Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33332d3333203d3e203631353932.roa
File: 323830343a346333343a383030303a3a2f33332d3333203d3e203631353932.roa (raw, json)
Hash identifier: J5nX+9l30vBtQJpo8yIgQ6kfky3HfL1Wmp1Y66Dx5lQ=
Subject key identifier: 98:E4:7C:3E:5F:B8:AB:87:EA:F7:E8:92:49:99:92:A1:89:37:DA:5A
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 36866BBD47802053CB44D6F7A3950CABF542C090
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33332d3333203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:03 +0000
ROA not before: Wed 12 Feb 2025 14:26:03 +0000
ROA not after: Wed 11 Feb 2026 14:31:03 +0000
asID: 61592
IP address blocks: 2804:4c34:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:86:6b:bd:47:80:20:53:cb:44:d6:f7:a3:95:0c:ab:f5:42:c0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:03 2025 GMT
Not After : Feb 11 14:31:03 2026 GMT
Subject: CN=98E47C3E5FB8AB87EAF7E892499992A18937DA5A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:be:c0:ea:12:e6:d2:45:4a:a6:f2:72:57:32:
cb:ed:96:3c:64:6d:5b:38:a3:35:59:13:5f:85:37:
58:0e:d6:9c:11:e3:bc:ac:6f:1b:5f:9e:55:98:9a:
83:47:f0:85:54:55:41:b7:a4:31:b8:1b:f6:b5:87:
79:1e:33:cd:94:36:0d:53:3d:ae:a3:ee:54:f7:09:
6f:95:4e:2a:04:d6:5f:b5:00:69:a2:88:15:4c:6c:
a6:4f:f6:7c:2b:81:99:73:45:43:99:7b:fc:f8:bf:
ec:10:61:06:d9:ac:c6:31:14:eb:ec:47:4f:33:13:
92:43:29:ab:8c:68:fe:f0:85:8a:ac:98:25:52:13:
61:6c:3d:40:bb:2a:79:bc:a5:2d:29:3c:31:8d:b2:
c7:b9:47:b8:fb:5b:67:3a:3f:31:4a:4a:d6:9c:f9:
4b:08:88:4e:bc:53:a0:7b:17:87:33:4e:b2:5f:96:
d4:7e:fd:2a:ba:d7:32:ad:b3:5f:35:f8:99:51:01:
ca:a9:7d:69:44:4f:2e:1c:bc:a0:7b:8c:d6:a5:53:
a8:8d:1a:29:ae:7f:44:5d:ee:20:25:31:78:7a:85:
5c:31:0c:38:4c:2f:2f:40:62:28:f9:a1:ba:9b:a2:
30:ff:42:62:37:60:cc:e8:08:9f:29:1a:18:13:fe:
38:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:7C:3E:5F:B8:AB:87:EA:F7:E8:92:49:99:92:A1:89:37:DA:5A
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a383030303a3a2f33332d3333203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:8000::/33
Signature Algorithm: sha256WithRSAEncryption
78:17:8e:f6:8b:5b:7c:b7:91:f0:13:af:19:4e:7b:bd:63:95:
56:32:02:fe:a5:5b:64:6d:ea:91:7b:46:05:e9:60:30:51:85:
11:c3:8c:7a:f9:71:24:cd:c3:5e:7d:0e:ed:0f:6a:f7:0a:4b:
ef:3a:74:a5:db:d8:7b:58:ed:b8:05:09:e6:c7:70:53:d9:f6:
ee:18:35:2a:c1:71:5c:87:3a:71:a8:b7:80:b3:0c:91:46:10:
1e:18:cf:59:be:37:01:21:23:cb:d6:7b:05:d2:f3:a5:c6:de:
60:ab:99:45:9e:32:75:58:d9:3a:2c:93:a8:dc:e6:79:6c:94:
5b:f5:fb:cf:e3:72:5a:bc:0a:77:11:79:6b:5a:01:5c:28:9e:
9a:65:15:1c:ab:01:7a:64:91:5a:57:52:8a:0c:9f:f7:0d:f1:
fe:bb:c1:28:46:08:0b:19:ae:6a:d4:71:35:75:e9:e4:1a:43:
82:63:58:49:bb:28:26:6c:ec:39:ef:eb:c7:b1:9c:fd:f9:b3:
f5:b0:0a:3a:f0:10:67:01:dc:d3:bc:97:73:db:ab:6e:b9:e6:
4a:74:2b:52:1d:55:5c:de:56:11:46:37:5f:a4:af:e9:83:67:
57:54:05:0b:9d:16:a6:e7:b7:34:fb:c0:ca:d3:70:aa:cc:86:
5c:8d:81:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:55:35 2025 by rpki-client