Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa
File: 323830343a383136633a3a2f33322d3438203d3e20323732343533.roa (raw, json)
Hash identifier: yZiXxy3J/XE0Ezp0KC/K7RpmR72gw94uewFVQ1ryecY=
Subject key identifier: 10:B8:4A:6E:5D:A1:0B:93:37:F7:DD:91:A5:68:53:8D:B5:C8:F8:0A
Certificate issuer: /CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Certificate serial: 3E4B1552399BEC429DDCF1CD71DAD4A239336667
Authority key identifier: 8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 272453
IP address blocks: 2804:816c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:4b:15:52:39:9b:ec:42:9d:dc:f1:cd:71:da:d4:a2:39:33:66:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=10B84A6E5DA10B9337F7DD91A568538DB5C8F80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:28:69:f6:c4:9a:2d:6c:f1:0b:97:84:6b:4e:
9a:13:cf:c1:22:df:d4:6c:90:56:85:de:2c:17:42:
9c:a0:28:40:79:80:62:a2:66:2d:e1:7c:7d:24:36:
60:99:5e:ac:db:00:3e:4c:5f:6b:71:6f:e7:12:0d:
58:f4:52:ef:4f:fb:33:82:d3:ff:d9:4b:94:84:10:
89:6c:15:6b:f0:d6:26:b5:91:05:bf:54:33:09:03:
59:a6:38:07:ad:21:3b:0f:16:95:ed:89:b3:79:39:
a3:ab:1e:f4:de:9d:ce:df:2c:fd:a7:31:5c:2a:64:
7a:4d:65:db:c6:e6:3f:7b:02:73:62:30:ae:79:6a:
2b:7d:52:11:f4:38:5c:09:c1:82:e0:cf:51:64:32:
55:b5:31:4e:c2:52:96:5f:69:46:c1:6a:62:b8:aa:
de:19:5c:41:96:77:d1:30:e9:99:99:99:9b:de:ca:
83:8d:e2:05:c5:9c:37:ed:cf:00:51:95:3c:ee:5a:
32:93:6c:81:67:df:c3:75:68:51:43:01:d4:e3:a5:
b5:2e:f9:4e:cc:3d:ec:6f:2d:48:cf:5a:bc:3e:3c:
5d:43:84:ba:03:cd:e9:c2:0a:8e:da:f2:b2:30:da:
76:a9:d2:6e:ae:fb:01:99:0b:ab:38:de:c5:26:71:
67:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B8:4A:6E:5D:A1:0B:93:37:F7:DD:91:A5:68:53:8D:B5:C8:F8:0A
X509v3 Authority Key Identifier:
keyid:8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33322d3438203d3e20323732343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:816c::/32
Signature Algorithm: sha256WithRSAEncryption
70:f3:56:41:27:30:2d:81:18:1b:f6:a6:a3:12:75:c1:bc:f5:
51:f1:8f:6c:a8:2a:56:69:64:10:49:77:f1:f5:e5:da:c5:f1:
17:de:3a:95:12:8c:cd:27:ce:f4:a0:66:fd:53:53:c7:1a:72:
20:07:61:1a:b0:ab:11:21:26:d1:99:f8:23:c3:5b:5e:4b:bb:
1c:0a:d1:5d:da:c2:f0:fb:e3:ce:9f:99:be:41:04:49:29:df:
5e:d0:84:c2:73:cd:77:ea:25:5e:1e:67:22:fe:06:dd:3a:a9:
ee:39:40:b8:d0:5a:3e:22:0b:81:d6:1b:62:37:a4:ed:8c:cb:
94:5f:61:9c:dd:71:0e:74:aa:20:af:20:bd:c3:99:90:9b:e6:
6d:ac:2d:2e:97:ad:7d:79:34:7a:12:66:8d:10:1f:96:e6:a5:
c6:bd:62:64:e7:b3:f9:ef:b4:ea:a5:44:ae:d6:98:34:17:ae:
95:99:e5:a6:83:9d:62:ef:a6:19:4b:ca:a9:82:44:12:15:4b:
a0:3f:a5:d4:19:33:c7:23:14:a2:d1:21:34:f6:31:c7:a8:fb:
57:d2:6b:f4:ad:f2:21:0c:e7:9d:c2:c4:a8:c9:0f:89:69:eb:
7c:19:93:a7:e8:10:ea:cf:82:f7:bc:75:c3:9c:b4:a3:1c:7c:
ff:b2:2b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 07:49:25 2025 by rpki-client