Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa
File: 323830343a313238383a3a2f33322d3332203d3e20323633343832.roa (raw, json)
Hash identifier: TqGvt9OwRPmtKHCOKVNaY0wnwB8H7e+MhvhTcI1Xq/s=
Subject key identifier: CF:75:E0:D6:BF:83:4F:78:E6:25:6E:C9:31:AF:F6:78:7A:8C:33:5E
Certificate issuer: /CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Certificate serial: 688C0135A9ACFDB176A62FA3DE7515612F73B701
Authority key identifier: FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa
Signing time: Thu 06 Mar 2025 09:33:39 +0000
ROA not before: Thu 06 Mar 2025 09:28:39 +0000
ROA not after: Thu 05 Mar 2026 09:33:39 +0000
asID: 263482
IP address blocks: 2804:1288::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:8c:01:35:a9:ac:fd:b1:76:a6:2f:a3:de:75:15:61:2f:73:b7:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52
Validity
Not Before: Mar 6 09:28:39 2025 GMT
Not After : Mar 5 09:33:39 2026 GMT
Subject: CN=CF75E0D6BF834F78E6256EC931AFF6787A8C335E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e7:3f:75:d4:4d:a2:4a:c7:56:2d:52:0c:0f:
d3:e0:c7:51:f6:c8:59:02:7e:a8:9f:96:8a:98:93:
70:e8:9b:5a:d6:01:9c:52:5e:94:13:09:80:c3:83:
db:5b:ff:bd:84:ed:c2:7b:d3:88:ae:bf:b4:2f:0a:
08:5f:2c:e0:dd:be:36:52:3b:9d:22:ad:b8:38:ef:
f4:a6:59:f0:50:77:61:55:4a:f6:56:0e:12:fe:ea:
ba:de:14:11:2f:4f:ba:5a:6e:99:f3:08:e1:b1:6e:
b8:8d:81:a5:72:84:e8:6c:09:85:2b:2d:7c:a6:83:
d2:b4:95:11:d5:af:b1:a4:fe:f7:34:e1:fd:e9:ed:
73:e2:ab:ca:6d:22:7e:48:5a:dd:8b:35:83:80:15:
be:c9:dd:bc:54:27:1e:d7:97:6d:37:74:21:8f:80:
a7:71:46:47:80:63:74:19:55:47:93:e8:83:a8:b8:
fd:b3:fa:5f:86:75:18:5d:12:0d:d4:30:70:62:e6:
70:3e:5f:bc:63:c1:75:82:c9:da:32:ab:92:8f:2b:
6c:cf:5f:e7:b7:27:a3:22:81:46:44:39:36:39:1b:
79:a9:26:4d:73:7e:09:a0:8d:75:b6:24:6b:7d:a6:
32:44:53:ed:c5:ed:4b:6e:5b:1e:42:dc:1c:9d:18:
9d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:75:E0:D6:BF:83:4F:78:E6:25:6E:C9:31:AF:F6:78:7A:8C:33:5E
X509v3 Authority Key Identifier:
keyid:FB:F9:4A:FF:4C:54:02:7D:56:40:2B:FC:27:B7:A1:EE:29:FC:BA:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FBF94AFF4C54027D56402BFC27B7A1EE29FCBA52.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DHMQPB7KFTD3RWnQMQDzkXSp2fCQhkEFZSK3NYo5QDVs/1/323830343a313238383a3a2f33322d3332203d3e20323633343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1288::/32
Signature Algorithm: sha256WithRSAEncryption
2c:29:18:81:cb:f4:30:d7:43:72:be:b6:a9:be:89:f1:0d:35:
ff:62:0a:60:a1:5a:9f:db:7b:3a:01:29:89:21:d3:42:36:58:
1b:e5:00:25:c9:b2:16:bb:44:83:1c:3b:4f:88:19:ba:a0:b6:
64:f5:2f:86:fc:20:95:66:0f:00:84:56:46:78:6a:63:75:3f:
37:8d:bf:5d:57:4f:e9:51:9a:3a:9b:27:ca:4f:47:cc:67:d2:
f5:1a:f2:83:d4:d9:a8:90:86:3d:fd:fc:c3:b6:cb:9e:a8:a2:
8e:55:40:02:3a:0c:e5:0a:04:d9:fd:1c:b6:fd:af:e9:78:1d:
60:74:38:70:d5:d4:40:db:bc:9b:39:20:6e:9a:65:64:c8:e7:
6a:2e:1c:c9:86:cf:03:4a:f9:d6:88:f6:bc:0a:40:c9:12:6d:
fd:3e:6b:1a:11:ee:8f:36:53:d2:0d:ab:7b:0e:c5:90:bb:ec:
81:47:21:7d:06:b1:ac:f7:83:f9:0e:0f:e3:91:a9:e0:05:9b:
95:3f:93:28:ea:42:de:de:ad:f8:ee:9c:21:3d:76:3b:2c:01:
e3:45:15:a3:47:4a:f5:0e:7a:a2:68:74:b0:19:bf:0c:82:51:
17:f0:b1:ce:6b:83:6a:54:67:22:14:4b:a8:51:cd:8e:b8:4a:
88:a1:40:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 00:27:47 2025 by rpki-client