Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3332203d3e20323730363833.roa
File: 323830343a366663343a3a2f33322d3332203d3e20323730363833.roa (raw, json)
Hash identifier: b8rOdxAueUDBKIvJ4vG+pgUk9LycJhyEWxyDEcrksNo=
Subject key identifier: 42:8B:5C:B5:69:91:DD:8D:2A:59:8C:A0:26:69:65:B9:9C:41:DC:33
Certificate issuer: /CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Certificate serial: 72038B6246F89FF3142870D36106AA4A4523F277
Authority key identifier: 8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3332203d3e20323730363833.roa
Signing time: Thu 06 Mar 2025 03:59:07 +0000
ROA not before: Thu 06 Mar 2025 03:54:07 +0000
ROA not after: Thu 05 Mar 2026 03:59:07 +0000
asID: 270683
IP address blocks: 2804:6fc4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:03:8b:62:46:f8:9f:f3:14:28:70:d3:61:06:aa:4a:45:23:f2:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505
Validity
Not Before: Mar 6 03:54:07 2025 GMT
Not After : Mar 5 03:59:07 2026 GMT
Subject: CN=428B5CB56991DD8D2A598CA0266965B99C41DC33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:cd:49:2c:d1:20:f9:e6:a5:20:98:3b:5a:
25:7c:98:73:5c:28:c2:b9:8d:91:b5:7d:a8:1a:88:
f6:02:48:48:a2:1d:3b:97:51:ba:78:c9:59:1d:a2:
b3:f4:b0:84:b4:65:24:af:c4:84:46:44:c3:f8:c4:
95:6a:8e:f6:db:03:dd:98:8f:59:88:6e:21:18:b5:
fa:77:3d:e8:2d:a3:8c:39:c9:12:a8:eb:35:5d:1e:
63:71:1f:39:d0:45:41:f8:03:dd:15:e1:16:54:02:
92:79:ff:8f:34:71:64:eb:1c:94:58:b5:53:6f:9e:
08:ad:06:42:82:0e:51:3a:59:8f:72:b0:82:0b:8d:
e6:78:fc:77:1c:71:1e:bd:1d:bc:07:31:2b:ba:49:
f4:07:51:ef:fa:4d:f8:90:b1:08:85:08:93:4f:63:
1b:4c:4e:6e:84:5f:43:f8:96:8f:0f:af:dd:47:af:
e0:21:4a:18:9c:01:a4:88:ce:9c:de:1e:df:e9:9d:
7d:2b:f6:78:d4:2d:2c:91:dc:90:a4:45:18:2a:e8:
c1:1e:40:0c:c8:24:3b:44:03:95:24:e9:ff:b5:22:
d7:e0:aa:52:a3:22:50:e7:d0:aa:6b:99:43:45:4f:
1d:59:44:d6:13:29:42:e5:1f:56:ef:06:9a:9b:5b:
2d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8B:5C:B5:69:91:DD:8D:2A:59:8C:A0:26:69:65:B9:9C:41:DC:33
X509v3 Authority Key Identifier:
keyid:8E:A2:14:99:D9:F7:6D:A8:5E:EC:8D:8B:1A:8E:3B:06:9D:4C:75:05
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8EA21499D9F76DA85EEC8D8B1A8E3B069D4C7505.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2CxtKgVNj2TPgG28rNQzzVr4n215tVQExMggJAuNrHPy/1/323830343a366663343a3a2f33322d3332203d3e20323730363833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6fc4::/32
Signature Algorithm: sha256WithRSAEncryption
3a:64:8a:b5:0a:1f:92:01:0e:b2:4c:d1:83:20:ae:ea:83:51:
4e:d7:83:54:09:13:c2:00:86:90:af:f3:72:56:80:44:27:a8:
3b:2b:aa:22:8d:36:7d:d3:c1:96:57:ff:65:66:d8:1c:88:5a:
c9:19:b9:b0:3c:08:a6:48:2f:b7:42:ee:63:b7:3a:32:d3:b6:
10:c6:68:4a:57:8f:32:90:4c:64:2e:a3:51:c1:7b:50:ba:17:
0c:19:57:df:85:01:4c:5f:d8:5a:f2:0f:b4:63:54:f9:3d:1f:
76:54:a7:4e:48:d1:ca:66:9b:52:b9:44:0e:c8:b1:01:cb:41:
4d:d1:df:7b:d1:dd:b1:8b:a8:45:03:f0:27:37:87:46:b2:fc:
64:c0:e2:c2:f0:30:e0:48:11:60:5e:ca:55:8e:79:02:04:1a:
91:f1:18:b3:b5:73:d7:ea:22:c8:29:3e:24:c4:ba:b2:3e:13:
74:ee:a4:16:5f:bf:a0:1f:8a:dc:57:27:1f:95:1c:2b:93:cf:
10:43:e7:96:53:81:60:0e:0c:1d:76:8c:5a:fb:58:52:cb:37:
a5:9c:f6:a8:25:c6:57:a8:12:75:d3:0e:fb:0b:a9:2e:bb:b6:
87:40:19:38:0d:8c:6c:b2:b9:b7:b9:b8:3d:d8:5e:c9:92:d9:
1b:f4:b0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:30:33 2025 by rpki-client