Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a383030303a3a2f33332d3333203d3e20323636303439.roa
File: 323830343a333963343a383030303a3a2f33332d3333203d3e20323636303439.roa (raw, json)
Hash identifier: QzO1KnrnH1DCVbkJWizjwzXJl0hXrGTLIWdLgUNVmk4=
Subject key identifier: FD:3E:54:08:D3:F2:45:AA:BF:67:00:21:F6:9C:C5:C5:7C:D9:70:80
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 07205104DF59D17225B18920D212CF69BD604316
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a383030303a3a2f33332d3333203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:51 +0000
ROA not before: Mon 10 Mar 2025 13:51:51 +0000
ROA not after: Mon 09 Mar 2026 13:56:51 +0000
asID: 266049
IP address blocks: 2804:39c4:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:20:51:04:df:59:d1:72:25:b1:89:20:d2:12:cf:69:bd:60:43:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:51 2025 GMT
Not After : Mar 9 13:56:51 2026 GMT
Subject: CN=FD3E5408D3F245AABF670021F69CC5C57CD97080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b5:a8:de:5a:59:70:75:2e:cd:d8:d9:09:69:
66:1e:e5:07:ae:14:a4:a7:5b:89:6b:89:c8:27:32:
57:64:15:c9:46:70:38:e9:43:1c:c7:a5:1c:6d:5e:
60:ba:9b:e3:d1:ac:d8:a9:4c:6a:2f:69:06:a7:69:
d8:f2:eb:9a:fc:cb:2f:cc:0b:19:fa:3b:57:73:d2:
fc:b8:82:0f:80:b2:fd:da:7a:d3:5c:ce:9f:73:88:
ee:22:cb:ec:95:37:68:e1:2b:81:53:57:b1:e5:a9:
22:3b:c4:3f:39:d4:80:bc:b5:c7:c7:f7:05:aa:ff:
92:29:4c:82:08:1a:1e:25:52:5d:a1:cc:81:a0:fe:
1b:00:77:e4:91:35:8e:1f:14:e1:f5:42:7c:ea:10:
4d:10:78:2f:bd:0e:d7:42:f9:a0:be:03:3b:db:c5:
64:3e:c4:9f:ef:e5:85:b4:ce:2e:bf:16:b2:05:fe:
df:f0:e1:0e:ed:80:99:a8:a6:98:81:6f:f8:70:b8:
72:7b:b5:9b:03:7d:cf:19:2e:e0:bb:56:dc:cc:eb:
56:9f:1c:b2:bc:75:08:f9:9e:db:b8:e8:5e:92:4e:
14:39:f0:fe:91:60:21:84:44:01:6e:9b:07:40:04:
47:ba:85:24:39:29:4a:66:e2:88:46:50:d1:48:86:
2e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3E:54:08:D3:F2:45:AA:BF:67:00:21:F6:9C:C5:C5:7C:D9:70:80
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a383030303a3a2f33332d3333203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39c4:8000::/33
Signature Algorithm: sha256WithRSAEncryption
92:87:5a:68:7f:67:c8:a3:b6:47:a7:6a:81:07:80:05:f3:22:
c4:c2:e4:f6:47:59:24:94:e5:3d:cb:b8:5a:3d:b4:37:3b:af:
5f:16:76:f0:6e:86:59:0a:36:88:2d:d1:54:11:ae:03:c3:81:
40:60:af:37:cd:30:63:96:f8:4d:4b:db:1a:b3:4c:a1:80:9f:
c1:17:a8:a4:07:75:c9:82:32:43:e2:2e:5d:4e:28:89:52:c1:
cf:77:6a:1d:fb:89:b3:3f:2e:63:fb:0a:df:59:42:8b:c9:0a:
e3:fe:ca:10:09:10:74:4d:bb:08:b5:af:01:45:d3:d9:01:80:
55:1a:c0:5f:ef:e7:b6:4b:4e:63:a5:52:77:8b:4e:6c:e8:29:
1f:d2:21:21:52:86:d8:56:34:53:c7:43:c7:b5:62:71:b0:cd:
2e:8d:76:6f:31:be:da:66:e5:f0:64:2b:bf:cc:15:37:5c:7a:
9d:06:54:e9:91:ff:74:0c:ad:80:22:0d:02:89:4d:cd:43:2e:
f2:a7:c7:f8:cc:e4:66:af:c8:e0:90:71:c1:af:cf:97:0e:56:
59:55:fa:6a:df:eb:bb:cf:a3:7d:a4:44:1a:24:f2:ed:41:e6:
35:c5:5d:cf:ef:af:92:5e:42:b6:53:86:1b:0a:ce:9c:0c:e3:
6d:f9:f9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:29:36 2025 by rpki-client