Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa
File: 323830343a6531343a3a2f33322d313238203d3e203532353433.roa (raw, json)
Hash identifier: TSVCWyXzn3F5dG8t0t97rlGemuufalbG4O+fv2ru2n8=
Subject key identifier: CA:9B:07:EA:84:C2:AB:09:06:8C:1A:0C:DF:20:F5:37:8D:A9:48:B9
Certificate issuer: /CN=52197FEC585FE6099BFE7D2C712776CD340C2B22
Certificate serial: 1E3B46FE7F15D5E930F6E396BE026A485BF6328C
Authority key identifier: 52:19:7F:EC:58:5F:E6:09:9B:FE:7D:2C:71:27:76:CD:34:0C:2B:22
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52197FEC585FE6099BFE7D2C712776CD340C2B22.cer
Subject info access: rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa
Signing time: Fri 24 Jan 2025 12:44:49 +0000
ROA not before: Fri 24 Jan 2025 12:39:49 +0000
ROA not after: Fri 23 Jan 2026 12:44:49 +0000
asID: 52543
IP address blocks: 2804:e14::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:3b:46:fe:7f:15:d5:e9:30:f6:e3:96:be:02:6a:48:5b:f6:32:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52197FEC585FE6099BFE7D2C712776CD340C2B22
Validity
Not Before: Jan 24 12:39:49 2025 GMT
Not After : Jan 23 12:44:49 2026 GMT
Subject: CN=CA9B07EA84C2AB09068C1A0CDF20F5378DA948B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:83:ab:3a:34:18:de:55:c6:7e:cf:8b:68:e8:
d2:56:e1:7b:55:1d:72:d7:49:6a:13:a3:42:5b:c7:
0a:b4:b9:ff:6a:fd:89:af:5a:b3:b9:38:0c:55:71:
57:95:16:02:ab:85:ca:55:62:4e:b8:3a:65:7d:9f:
b6:61:04:79:b6:22:e7:35:7e:63:0d:55:2b:80:8f:
ae:e9:05:a7:fe:fc:04:fc:fb:87:1a:bd:a1:32:eb:
ee:c0:01:df:de:ec:b8:01:fa:e6:6c:c8:c6:ce:c1:
13:44:1a:34:33:7f:ab:02:12:84:d1:f7:7d:d5:17:
b8:86:d5:bf:5e:65:14:69:b0:24:82:8a:37:20:34:
19:a6:15:60:c7:26:bd:6c:00:fc:14:f9:24:35:13:
fd:45:f9:9b:36:85:2f:d7:79:ac:02:71:a4:01:be:
4b:46:d7:11:f2:15:d2:ce:78:fa:4f:6a:81:d3:df:
43:67:ab:62:bb:42:21:45:91:3e:a3:a6:18:e1:ab:
29:2f:07:4d:ef:73:c3:52:3a:5a:4a:24:0a:33:2e:
b0:71:9d:39:9b:ac:fe:b4:ad:e8:dc:0a:da:c6:fb:
8f:76:fe:de:09:e1:31:2b:05:7d:82:7b:79:07:76:
a8:b3:05:aa:46:22:12:1c:c3:aa:0f:9c:e6:32:a1:
a9:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9B:07:EA:84:C2:AB:09:06:8C:1A:0C:DF:20:F5:37:8D:A9:48:B9
X509v3 Authority Key Identifier:
keyid:52:19:7F:EC:58:5F:E6:09:9B:FE:7D:2C:71:27:76:CD:34:0C:2B:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/52197FEC585FE6099BFE7D2C712776CD340C2B22.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/52197FEC585FE6099BFE7D2C712776CD340C2B22.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d313238203d3e203532353433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e14::/32
Signature Algorithm: sha256WithRSAEncryption
b1:52:bf:af:43:fd:88:ae:54:01:53:51:43:b0:23:b4:9d:40:
7b:69:6e:1e:db:a9:d2:e0:10:37:68:d0:ee:3e:d5:dc:51:47:
76:be:85:38:8f:37:cd:6a:a9:05:3c:fd:c6:6f:1a:6b:59:1c:
42:9f:01:37:f7:28:0f:a3:50:7f:9b:22:b5:ca:52:31:35:f7:
d5:3c:93:e0:fc:0a:b2:bf:39:76:cf:01:7e:db:8e:91:8e:83:
ee:ea:17:fc:37:4a:65:7a:cb:4d:9b:0e:ec:a5:d7:e3:68:78:
04:05:f8:67:c4:50:89:c4:c0:65:36:67:7d:bb:60:70:fb:24:
fc:80:06:01:a3:dc:b9:59:f9:cc:3b:f1:fd:6a:ea:e9:7f:f1:
50:7e:9f:10:80:e5:cd:c8:58:2c:83:e9:49:e2:3a:84:44:37:
7a:c2:ac:a9:4f:e7:6c:2a:70:53:c2:ad:74:ba:06:2a:cf:af:
f6:a8:28:1a:e8:41:e0:73:34:f6:bb:71:55:e4:04:2a:9b:1c:
2e:7f:74:0a:3a:d9:a5:09:27:09:f0:21:93:d1:4c:01:bc:ca:
b0:09:55:10:25:0c:57:84:a5:94:44:d1:23:23:8b:e9:4f:28:
a5:ce:c2:43:62:9c:53:d5:5f:4d:de:05:c9:0d:b2:cf:5f:ac:
67:8e:70:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:43:21 2025 by rpki-client