Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa
File: 323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier: Pn8UJ33HqPZ3Y8k/t3cG6pH8hijk3AY8H/VkEZXrpyw=
Subject key identifier: B0:AE:EC:60:27:9E:C4:D3:78:E2:4B:10:F0:D0:2B:06:F1:C2:DB:3E
Certificate issuer: /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial: 76F2D944821FB7CCE52C8EDEA04172C3A1A1033B
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa
Signing time: Wed 12 Feb 2025 14:31:04 +0000
ROA not before: Wed 12 Feb 2025 14:26:04 +0000
ROA not after: Wed 11 Feb 2026 14:31:04 +0000
asID: 61592
IP address blocks: 2804:4c34:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:f2:d9:44:82:1f:b7:cc:e5:2c:8e:de:a0:41:72:c3:a1:a1:03:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Validity
Not Before: Feb 12 14:26:04 2025 GMT
Not After : Feb 11 14:31:04 2026 GMT
Subject: CN=B0AEEC60279EC4D378E24B10F0D02B06F1C2DB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:fb:3e:db:a5:bb:04:c3:f7:0a:99:f8:4f:89:
df:ed:09:24:31:12:84:1b:23:56:86:04:a1:5c:9a:
22:8b:13:19:16:98:14:90:2f:bd:49:03:02:7b:bd:
f2:71:4a:a4:70:6b:57:25:b2:3c:83:d7:3e:73:89:
d9:94:81:5f:8a:57:02:9d:79:d3:42:68:76:61:b5:
84:62:7e:cb:4a:b1:8e:a6:3c:f0:2d:ec:e1:58:78:
9b:db:4a:5d:64:07:2e:95:6d:6f:ea:fc:bc:7d:50:
9c:fd:d7:6e:77:7f:cf:5a:c1:59:05:47:3a:bc:84:
e8:77:68:0a:8b:72:bc:26:58:e1:50:39:05:41:d3:
e2:b8:f3:64:bc:6e:0e:c3:a9:1f:21:46:50:5f:58:
8b:fe:f3:ce:e8:9c:24:15:62:db:9f:95:00:74:ea:
3d:a2:c0:6e:8d:9c:e3:6e:cd:ba:68:e5:76:b6:42:
8f:e1:16:d1:01:b8:dc:22:07:f0:ce:e5:d1:3b:55:
74:b1:cc:09:d8:5f:73:94:3a:0e:e2:22:e9:ea:da:
bd:89:33:39:8f:ee:c9:29:b3:a4:bf:b4:33:98:fb:
90:13:61:59:36:64:69:24:cb:14:bc:99:a5:b3:c1:
5f:cc:5f:0b:91:bb:a0:fb:cb:1a:f0:bf:23:54:58:
1f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AE:EC:60:27:9E:C4:D3:78:E2:4B:10:F0:D0:2B:06:F1:C2:DB:3E
X509v3 Authority Key Identifier:
keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a613030303a3a2f33362d3336203d3e203631353932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4c34:a000::/36
Signature Algorithm: sha256WithRSAEncryption
5e:ed:3a:2a:92:db:b7:33:e6:86:77:be:96:49:89:ba:ec:c7:
f2:7b:54:5d:8b:95:29:7b:42:90:a3:cb:e5:4d:a0:30:65:dd:
92:37:06:6f:4c:41:62:a7:8c:47:d0:5b:d2:39:ea:32:d9:80:
c3:7e:8a:4e:64:fe:d3:49:f2:20:c7:15:59:ff:e2:8e:aa:60:
9b:ea:e9:87:64:4d:f7:92:fa:b1:4b:5d:20:05:22:5a:d7:2f:
df:8b:9a:0c:53:3a:e8:1c:ff:bf:95:64:13:f7:14:03:4c:61:
fb:28:96:c1:20:1e:e3:ed:63:5d:ef:51:c1:97:40:3e:c1:46:
df:a7:79:b9:39:21:a9:09:b4:60:8c:e2:f5:e1:83:3f:71:83:
c3:44:6c:6c:2d:f2:6d:1c:25:b9:70:4c:7d:91:3a:62:2e:92:
e8:36:76:a7:07:d6:3f:b6:f4:d4:df:67:ef:70:e5:72:bc:33:
99:93:8c:61:af:93:48:09:36:9a:bd:47:be:d0:61:62:d1:13:
8a:1a:85:15:3b:27:1a:35:4c:af:36:7d:39:36:4e:cd:7f:54:
fe:b9:a2:5f:49:52:5e:3f:59:55:e8:93:b4:d3:80:27:d6:35:
cf:9a:41:08:22:19:d7:40:8d:5f:10:9d:b1:05:d4:fb:04:9c:
6e:60:2c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:53:18 2025 by rpki-client