Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a343030303a3a2f33342d3334203d3e20323636303439.roa
File: 323830343a333963343a343030303a3a2f33342d3334203d3e20323636303439.roa (raw, json)
Hash identifier: msnWM5kbnYuYPHz3ogpZv+wRUBWnvOkpbvHMM2dJxVk=
Subject key identifier: A2:EB:04:46:99:E7:87:F6:85:73:8E:DE:78:4E:A3:FA:A4:D5:9B:03
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 68D6BA5881ACC80289AC615D3B35808C3BD9E09C
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a343030303a3a2f33342d3334203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:50 +0000
ROA not before: Mon 10 Mar 2025 13:51:50 +0000
ROA not after: Mon 09 Mar 2026 13:56:50 +0000
asID: 266049
IP address blocks: 2804:39c4:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:d6:ba:58:81:ac:c8:02:89:ac:61:5d:3b:35:80:8c:3b:d9:e0:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:50 2025 GMT
Not After : Mar 9 13:56:50 2026 GMT
Subject: CN=A2EB044699E787F685738EDE784EA3FAA4D59B03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:89:fd:05:45:b4:05:4f:28:a9:a9:8c:1a:7f:
71:56:b9:19:9d:62:59:89:22:9f:6c:99:4f:e8:68:
35:d9:9d:31:33:af:18:73:d8:26:97:fd:32:6c:96:
1a:57:bb:c6:5e:d7:fa:bd:5c:17:32:cb:dd:4d:74:
d5:59:79:5d:65:b2:9b:2e:40:9a:69:76:4b:ca:65:
47:82:30:52:fc:16:7b:cc:b2:01:70:f7:91:3b:02:
fb:72:2b:78:80:f0:c1:d5:cb:ea:70:91:b5:c9:b2:
43:99:53:4e:19:18:76:7e:40:02:4e:5d:83:61:f4:
07:d4:5b:0e:c3:3b:46:c7:9e:c0:93:c5:47:1f:63:
7a:98:27:09:18:f0:6e:49:d3:48:0c:a7:77:5c:ea:
a7:ff:7d:05:f8:a4:88:75:98:f6:82:d0:f1:1c:52:
5b:e5:08:0b:d2:42:03:7b:1c:67:7c:d9:94:52:18:
e4:9b:8a:f8:f8:ee:bc:8a:f6:a0:9b:a2:a7:21:85:
b0:75:01:76:9f:11:20:2e:d6:8d:49:a4:f8:5c:74:
27:bf:41:a7:9c:c8:c1:1c:a6:86:e7:0e:d5:5b:2a:
6a:2a:e9:55:13:eb:c4:25:d5:c1:e2:23:36:ed:a3:
32:7e:3f:d9:6f:a0:22:53:f0:f4:9d:86:ba:4d:e2:
3f:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:EB:04:46:99:E7:87:F6:85:73:8E:DE:78:4E:A3:FA:A4:D5:9B:03
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a343030303a3a2f33342d3334203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39c4:4000::/34
Signature Algorithm: sha256WithRSAEncryption
bb:b1:cf:b0:e8:26:72:9f:15:13:ef:1f:68:db:c7:f5:9c:70:
da:c2:0b:37:65:0c:1a:32:29:e4:77:6c:9a:f5:74:98:f9:ab:
9d:e4:09:4e:d9:a2:0f:7c:61:b9:d1:25:8e:35:49:f7:cc:07:
ca:64:07:d7:66:af:12:38:ac:9e:27:08:9e:bb:3a:9b:bc:e1:
95:de:a7:e4:66:c3:4f:47:29:fe:fd:18:8b:f2:8c:8e:4d:c8:
3f:cb:4f:ef:fd:74:07:46:5a:b3:24:17:6a:9f:9d:59:95:f8:
f1:e2:9b:7f:aa:9a:0b:aa:83:09:c6:04:f0:69:fb:83:58:e9:
df:35:ed:26:cf:4c:2a:a9:a2:1e:3f:bf:8f:0d:e2:30:bd:d4:
d5:7c:ae:45:7e:3b:4c:d2:ab:fe:0b:0f:75:56:28:eb:86:51:
22:52:d4:fd:73:7b:7b:10:34:9a:59:25:71:c8:a1:78:7e:70:
50:24:e4:c4:4b:31:af:2c:52:73:fb:25:0d:84:45:23:30:c5:
49:26:1d:58:77:1a:b6:2b:2a:68:a8:e6:8f:a4:82:3c:45:99:
60:41:13:03:e3:ab:c1:94:d8:3f:9e:ca:3d:1d:d4:aa:7f:98:
2b:2d:bf:20:81:69:2f:bd:8f:95:c0:c2:d4:4f:9b:00:e8:3a:
66:7d:be:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:26:29 2025 by rpki-client