Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa
File: 323830343a326161383a3a2f33322d3332203d3e20323634303838.roa (raw, json)
Hash identifier: Uo+X68SFToz8/ji3Q+GedasA8uHQ3qN3BN0gkxnMDmI=
Subject key identifier: 86:4A:97:C0:2D:2F:88:B4:A3:1A:69:62:7F:22:8E:52:F9:DE:63:BC
Certificate issuer: /CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Certificate serial: 0A499D8BDBB356D9EE53CE1823AB156F9907D981
Authority key identifier: C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa
Signing time: Tue 01 Apr 2025 13:13:34 +0000
ROA not before: Tue 01 Apr 2025 13:08:34 +0000
ROA not after: Tue 31 Mar 2026 13:13:34 +0000
asID: 264088
IP address blocks: 2804:2aa8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:49:9d:8b:db:b3:56:d9:ee:53:ce:18:23:ab:15:6f:99:07:d9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D
Validity
Not Before: Apr 1 13:08:34 2025 GMT
Not After : Mar 31 13:13:34 2026 GMT
Subject: CN=864A97C02D2F88B4A31A69627F228E52F9DE63BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:69:1b:96:d6:9d:8f:46:f3:bd:f3:41:04:
e0:31:e3:7a:34:55:57:3a:bb:1f:ed:ec:f0:b8:dc:
57:be:2d:36:d1:fb:91:88:d3:2a:a8:5d:b8:ac:1d:
93:b5:5e:ff:b7:0f:4a:69:2a:dd:18:fb:28:71:dc:
f1:27:eb:5c:02:41:2f:f9:12:2b:b8:d5:4a:f4:67:
39:07:84:86:59:cb:65:db:b8:c3:93:9f:77:55:20:
fb:0c:65:05:3c:b8:96:2d:de:1e:a9:c9:45:19:20:
76:de:c4:46:f1:3d:21:c3:b1:24:06:4d:42:61:44:
bb:05:4a:b5:d4:50:e6:7b:1a:26:00:39:61:d7:73:
35:f8:cc:f8:6a:8f:ff:a6:61:65:8e:4c:5c:77:c9:
f5:57:f3:b1:d9:96:dd:fe:93:9c:02:88:c6:33:12:
3c:74:4f:73:d6:26:e5:77:3b:b3:33:b3:99:1b:bc:
44:d7:39:93:a3:28:c3:65:af:a9:c1:9d:a9:5c:00:
21:6f:43:1b:11:a2:b0:08:f3:1a:4b:bd:83:be:1a:
a2:36:96:c2:34:4f:1d:45:3b:bf:2b:69:78:b8:a9:
a7:47:ae:bf:d6:3d:3b:bf:9e:14:8a:5a:c0:6f:a7:
0f:f3:6e:b8:c3:27:92:4a:0a:c3:e1:c5:41:cf:c6:
43:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4A:97:C0:2D:2F:88:B4:A3:1A:69:62:7F:22:8E:52:F9:DE:63:BC
X509v3 Authority Key Identifier:
keyid:C8:87:AD:3E:36:7B:5D:37:C5:E8:3C:1D:AB:5E:A5:C7:D1:56:76:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C887AD3E367B5D37C5E83C1DAB5EA5C7D156769D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2RRzPu23Z3adJC9dqveWKsjRhurVzWzmb4JaBoABXYqe/0/323830343a326161383a3a2f33322d3332203d3e20323634303838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2aa8::/32
Signature Algorithm: sha256WithRSAEncryption
2a:71:f3:58:46:f7:ab:09:ef:4a:5c:18:c0:b5:43:84:bf:d3:
a4:8e:63:f8:8b:3d:17:c6:3d:14:09:f0:eb:a9:46:4d:1f:7f:
41:e8:6c:24:52:25:4a:b1:b1:4d:51:ce:d0:a2:de:74:d1:86:
9e:e5:8f:f3:64:c1:81:e6:0a:a3:56:7c:07:b4:c1:fc:8d:fa:
f5:e9:4d:f0:de:e0:1b:ec:63:73:10:fd:6b:a4:0c:c0:0b:be:
08:e4:c7:4d:8c:7f:1a:87:21:bd:53:b0:48:28:f6:70:41:be:
ee:40:32:42:2d:c6:7e:42:fb:ed:87:18:8a:8d:50:b5:c3:2f:
63:cb:f3:f6:1b:76:cc:37:db:82:ca:44:29:87:58:8a:c8:5e:
7a:57:c5:9f:f9:61:26:27:fe:55:fa:2f:37:83:5e:49:a0:a9:
c5:8d:ef:21:f6:8d:4a:29:ba:e0:02:74:aa:4d:d4:49:ba:07:
64:e8:30:38:6e:24:16:7c:a0:68:b4:b9:5e:48:09:fc:7a:2e:
66:34:a2:d8:54:26:d4:94:24:2a:e3:35:6c:bd:d6:22:2e:f0:
56:3b:c2:f0:c4:14:ea:48:2c:1f:4b:5c:e8:4e:3e:6c:8b:d6:
33:eb:13:c8:3c:2e:63:5a:c6:fb:1b:77:df:98:72:5e:2c:95:
d3:12:2a:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:45:12 2025 by rpki-client