Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
File: 323830343a363031383a3a2f33322d3332203d3e20323639313435.roa (raw, json)
Hash identifier: pukb5lj9ipcGQlV0LxsDM+V/GjI+AEgmTgzISsvatVU=
Subject key identifier: 78:25:35:D9:73:48:A7:19:B0:1A:63:28:DB:77:29:9C:62:AC:59:D0
Certificate issuer: /CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Certificate serial: 64EA40449CB9DB6C3519595241A513BB4314FF90
Authority key identifier: 3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
Signing time: Thu 06 Mar 2025 09:03:18 +0000
ROA not before: Thu 06 Mar 2025 08:58:18 +0000
ROA not after: Thu 05 Mar 2026 09:03:18 +0000
asID: 269145
IP address blocks: 2804:6018::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ea:40:44:9c:b9:db:6c:35:19:59:52:41:a5:13:bb:43:14:ff:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0
Validity
Not Before: Mar 6 08:58:18 2025 GMT
Not After : Mar 5 09:03:18 2026 GMT
Subject: CN=782535D97348A719B01A6328DB77299C62AC59D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:66:2a:0e:54:1e:fb:7d:ab:e7:a5:78:62:6b:
2a:45:0c:87:d5:4b:e6:cc:ff:87:84:06:68:86:7b:
7d:29:8a:60:09:3c:53:2e:29:76:e2:05:59:fc:ba:
7e:44:92:32:6f:44:f9:9e:89:a3:59:22:fa:da:da:
0d:d7:97:b9:fa:cc:8f:9a:a8:1a:b2:ba:b4:ef:0c:
a1:90:47:d6:8a:cc:1e:75:9c:18:6e:5c:a7:e6:f3:
7b:8e:a8:42:08:35:5f:ab:62:da:da:39:b6:89:e7:
87:39:8c:9d:86:39:bc:30:5c:07:18:d6:60:eb:5d:
38:4f:f2:7b:6f:72:0e:84:73:55:5a:17:8b:87:31:
d6:5b:ab:59:87:ec:c1:57:4e:c1:4f:e5:f8:44:45:
bb:6f:b0:d9:4e:5c:e6:2d:6d:2c:bf:20:97:70:0e:
8d:e6:06:e4:7b:b0:ff:2d:27:50:aa:86:7c:41:ee:
3d:b7:24:76:4a:c2:fa:b4:67:53:aa:cf:df:a0:8a:
b6:0b:7f:f5:4c:f1:9c:6e:66:60:cc:16:75:65:8a:
41:c5:01:f9:ec:fb:12:ab:91:cd:5a:14:7e:b1:55:
b3:ee:eb:29:7b:cd:e8:ef:df:91:df:1c:d7:87:43:
a6:df:b4:ae:fa:d2:07:da:70:2b:9f:fb:48:a6:ee:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:25:35:D9:73:48:A7:19:B0:1A:63:28:DB:77:29:9C:62:AC:59:D0
X509v3 Authority Key Identifier:
keyid:3F:A6:45:3F:F6:EE:48:DA:D9:C2:0C:55:2F:9A:4A:FA:13:BF:74:F0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FA6453FF6EE48DAD9C20C552F9A4AFA13BF74F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2e96ApuCzfWJnto1yPf5Q2XZC8gtq34VickzhoUhdmMN/1/323830343a363031383a3a2f33322d3332203d3e20323639313435.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6018::/32
Signature Algorithm: sha256WithRSAEncryption
a1:9b:a8:ea:42:a2:65:1f:bd:01:1f:8d:f2:ca:92:3a:cf:62:
30:f4:36:7c:20:43:ea:03:22:f8:33:3f:42:ce:ca:81:8e:d1:
65:2a:a0:27:7a:02:2a:ba:9a:98:9d:f2:60:17:3b:dc:15:64:
09:02:26:0b:ba:3d:9e:62:b2:3a:00:66:50:48:01:76:9b:4e:
b2:ff:ea:d2:b9:ca:fc:eb:d6:aa:a2:4e:8a:bc:bd:c7:4d:b2:
dd:d1:16:c1:77:f5:05:ab:39:91:a2:60:5d:31:da:c1:c1:02:
66:65:65:fa:20:f8:c7:d4:12:c8:0c:aa:20:7d:b2:f0:35:a6:
fd:2d:11:09:87:dc:9a:92:6c:2d:ce:19:cd:e6:73:7e:bb:33:
23:a3:f5:9e:af:d2:cb:b9:c6:d2:61:47:9f:c8:d7:b7:66:75:
e7:d7:a1:ec:91:de:7f:ff:ca:7b:1a:f3:76:49:03:d1:b1:9e:
a0:ab:ba:42:10:fe:1e:8c:cb:a2:9a:27:f2:db:a7:82:7e:35:
83:1d:27:6f:e8:2f:38:b1:6f:58:4e:a0:fe:fd:e8:72:fc:60:
76:b4:bf:a5:fb:27:b2:94:d3:ee:f1:67:b0:6d:54:f3:7f:98:
42:71:81:d5:27:79:76:33:f2:1b:0d:e7:34:8a:49:93:12:71:
bd:2f:46:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:26:00 2025 by rpki-client