Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d3332203d3e20323636303439.roa
File: 323830343a333963343a3a2f33322d3332203d3e20323636303439.roa (raw, json)
Hash identifier: HHhCVRhlMrSWoelu2dPCCKTT8VBrdeLCMKrLP4COBm8=
Subject key identifier: C8:AC:52:7A:33:74:FB:6C:F1:14:6D:5E:B8:71:70:C5:78:A0:A0:27
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 54847EC8018A08593C7B9EFAF26C0ECBA46E1D90
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d3332203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:51 +0000
ROA not before: Mon 10 Mar 2025 13:51:51 +0000
ROA not after: Mon 09 Mar 2026 13:56:51 +0000
asID: 266049
IP address blocks: 2804:39c4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:84:7e:c8:01:8a:08:59:3c:7b:9e:fa:f2:6c:0e:cb:a4:6e:1d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:51 2025 GMT
Not After : Mar 9 13:56:51 2026 GMT
Subject: CN=C8AC527A3374FB6CF1146D5EB87170C578A0A027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:85:ba:ea:f0:81:4c:2a:dc:73:04:27:23:ff:
ec:69:5c:4f:53:9d:04:14:de:24:32:2c:3d:10:c1:
08:e6:0c:47:dd:28:9b:fe:85:ef:9a:33:e4:e2:6f:
75:de:66:02:7d:c2:3a:c0:06:5b:d7:05:bb:1b:b6:
76:49:69:95:db:8c:67:5f:28:df:ea:54:f2:70:e0:
fc:4a:6f:d2:1d:0e:dd:4f:0e:14:68:2c:ef:ad:ed:
18:a1:10:f7:ec:e1:62:20:33:12:52:ed:3f:f2:05:
d1:bd:ed:9b:00:7b:2f:a7:7a:35:6e:7f:36:9d:0a:
e3:80:e0:de:55:19:db:aa:e8:34:72:d9:08:12:65:
3f:51:45:e1:c9:a6:55:fb:48:2d:78:e1:db:4d:69:
c6:de:b9:3d:28:28:22:b6:a4:93:35:54:87:52:c3:
56:f1:ff:b4:69:77:4a:bb:95:38:d9:2b:dc:d1:c1:
84:56:ed:0e:b7:55:eb:04:b8:54:ba:9a:36:62:f1:
aa:c8:49:0e:3f:03:d6:04:41:c1:4a:2f:41:03:c4:
fb:0a:48:9f:ee:d4:04:6d:a7:21:a9:22:34:26:f2:
c7:b6:0b:97:cb:e8:68:89:79:ea:c4:96:2d:30:ef:
a1:01:d0:6e:fd:7e:22:ed:d8:1c:9d:cf:9b:53:80:
ba:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:52:7A:33:74:FB:6C:F1:14:6D:5E:B8:71:70:C5:78:A0:A0:27
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d3332203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39c4::/32
Signature Algorithm: sha256WithRSAEncryption
03:62:8b:0b:06:be:60:1a:52:3a:9b:77:05:0b:37:52:21:01:
db:90:8f:be:eb:3c:57:d0:e7:2e:a5:3e:33:07:c9:5d:f8:8a:
72:b0:9c:d4:0f:73:fb:ac:65:50:63:c5:c5:bc:1b:df:d9:87:
3f:47:53:23:55:5a:51:3e:83:4e:74:c9:42:eb:05:70:73:53:
0c:6a:02:29:cd:67:a4:e3:52:5e:2b:cd:88:30:91:ca:fd:a1:
e2:d6:3a:34:db:f3:f4:f5:e6:28:83:aa:38:98:3c:33:fa:25:
7e:f0:f0:84:28:2c:ee:88:9d:3f:1c:99:f2:37:73:89:19:fa:
7a:1e:44:5b:1f:fb:7b:1e:9f:63:33:e7:ee:f0:47:d0:39:4f:
2e:83:18:53:24:b7:5a:c4:20:80:2b:a1:51:05:cd:56:d8:c4:
9e:3e:1d:ab:af:49:9a:ec:ae:a8:06:16:1a:97:82:dc:85:9e:
33:92:55:cf:08:2d:01:c3:ca:1a:dd:89:ca:e0:17:52:0c:3f:
4c:c3:ca:01:aa:b6:db:33:ce:1d:b8:71:ea:c1:e0:1f:75:80:
32:f8:2b:c0:3b:e3:05:08:b3:87:56:c4:5d:86:1a:6d:53:5d:
62:1c:e7:9f:be:8b:44:b2:1a:ee:44:6f:de:83:30:cd:9e:6c:
d6:24:17:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:29:09 2025 by rpki-client