Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa
File: 323830343a383961303a3a2f33322d3336203d3e20323733363136.roa (raw, json)
Hash identifier: UpfB8pBvkI2mQPm5KU8bSQfX1WxMkbX7L04RTN5m9Nc=
Subject key identifier: E3:74:21:4E:26:07:AF:D6:1C:75:98:F1:70:74:1A:2A:C2:E4:28:B0
Certificate issuer: /CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
Certificate serial: 0F7BB6E11467D4D545AA43F73B1638C2FBD1CD98
Authority key identifier: 0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
Subject info access: rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa
Signing time: Mon 04 Dec 2023 20:25:42 +0000
ROA not before: Mon 04 Dec 2023 20:20:42 +0000
ROA not after: Mon 02 Dec 2024 20:25:42 +0000
asID: 273616
IP address blocks: 2804:89a0::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:7b:b6:e1:14:67:d4:d5:45:aa:43:f7:3b:16:38:c2:fb:d1:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D6388E38C347D3C53C94DB93B30EE0FA0C18A29
Validity
Not Before: Dec 4 20:20:42 2023 GMT
Not After : Dec 2 20:25:42 2024 GMT
Subject: CN=E374214E2607AFD61C7598F170741A2AC2E428B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c6:84:34:da:f1:6e:68:d9:53:64:2c:65:ab:
16:14:8e:f5:dd:c5:5c:dc:f5:44:00:44:4e:64:ea:
0d:f7:55:c5:4a:3e:ab:c1:81:ca:ca:43:65:2d:c8:
90:47:e0:07:77:b1:ce:cb:57:b9:ac:b7:5d:3b:69:
cd:9b:9b:e8:28:1e:69:d1:44:1c:b6:c9:63:45:b2:
cd:62:1a:59:da:12:23:b0:56:b7:f0:fc:28:59:28:
7e:2b:41:d0:4a:98:2d:20:96:a2:c2:ab:74:09:d1:
6c:cf:e6:77:b0:04:05:3c:92:41:aa:a7:2b:09:b7:
82:29:b5:ad:27:d2:da:2c:e9:ce:1c:50:c6:31:8f:
65:51:14:8e:8d:8c:ad:3f:58:98:61:67:93:f7:a2:
d0:6d:05:23:87:97:d0:f3:c7:b3:8d:c3:a9:32:5c:
88:3f:14:f3:3e:b7:26:7f:52:23:cd:ee:5b:55:51:
88:18:e0:36:ee:f9:61:12:56:35:18:01:97:94:42:
8d:b7:63:d8:8d:93:1c:70:88:8e:b1:cc:87:e8:4e:
27:29:dd:84:02:ba:32:b0:dd:1e:8e:e9:d1:bc:95:
dd:45:61:2f:80:77:fa:cf:14:16:c8:37:10:44:7b:
74:ec:fc:d5:07:e9:ff:d0:5f:c9:94:cc:22:39:fd:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:74:21:4E:26:07:AF:D6:1C:75:98:F1:70:74:1A:2A:C2:E4:28:B0
X509v3 Authority Key Identifier:
keyid:0D:63:88:E3:8C:34:7D:3C:53:C9:4D:B9:3B:30:EE:0F:A0:C1:8A:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0D6388E38C347D3C53C94DB93B30EE0FA0C18A29.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/PZ85QNozjP9SvhLH9tok2SWQcmvjPRDstmzeY4MstZB/1/323830343a383961303a3a2f33322d3336203d3e20323733363136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:89a0::/32
Signature Algorithm: sha256WithRSAEncryption
42:ed:ad:75:e5:4f:47:c3:81:4e:d0:b0:28:d9:eb:f4:5b:2f:
f1:83:8c:14:31:a5:e2:b0:4f:99:f2:3d:1f:1e:bd:37:4b:b2:
39:1d:19:23:aa:b0:54:04:47:85:98:d8:65:2e:76:1c:9e:95:
04:06:c3:06:4b:5a:2c:78:5c:05:ee:54:1b:24:56:28:3d:76:
7a:a7:2c:2b:b4:1b:5a:71:d4:b0:f7:61:5b:b3:5e:9b:60:2d:
19:64:26:2f:48:8b:be:e2:63:93:dd:32:3c:b2:50:8f:6f:8a:
10:14:be:71:aa:20:99:d6:81:a1:15:09:b0:0d:41:0a:17:93:
b4:87:0e:74:4a:1f:b4:b3:b8:3c:4a:92:cb:fc:e6:19:8c:4e:
eb:8c:4a:a9:da:18:b2:93:7e:31:4d:b9:2d:3f:ca:d6:86:ba:
85:b0:b1:ea:13:3f:88:fc:57:fb:98:b5:39:e1:44:2e:3e:1c:
45:f4:eb:91:3d:bd:1d:3a:3a:6f:0b:a2:78:5b:c9:4e:b4:58:
35:70:a8:88:b0:e0:ad:fc:fb:8a:da:af:1a:e9:df:8d:81:0d:
72:5d:a1:57:42:ba:16:7b:11:26:a4:98:a1:95:e5:98:44:17:
08:46:7b:86:90:9f:86:2b:3b:5b:2f:23:00:0a:2f:b0:42:13:
5d:34:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 23:22:29 2025 by rpki-client