Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a333030303a3a2f33362d3336203d3e203631353932.roa
File: 323830343a346333343a333030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier: lqXD9ymCjitLQCUcl1so8sXbiHz4xEsM9k/W+WLPlSM=
Subject key identifier: AA:08:49:04:7C:27:5C:CA:C0:5A:F5:A3:2F:CD:DD:C6:38:CC:89:45
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 3A371600A27EE7DBCA961D9A45A56D94CF986EFF
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a333030303a3a2f33362d3336203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:03 +0000
ROA not before: Wed 12 Feb 2025 14:26:03 +0000
ROA not after: Wed 11 Feb 2026 14:31:03 +0000
asID: 61592
IP address blocks: 2804:4c34:3000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:37:16:00:a2:7e:e7:db:ca:96:1d:9a:45:a5:6d:94:cf:98:6e:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:03 2025 GMT
Not After : Feb 11 14:31:03 2026 GMT
Subject: CN=AA0849047C275CCAC05AF5A32FCDDDC638CC8945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:c2:28:96:fb:81:dc:42:47:80:0b:9a:3e:
b8:b3:63:a3:e5:06:29:0d:81:a4:29:83:22:2e:19:
c4:ae:c8:5d:47:11:3d:a5:a5:96:63:1e:e4:58:8e:
fb:82:80:d0:6f:f6:07:2b:90:7e:1e:b0:05:41:5a:
68:7a:19:fd:a6:64:76:9b:40:d9:13:a7:55:5f:17:
a5:cd:0d:e4:77:8d:f7:59:4f:b8:63:18:a9:5b:12:
b3:5a:5c:cd:17:17:fc:ee:ae:3a:e5:1d:4e:fc:3f:
e3:f8:82:4f:02:56:87:a1:a9:d5:b9:dc:cd:c3:c1:
f5:c4:23:0d:82:b0:0c:d3:a1:f4:08:26:d7:ed:8a:
31:c0:44:e5:7a:6c:ae:6b:50:08:7b:ce:85:1d:8c:
95:08:73:34:14:08:bd:95:ea:51:19:19:08:34:4b:
fd:17:c3:39:9e:c0:8a:3c:83:d3:26:db:b8:ad:7b:
8f:df:c1:54:01:c8:c3:4c:83:27:4a:5d:fa:b5:35:
77:9c:a6:dc:97:e3:93:84:31:1a:df:9a:5c:7c:79:
92:a6:39:e5:29:0f:2d:01:f8:8b:0b:62:0c:82:df:
42:21:b8:3d:88:ff:8a:96:23:12:44:6d:ed:a5:92:
61:ee:2f:d6:4a:fe:0a:22:89:45:f4:9c:e3:69:96:
7c:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:08:49:04:7C:27:5C:CA:C0:5A:F5:A3:2F:CD:DD:C6:38:CC:89:45
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a333030303a3a2f33362d3336203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:3000::/36
Signature Algorithm: sha256WithRSAEncryption
19:4e:ca:49:f2:1f:eb:c3:99:4a:06:8c:a2:91:f1:f8:34:18:
76:7f:06:62:a6:49:57:c2:96:b9:4d:88:9a:92:12:3a:be:52:
4f:04:00:71:a2:16:29:50:08:c9:91:43:df:70:ec:d9:9e:ed:
a0:77:b0:9e:f0:01:09:45:e7:2b:3e:1c:a0:d7:91:db:55:90:
2f:9a:64:d9:97:58:cd:f6:1f:bb:fc:d9:80:44:69:d4:53:e7:
a7:e5:d4:4e:63:5a:11:a2:33:75:1f:95:1d:5f:c4:56:d3:9c:
17:0a:0e:cb:07:ec:d2:22:be:4e:04:d2:80:7a:a0:43:30:71:
64:fd:e0:af:56:34:89:03:f7:1a:46:b5:c2:e1:0d:86:e1:89:
b0:24:a4:c1:67:82:5b:4b:75:fd:b4:26:c9:67:ae:67:b9:38:
ac:81:c5:fc:36:30:76:d9:46:84:b8:fc:17:78:c7:26:8d:08:
27:0e:5b:f2:00:96:e3:75:f1:6b:22:53:ce:0b:b3:3f:cd:d1:
71:bb:3d:b8:73:c0:dc:1d:82:00:24:1b:e2:e2:d8:7a:d6:f9:
18:10:cf:91:e3:53:ba:0f:5a:d7:4b:a9:56:e6:a9:30:fc:82:
2e:dc:ec:e7:ec:be:4e:4f:a0:5e:46:ac:c5:fd:81:73:e8:25:
f1:2a:6f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:27 2025 by rpki-client