90:c5:ad:77:2d:fd:fd:22:b1:13:8d:4b:d0:55:61:1b:
1a:87:05:ba:9d:73:46:ca:f2:cc:a0:67:22:de:5f:a6:de:7b:
a7:39:07:95:c3:05:e6:23:5f:b0:9c:4c:28:35:00:21:cf:bc:
8a:be:ac:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:41:28 2025 by rpki-client