Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313030303a3a2f33362d3336203d3e20323634323332.roa
File: 323830343a323439383a313030303a3a2f33362d3336203d3e20323634323332.roa (raw, json)
Hash identifier: AnftkLbuZYo2hrhwmnzO2iw9wJgjeA2FBa56HIUmIno=
Subject key identifier: B0:A1:1B:17:3B:99:2A:8C:D7:32:00:63:B7:83:63:A5:33:59:98:BE
Certificate issuer: /CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Certificate serial: 3DAE9E6EEDC79AAB62E7065BB1296EDB22F8D39B
Authority key identifier: 75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313030303a3a2f33362d3336203d3e20323634323332.roa
Signing time: Fri 17 Jan 2025 11:42:29 +0000
ROA not before: Fri 17 Jan 2025 11:37:29 +0000
ROA not after: Fri 16 Jan 2026 11:42:29 +0000
asID: 264232
IP address blocks: 2804:2498:1000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ae:9e:6e:ed:c7:9a:ab:62:e7:06:5b:b1:29:6e:db:22:f8:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9
Validity
Not Before: Jan 17 11:37:29 2025 GMT
Not After : Jan 16 11:42:29 2026 GMT
Subject: CN=B0A11B173B992A8CD7320063B78363A5335998BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0c:b2:85:27:dd:85:ea:c2:7b:84:f4:c8:e1:
68:f6:27:6e:bf:29:b5:03:96:41:1d:78:d6:7c:76:
de:23:23:fc:42:37:91:a7:fb:cd:fc:7f:d0:f4:44:
83:b8:ec:5e:1d:09:2c:0a:a1:74:cf:c9:f4:ee:b5:
34:b3:6e:99:39:d1:a2:27:3f:2d:64:01:9b:4e:d4:
26:cc:df:f9:e9:31:cb:87:f5:61:8d:83:07:43:61:
de:32:6d:4b:cc:a3:86:65:b1:9c:e7:a3:e8:fe:c4:
1d:4d:9e:26:ab:93:8c:42:ec:ce:ad:0c:ea:ec:84:
f0:26:75:76:e7:ae:6c:5c:6c:d3:3a:51:51:d6:42:
68:1a:c8:31:f0:d3:fe:5f:37:48:7f:72:1b:9d:c8:
4b:e7:0d:50:4e:6b:d3:5c:6c:3a:b4:60:38:ec:8c:
ef:8d:3b:14:a0:34:da:72:ed:2d:ab:be:e8:73:e0:
14:82:20:8d:f6:cd:44:c0:ee:36:66:9a:79:cd:29:
bd:8d:55:ba:1f:dd:0b:47:c7:05:9d:11:f3:77:b6:
81:52:97:e4:6c:ac:75:ef:11:a8:ab:f0:28:05:25:
29:fe:50:b4:a0:e6:ba:85:0d:a9:5c:59:ec:57:a7:
a2:04:dc:38:8b:32:7c:9a:34:0c:e8:66:b9:db:37:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A1:1B:17:3B:99:2A:8C:D7:32:00:63:B7:83:63:A5:33:59:98:BE
X509v3 Authority Key Identifier:
keyid:75:DF:9C:1F:A1:27:1A:E2:2F:8D:43:C4:6C:93:44:E9:39:B5:CF:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/75DF9C1FA1271AE22F8D43C46C9344E939B5CFB9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2gAQyXmAEGQWS7CwMbBL62x8g6nBcmmPmoPvNWAQCove/0/323830343a323439383a313030303a3a2f33362d3336203d3e20323634323332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2498:1000::/36
Signature Algorithm: sha256WithRSAEncryption
0d:97:8b:17:16:40:99:73:2b:41:61:ad:58:05:bf:7b:69:7a:
ee:97:ba:64:80:fc:ce:74:49:77:70:54:f1:6c:fe:96:9e:49:
36:13:d5:fa:62:87:ac:1c:6f:af:7c:d8:df:b6:c0:8e:4e:41:
bc:53:f0:a1:fd:4d:4e:c2:1b:c8:cf:d6:f9:77:51:c1:94:e7:
e8:12:18:d8:7b:c2:fa:3f:b1:6b:eb:93:09:08:db:7e:fc:9a:
72:10:70:6b:0f:42:99:35:eb:cd:44:bd:5a:9b:1e:9f:0e:c0:
e3:f1:19:6b:bd:93:31:d9:0a:07:1b:45:f4:3d:b5:8a:11:35:
d1:aa:0c:eb:a0:10:5e:90:81:ca:3c:21:1a:44:ec:3a:38:79:
24:71:af:15:e1:0a:7d:b6:ef:1d:95:16:c4:2e:50:32:f6:d6:
a5:ee:94:d3:c3:a4:a6:5f:ce:10:7d:3c:36:be:ed:91:a9:08:
7c:94:3d:3f:f0:02:60:7f:e9:ba:13:26:fd:1a:b1:3d:50:42:
f6:89:c4:de:02:2f:e3:9b:0c:62:0a:c0:d9:7d:55:1e:3a:f0:
f9:c2:12:7a:6f:7b:ae:2d:ce:b2:b2:03:e2:3d:3c:c5:f0:aa:
53:13:81:c6:bc:bd:62:91:b0:e2:c8:31:64:9a:c4:81:fd:d0:
58:00:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:22:50 2025 by rpki-client