Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
File: 323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa (raw, json)
Hash identifier: hLo9RaOMxqhNXg4nMGEc1hN5dPqoNRHVcZodmgpUaN0=
Subject key identifier: 41:D6:DD:EA:5A:F6:46:BC:01:7E:04:0B:18:DD:E2:24:AE:A3:B4:A0
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 205D02EDE429ADD98970B68D67886812F68C0BFD
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
Signing time: Tue 01 Apr 2025 13:13:33 +0000
ROA not before: Tue 01 Apr 2025 13:08:33 +0000
ROA not after: Tue 31 Mar 2026 13:13:33 +0000
asID: 52721
IP address blocks: 2804:2664:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:5d:02:ed:e4:29:ad:d9:89:70:b6:8d:67:88:68:12:f6:8c:0b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:33 2025 GMT
Not After : Mar 31 13:13:33 2026 GMT
Subject: CN=41D6DDEA5AF646BC017E040B18DDE224AEA3B4A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1e:6c:30:de:0a:25:f4:ec:82:d1:a0:38:96:
c3:31:bb:b3:58:52:78:e9:16:c0:3b:84:aa:72:1d:
1c:bf:b8:9f:36:15:ee:e4:bb:6b:a3:49:4a:4a:68:
f3:2c:27:53:a7:86:92:b0:5c:23:52:97:81:84:96:
77:d5:fb:cd:ed:ad:25:99:b1:e8:28:f8:e8:8d:96:
bc:6a:97:b5:d9:26:62:d4:41:c5:ba:07:47:13:75:
6b:25:af:a1:41:ed:91:19:5c:47:f5:f3:f3:66:08:
42:6a:39:5f:9d:5f:0b:35:52:7a:51:8c:f8:36:88:
fa:fc:ea:3c:99:68:3a:2f:9d:3f:f0:5d:98:83:92:
7f:c2:0b:c8:73:b9:a4:7a:41:25:0d:39:71:f4:ee:
93:f4:6e:bd:e9:e2:7f:b3:7b:0c:e3:35:85:6c:b6:
76:a6:9d:3d:f6:c8:8d:a6:1a:5b:3b:ed:96:99:bc:
00:b6:9e:3b:ce:5c:78:b0:bc:64:df:5f:8a:b3:81:
74:ec:60:0f:dd:f4:6d:1d:85:da:90:bb:a0:d0:c0:
fe:bf:16:2f:b8:79:35:4d:47:1e:67:f0:0b:1b:21:
a0:7e:83:67:55:7d:e3:e2:fa:d8:11:88:59:2e:37:
2a:7c:e1:40:3c:00:73:f1:2f:94:33:ef:e6:4f:c9:
40:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D6:DD:EA:5A:F6:46:BC:01:7E:04:0B:18:DD:E2:24:AE:A3:B4:A0
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a323636343a383030303a3a2f33342d3334203d3e203532373231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2664:8000::/34
Signature Algorithm: sha256WithRSAEncryption
2f:39:40:4b:18:aa:03:c2:ce:e6:53:3a:f5:f6:60:e0:39:03:
ea:28:46:8a:da:84:04:84:5f:8a:48:f8:a8:48:ba:93:3a:2a:
73:bb:ff:26:70:68:73:b5:6f:c6:10:73:59:68:57:b2:98:c9:
49:e2:22:25:44:5f:31:96:e2:4e:e4:f0:f3:2d:0e:4d:36:f0:
af:b3:31:28:e3:4f:99:06:32:94:bc:cf:c0:a8:01:39:5a:e8:
b9:7f:4a:b3:61:6a:5e:0d:f8:8f:87:c6:2d:b2:cd:95:51:eb:
d9:ce:f2:4e:57:29:04:1e:32:16:a2:cf:a7:75:fa:66:9c:0e:
36:b5:75:c1:d4:66:20:25:10:c7:5b:ed:6d:64:e1:5b:bf:b2:
d7:52:bb:3c:52:4f:73:d5:ae:29:c8:6d:17:1a:9b:c1:99:d8:
11:d2:1e:2e:21:27:df:e8:9e:7a:dc:a4:9a:25:12:6c:74:5c:
b2:76:a4:c7:0d:1e:df:49:d1:a3:15:68:67:9a:74:0d:2d:33:
e2:87:83:ce:9d:c6:86:97:81:25:30:fe:b9:2e:cc:3d:5d:7e:
22:7a:e7:72:7e:a9:71:0e:ca:61:96:9b:e2:dc:74:d8:5a:03:
38:5c:e8:8d:df:e8:59:7a:03:15:6c:26:46:b8:df:95:02:71:
7c:bc:d3:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 06:55:59 2025 by rpki-client