Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33332d3333203d3e20323732343533.roa
File: 323830343a383136633a3a2f33332d3333203d3e20323732343533.roa (raw, json)
Hash identifier: UpwB+WreTF1s4oJZiaftWh17VoBwFqqSPUXl6yUL9ck=
Subject key identifier: 28:65:29:BD:21:CC:C0:AE:06:A0:DB:5D:24:6C:17:09:0F:B9:62:CE
Certificate issuer: /CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Certificate serial: 4D425D5B8D91C4938A145B629B7000C7B3D9A4E3
Authority key identifier: 8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33332d3333203d3e20323732343533.roa
Signing time: Wed 05 Mar 2025 19:00:01 +0000
ROA not before: Wed 05 Mar 2025 18:55:01 +0000
ROA not after: Wed 04 Mar 2026 19:00:01 +0000
asID: 272453
IP address blocks: 2804:816c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:42:5d:5b:8d:91:c4:93:8a:14:5b:62:9b:70:00:c7:b3:d9:a4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ABC0347676D4CF73560AAEDBC382C803390BA35
Validity
Not Before: Mar 5 18:55:01 2025 GMT
Not After : Mar 4 19:00:01 2026 GMT
Subject: CN=286529BD21CCC0AE06A0DB5D246C17090FB962CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:37:7d:9f:66:89:20:a1:1a:7f:95:68:a0:
91:1c:1d:0e:e6:44:90:9d:41:04:87:f1:15:6f:59:
17:e1:86:9c:38:07:6c:92:38:01:9c:9c:52:8d:fe:
d2:e4:2e:10:a7:4d:30:0d:f5:14:34:d3:fc:35:f4:
cf:f9:8d:1e:ca:18:f9:3e:25:bd:31:11:7e:04:0e:
0c:30:93:38:b1:be:ec:11:bd:3e:d9:7f:56:d2:cf:
7c:52:d1:c1:ba:03:8d:aa:a4:f0:a0:4e:55:1e:8c:
64:c0:56:82:18:ac:2d:83:72:fb:12:e4:75:1a:11:
69:ae:6a:2b:67:e4:7d:7e:e7:46:5a:9a:43:c8:cf:
93:40:40:11:a7:5d:d0:03:7c:af:7b:37:50:c3:d8:
f6:da:85:7f:25:f5:02:5c:3d:0f:72:43:d5:e4:ab:
4e:74:bc:5f:a0:00:40:91:7c:95:5d:ac:7b:85:e0:
85:93:17:16:09:06:03:4f:5c:e3:08:dc:58:91:d2:
74:2b:12:2e:b2:23:bd:92:a0:6e:e4:06:ae:f2:10:
91:b1:66:ab:4b:5e:89:37:9e:5b:3b:d6:9e:62:b9:
ee:95:fa:38:82:0d:20:eb:33:06:3d:ab:66:65:c2:
e1:67:1d:b5:74:6b:50:f1:d4:75:4c:b3:15:e9:3b:
ac:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:65:29:BD:21:CC:C0:AE:06:A0:DB:5D:24:6C:17:09:0F:B9:62:CE
X509v3 Authority Key Identifier:
keyid:8A:BC:03:47:67:6D:4C:F7:35:60:AA:ED:BC:38:2C:80:33:90:BA:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8ABC0347676D4CF73560AAEDBC382C803390BA35.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2hv3mEg5Lzndxw2D8tRNKJGxHq1noAaKS12zLnCvxH7Z/1/323830343a383136633a3a2f33332d3333203d3e20323732343533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:816c::/33
Signature Algorithm: sha256WithRSAEncryption
6e:ea:fd:4b:40:df:fe:c6:5b:5e:6d:72:2a:78:49:53:7c:d6:
ce:ec:ab:51:c7:7b:e2:ad:f7:ac:d0:46:ad:e3:4b:4d:f5:53:
cf:21:36:3e:d5:7e:7e:d3:d4:2f:2a:8e:a7:d0:dd:58:d4:73:
38:ce:c5:a1:1a:d5:04:74:67:05:3a:ed:5d:42:3b:21:a9:7b:
37:cb:bc:0f:8a:cc:70:44:65:dc:9d:2f:b5:5a:b2:76:b9:fc:
6e:aa:fd:fd:34:2a:96:d4:de:28:11:66:ed:4d:7c:0b:f7:ce:
cf:21:4c:8a:4c:64:98:f1:63:44:9c:63:92:07:f8:1c:27:a5:
3a:3e:83:1f:ea:69:76:fa:e1:c1:ee:7a:24:74:00:1e:f8:00:
ef:04:71:0d:c3:01:2c:d4:2e:ac:62:f9:36:f5:ad:26:3e:80:
e1:8f:ce:bd:1a:44:45:b2:00:1b:67:01:53:80:e5:fd:df:cc:
9d:b6:97:f6:c5:86:ea:41:e7:cf:a4:47:fd:16:63:d9:fc:d9:
77:77:bc:d3:7c:ff:2e:a2:3b:47:9d:31:8e:ef:42:e0:2b:52:
ed:74:8c:03:7b:87:83:1c:a1:13:c6:98:4f:0c:18:6e:e8:e4:
d5:f6:1b:5f:c9:0a:e2:be:8b:02:ca:af:7b:a3:32:6a:2d:17:
37:fa:13:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 15:00:53 2025 by rpki-client