Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa
File: 323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa (raw, json)
Hash identifier: IxmH8crHtxVQvG1YjQgvt0CGE0vqicuiP7dBfaW5cYk=
Subject key identifier: 70:86:63:53:3D:09:FA:E1:54:36:3A:C9:C9:07:3D:11:E2:78:B4:76
Certificate issuer: /CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Certificate serial: 58E8EAE37E119A8271CAAD3686344AD5AD8AE8B9
Authority key identifier: 96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject info access: rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa
Signing time: Wed 05 Mar 2025 19:00:05 +0000
ROA not before: Wed 05 Mar 2025 18:55:05 +0000
ROA not after: Wed 04 Mar 2026 19:00:05 +0000
asID: 61888
IP address blocks: 2804:e60:200::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e8:ea:e3:7e:11:9a:82:71:ca:ad:36:86:34:4a:d5:ad:8a:e8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961AE5D479B2534022682B64D7F0EFE6AA11F791
Validity
Not Before: Mar 5 18:55:05 2025 GMT
Not After : Mar 4 19:00:05 2026 GMT
Subject: CN=708663533D09FAE154363AC9C9073D11E278B476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:7d:4e:04:32:b7:9a:22:34:30:32:c3:2d:4a:
c2:40:08:d2:97:fe:b8:24:0b:6a:51:84:91:2a:80:
bd:c1:1d:bd:84:90:6e:a5:78:61:79:3f:b9:75:06:
27:13:74:22:39:15:d3:0f:87:86:f3:8f:4f:9f:08:
bc:27:ed:28:fb:a6:ef:88:e2:3f:c2:e0:e2:a3:73:
9c:90:b2:8e:d6:7b:7d:c0:da:a9:d1:ac:4b:00:92:
92:fa:2c:9c:b5:a1:e7:a3:bd:28:89:61:31:da:cf:
75:c5:71:00:2b:9c:24:4f:98:39:eb:37:57:96:88:
07:e2:75:9e:17:fc:50:44:21:a6:b2:96:8c:e8:2f:
1f:2a:73:a6:c5:b2:e7:a1:92:f2:0d:ea:be:51:c0:
8b:a6:64:e7:d5:d0:26:c5:b0:2e:97:05:0b:6b:78:
ec:09:91:02:ab:50:02:cc:7f:9e:98:22:8c:6e:c0:
5c:30:80:97:e8:16:a4:05:4b:26:05:85:ae:e7:34:
93:fb:39:5d:10:af:16:b3:b2:1d:99:4a:c1:a9:0d:
88:c8:90:17:90:75:6e:13:53:ce:8a:6d:98:d7:fd:
99:18:37:87:a0:d6:03:6a:71:a8:8f:1c:f9:94:52:
23:6e:18:17:18:11:ed:a1:5a:d0:7f:03:cc:2a:b4:
f5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:86:63:53:3D:09:FA:E1:54:36:3A:C9:C9:07:3D:11:E2:78:B4:76
X509v3 Authority Key Identifier:
keyid:96:1A:E5:D4:79:B2:53:40:22:68:2B:64:D7:F0:EF:E6:AA:11:F7:91
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/961AE5D479B2534022682B64D7F0EFE6AA11F791.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/34hS7B8uGYsDVN6yUoT5LrEi5eEi1nTXzH3K5mQKRBBe/1/323830343a6536303a3230303a3a2f34302d3430203d3e203631383838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:e60:200::/40
Signature Algorithm: sha256WithRSAEncryption
c2:da:83:c1:cb:11:1e:12:c5:ed:31:02:24:ea:ce:6e:a6:d0:
9f:15:9a:8e:f4:50:40:59:07:23:9b:a1:1a:7f:ea:b9:8f:7f:
ef:b1:38:a3:67:db:a4:d2:c6:d4:57:ea:11:dd:93:a0:d1:07:
dd:43:96:04:2e:82:c9:de:bf:3b:83:33:4c:dd:97:56:c9:fc:
20:33:bf:97:85:d4:8d:6f:d6:df:f2:b1:df:1c:d5:d2:de:fc:
15:1a:a4:cf:50:7f:c2:b1:9d:ea:57:4c:4c:2c:06:be:d3:48:
cd:9f:c5:4b:ed:d3:ac:21:b7:f3:b7:63:bb:c5:0e:e9:16:a3:
20:9f:3c:68:75:74:a8:31:a0:29:18:f1:68:29:fd:08:a8:e2:
21:65:2f:63:94:4c:28:d5:c7:55:d7:f9:5e:7c:db:38:e6:77:
5b:6f:80:0f:51:5a:9f:2a:37:20:89:14:96:11:9d:eb:61:a4:
02:a7:ee:05:9c:b6:2e:98:19:46:b6:c7:a1:4d:11:89:74:82:
3e:77:13:27:76:c7:c4:14:47:d8:04:7d:c0:6c:4b:f9:49:3c:
cc:4c:a1:c8:7d:ed:be:a7:dd:7a:28:33:5d:dc:12:8a:59:af:
cf:dc:1a:ac:8f:3d:e2:b4:69:06:87:b8:9d:ba:dc:28:b7:3c:
19:3a:3c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:41 2025 by rpki-client