Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/323830343a343539633a3a2f33322d313238203d3e20323636393338.roa
File: 323830343a343539633a3a2f33322d313238203d3e20323636393338.roa (raw, json)
Hash identifier: 5VqCiyQ7AHccKroPNbb3L21hzWAmhJkFJ4KLVWJZRUM=
Subject key identifier: E2:0D:3E:91:55:97:4F:B5:1C:83:01:E0:1C:20:B2:A5:2B:43:44:DE
Certificate issuer: /CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Certificate serial: 73EA28D8B5B39995F5B601612DBD6D486540B779
Authority key identifier: 0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/323830343a343539633a3a2f33322d313238203d3e20323636393338.roa
Signing time: Thu 13 Mar 2025 17:14:28 +0000
ROA not before: Thu 13 Mar 2025 17:09:28 +0000
ROA not after: Thu 12 Mar 2026 17:14:28 +0000
asID: 266938
IP address blocks: 2804:459c::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:ea:28:d8:b5:b3:99:95:f5:b6:01:61:2d:bd:6d:48:65:40:b7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6
Validity
Not Before: Mar 13 17:09:28 2025 GMT
Not After : Mar 12 17:14:28 2026 GMT
Subject: CN=E20D3E9155974FB51C8301E01C20B2A52B4344DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:16:42:1c:ed:c2:b8:5d:a6:db:20:ef:ae:cd:
b6:b5:17:8c:16:68:8c:48:48:6a:da:ee:f3:46:8e:
ee:c2:ca:33:0b:4b:c1:c4:a1:d9:61:c1:7a:bc:72:
f1:d9:7c:36:98:c4:13:8b:0e:9a:6b:1a:e5:a7:fe:
c2:c8:cf:cd:4d:39:14:5d:91:4c:a1:a6:e9:38:c1:
3e:4f:11:bb:d3:91:5d:06:ac:19:0c:6b:c8:73:f1:
f7:fe:0a:5d:3a:98:76:7b:ca:96:58:e2:df:12:16:
2e:27:08:b7:6b:16:e3:29:6b:b5:a0:6a:b8:a5:a7:
ad:07:05:71:41:c4:fb:01:5b:f2:09:f2:9d:79:22:
4d:dc:4d:fe:e2:33:da:66:a6:27:6d:cc:a2:4f:e3:
2b:b6:fe:3a:28:82:96:35:72:09:eb:6a:70:d8:7a:
61:9d:e3:5d:29:4b:0f:ea:a9:2f:f6:4c:3a:9d:34:
3e:e4:63:82:c7:11:a0:5e:a1:4a:d3:f6:80:d8:c1:
1e:ec:76:0a:0c:c1:ee:5c:6f:49:71:20:9b:0d:c6:
b0:45:a0:40:db:e2:18:fb:73:fa:94:9a:50:aa:87:
94:16:61:5a:3f:d5:ae:14:ed:87:dc:a4:8d:5c:71:
af:5a:a1:aa:d3:d4:1f:f8:e1:cc:80:3e:3a:ce:ac:
3a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:3E:91:55:97:4F:B5:1C:83:01:E0:1C:20:B2:A5:2B:43:44:DE
X509v3 Authority Key Identifier:
keyid:0A:AE:6E:1F:E9:A1:32:1E:F6:C2:B5:AE:79:9B:C2:E5:A1:A9:0D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0AAE6E1FE9A1321EF6C2B5AE799BC2E5A1A90DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dQNNjjp4WJNzA4JTSsQa2pVnaa2RYyjDLuRv9q1vvyx/0/323830343a343539633a3a2f33322d313238203d3e20323636393338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:459c::/32
Signature Algorithm: sha256WithRSAEncryption
79:e3:0c:49:ac:2f:55:20:98:89:ba:26:a8:f8:0a:d4:3a:6a:
39:1b:79:04:a3:9f:80:94:b6:df:de:ba:17:6d:29:3b:b4:dd:
ec:f1:a9:b8:d1:5f:36:a7:03:06:f0:95:eb:3b:10:87:d5:7d:
e3:6a:a7:ce:62:1e:93:de:49:5b:3e:dc:0b:2e:a6:da:5a:a2:
cc:62:78:2a:42:df:d2:73:47:61:f5:d3:7e:5a:74:06:da:d4:
86:22:ef:cb:29:5d:06:68:5d:ca:1b:1b:6d:f5:64:d2:06:71:
eb:62:89:bf:1c:8e:8a:59:1a:5d:31:06:e7:6d:70:19:ca:da:
62:4b:78:3b:e1:c3:05:f7:07:8f:bd:bf:5f:60:bb:75:8a:b7:
7a:9a:e9:c1:ec:21:31:b4:6c:f9:98:36:b0:49:8c:33:22:f8:
8f:3d:d1:4f:5b:0a:6d:a6:ac:36:4e:74:07:1a:77:ce:b5:33:
3f:0a:56:34:f1:f9:38:dc:4b:ea:0e:a4:2d:f4:2b:ab:ed:04:
a9:4e:d4:ae:a0:50:56:06:c7:48:d4:ee:d7:e2:bf:fe:a7:a6:
bc:16:d5:47:e2:bc:73:dd:25:d1:e5:60:f6:81:bd:eb:8b:0d:
71:38:8f:91:65:09:33:01:c3:7f:0c:07:dc:88:93:be:5c:70:
28:09:77:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:18:03 2025 by rpki-client