Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33342d3334203d3e20323636303439.roa
File: 323830343a333963343a3a2f33342d3334203d3e20323636303439.roa (raw, json)
Hash identifier: zSxraqblLT0a/Zt6lp2VR/IQU8RN339ugb+lYSP0Aj4=
Subject key identifier: 6B:5A:4E:36:91:65:4B:CA:E7:B5:D1:BC:26:97:4E:F0:7B:6D:21:75
Certificate issuer: /CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Certificate serial: 2F5A6AABBD749DBA09A90A0865996033B696597A
Authority key identifier: F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33342d3334203d3e20323636303439.roa
Signing time: Mon 10 Mar 2025 13:56:52 +0000
ROA not before: Mon 10 Mar 2025 13:51:52 +0000
ROA not after: Mon 09 Mar 2026 13:56:52 +0000
asID: 266049
IP address blocks: 2804:39c4::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:5a:6a:ab:bd:74:9d:ba:09:a9:0a:08:65:99:60:33:b6:96:59:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5
Validity
Not Before: Mar 10 13:51:52 2025 GMT
Not After : Mar 9 13:56:52 2026 GMT
Subject: CN=6B5A4E3691654BCAE7B5D1BC26974EF07B6D2175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:43:2e:f6:62:d0:21:1b:b7:1d:b7:1a:aa:0b:
22:fe:8c:c9:dd:6b:85:32:39:f1:4b:34:65:e4:49:
67:a4:a0:3b:96:f2:5b:5e:b4:4b:d2:9a:22:8b:72:
08:a9:c7:af:a5:54:78:1d:41:ea:46:53:4e:f4:db:
09:bb:68:e4:64:41:ff:02:7b:dd:e6:33:18:0d:ba:
cf:9a:6d:54:f4:bd:34:d7:4b:24:a1:48:9c:9c:88:
1a:43:e0:4f:f3:a3:cd:e7:14:fa:50:8a:e0:9d:6b:
82:a9:bd:56:c3:2c:33:ff:98:9b:64:26:34:a6:0c:
4a:af:90:d9:61:01:72:28:7c:86:d8:71:85:df:68:
9c:0c:b1:d2:2a:dc:61:b9:ca:b8:79:86:02:c7:bd:
cf:a2:66:c1:d2:99:9f:26:1b:f7:24:7b:44:32:42:
ed:cf:9e:89:15:97:44:4e:95:76:03:db:22:26:54:
04:67:f9:3d:7c:2c:24:fb:8e:46:a4:38:48:b5:ac:
6a:66:47:ce:39:ef:f0:de:48:42:39:f3:fb:07:5e:
7c:64:05:02:b6:ce:5a:6f:39:79:77:1f:d7:36:62:
fc:aa:98:8f:03:72:82:b5:d7:53:be:be:b3:93:d3:
e8:ce:b7:ce:d9:74:df:bd:0c:80:05:15:d7:58:b5:
15:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5A:4E:36:91:65:4B:CA:E7:B5:D1:BC:26:97:4E:F0:7B:6D:21:75
X509v3 Authority Key Identifier:
keyid:F9:C0:B6:AB:FD:2F:CF:A2:62:AA:16:0E:A5:0E:E3:AC:42:B8:48:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9C0B6ABFD2FCFA262AA160EA50EE3AC42B848A5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33342d3334203d3e20323636303439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:39c4::/34
Signature Algorithm: sha256WithRSAEncryption
2d:20:62:03:ac:4c:18:c1:f8:b8:cd:5c:b5:17:b6:dc:04:12:
42:e2:a9:56:a0:4a:1f:9c:3b:20:08:7d:69:80:1f:1d:e6:29:
c2:d0:8e:a5:9e:5a:d4:b2:b3:f0:c3:2e:83:fb:e8:e2:8e:41:
81:a0:b8:dd:55:9f:93:0c:c4:16:19:3a:22:30:9a:34:da:36:
93:fd:e5:cc:c1:4e:54:f5:03:1f:3f:55:f8:1a:ac:1c:c7:91:
d1:19:a1:5a:fa:30:26:5b:f5:45:40:e9:a1:b9:2c:e6:67:43:
3d:5f:0d:fb:bb:7c:7a:59:3c:ee:08:cc:b6:aa:96:01:38:fa:
7e:35:b7:16:a3:e6:b7:5c:ba:8c:16:9a:71:8a:24:40:5d:dc:
9e:29:55:da:2e:34:58:9a:e2:1d:bf:4c:1f:1f:6d:ac:c5:c8:
06:12:f5:6a:8c:b0:06:f4:09:e7:18:6e:a5:19:d6:02:69:df:
c2:c8:b6:77:ea:8e:3e:3d:4f:d1:58:8f:c9:fb:70:31:21:ee:
b9:03:77:84:30:14:b4:3c:94:32:b1:d8:b4:c9:00:44:12:a5:
fa:78:a5:8a:f1:cb:bd:21:9a:d0:ca:de:b0:77:82:d7:3f:6b:
61:6e:db:ae:19:d1:14:c8:88:fb:70:e7:5d:56:2f:1f:de:08:
d3:9b:5d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:54:49 2025 by rpki-client