Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
File: 323830343a353834633a3a2f33332d3333203d3e20323638313230.roa (raw, json)
Hash identifier: pQ0CYIYKSlW+02ASBQlgpR0BM2UXs/u03JfSAAWre3E=
Subject key identifier: 78:E1:14:31:4A:10:93:4F:69:0A:73:13:72:C0:F4:80:DD:07:23:E5
Certificate issuer: /CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
Certificate serial: 4A1D6713E4DE782F9969CB7376AFCF5FD0B073BE
Authority key identifier: 94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
Signing time: Thu 06 Mar 2025 13:13:49 +0000
ROA not before: Thu 06 Mar 2025 13:08:49 +0000
ROA not after: Thu 05 Mar 2026 13:13:49 +0000
asID: 268120
IP address blocks: 2804:584c::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1d:67:13:e4:de:78:2f:99:69:cb:73:76:af:cf:5f:d0:b0:73:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94BE3C088C5997DF6AA8B56878A0239FF601A352
Validity
Not Before: Mar 6 13:08:49 2025 GMT
Not After : Mar 5 13:13:49 2026 GMT
Subject: CN=78E114314A10934F690A731372C0F480DD0723E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:f2:98:0d:7f:2e:fe:5b:bb:7c:19:e7:fe:e5:
bc:74:c9:4b:0d:2d:7c:40:22:18:7b:4c:b8:33:30:
1b:a5:30:35:3c:f7:c5:0b:61:51:38:25:c4:43:10:
2e:3c:12:8c:ef:dd:3e:68:f5:f7:d8:6f:2f:10:e8:
01:0e:c4:13:65:cc:a7:e3:04:2b:ce:a1:3a:d1:a9:
5b:aa:cb:c3:f7:3f:9e:3c:0f:ef:10:15:de:36:12:
0f:9f:25:c7:a0:f5:8e:14:e6:4b:3e:78:1e:37:80:
16:ee:95:b6:62:35:cb:02:d2:c4:57:1a:1b:4a:97:
cb:3d:5a:57:9e:7f:4b:b8:ef:a0:ab:12:96:8f:33:
33:5d:6f:49:3e:ff:ab:10:35:ef:23:a2:8f:e8:ed:
9e:2a:1b:c1:c8:3f:f4:36:74:1f:77:7c:2d:c2:a8:
67:00:56:30:51:ef:56:3e:c8:43:89:e0:83:48:7b:
ea:73:58:f7:f6:47:08:f4:38:82:70:78:5a:c1:6c:
0a:66:bb:9c:ca:4c:23:b2:04:a0:37:13:39:58:61:
90:be:30:df:1f:8f:d8:9c:0a:b6:bc:ed:35:74:d8:
63:b4:48:8a:90:fa:32:02:47:ed:20:fd:98:1c:48:
8b:6b:d4:4b:1a:f6:1c:c9:0b:a9:1f:4d:77:75:f5:
4d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E1:14:31:4A:10:93:4F:69:0A:73:13:72:C0:F4:80:DD:07:23:E5
X509v3 Authority Key Identifier:
keyid:94:BE:3C:08:8C:59:97:DF:6A:A8:B5:68:78:A0:23:9F:F6:01:A3:52
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/94BE3C088C5997DF6AA8B56878A0239FF601A352.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vkdd52bDddrjbFmq8CXwpMN4JdXrt7XS2TjPetGUTHZ/1/323830343a353834633a3a2f33332d3333203d3e20323638313230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:584c::/33
Signature Algorithm: sha256WithRSAEncryption
00:dc:56:3e:3f:23:52:fe:d1:8a:77:66:33:cd:9a:52:2e:fc:
1b:2b:a5:94:c9:dc:7d:bf:de:3b:1d:57:17:ed:38:e9:ea:d3:
30:b4:63:b6:75:5e:29:6e:65:ea:12:aa:53:e2:98:b8:39:69:
56:4e:12:05:5d:ca:0f:50:1a:61:0a:b6:99:31:f4:16:71:97:
01:91:8a:b2:be:e5:54:2a:cb:dc:2d:42:36:4c:4f:05:98:ce:
07:57:66:14:b5:74:f7:c7:6b:85:9b:59:3d:e0:ad:61:74:62:
5e:cd:6a:84:2e:d4:91:5e:3f:8b:75:61:06:a6:f4:47:ab:68:
57:4f:af:49:80:75:f3:c0:25:f4:4d:de:fd:24:a3:9d:7c:62:
f9:4e:40:89:26:21:18:e6:e7:46:85:42:1a:5f:fe:1a:5b:69:
5e:5a:0c:0e:b1:5b:61:fe:7a:04:12:01:05:d5:7b:77:08:49:
78:73:2c:23:24:45:62:37:4b:8e:87:0d:9c:2f:34:ea:49:5a:
ec:de:f0:4e:a8:8c:a7:10:ad:0d:3e:3d:c9:10:5a:ea:2e:20:
5c:3e:e5:14:f0:1f:76:a6:90:07:18:12:68:3f:9e:d5:e5:f9:
39:39:ba:c1:03:f0:a5:2c:3c:81:84:e9:9d:c9:96:20:5f:ac:
d0:4e:ab:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:32:12 2025 by rpki-client