Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3333203d3e20323632363735.roa
File: 323830343a6134343a3a2f33322d3333203d3e20323632363735.roa (raw, json)
Hash identifier: NPHwC95tALb5DStY+0sk7WlWQJG7RwZO1MTsO+2oetE=
Subject key identifier: 9F:30:A9:16:4A:53:FF:C4:06:9A:35:96:5F:D0:A8:0B:DA:10:2F:40
Certificate issuer: /CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619
Certificate serial: 0A8A0E387FBDACBC7FBA4CD8782DCBF95557C2DD
Authority key identifier: 9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer
Subject info access: rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3333203d3e20323632363735.roa
Signing time: Mon 03 Mar 2025 12:42:02 +0000
ROA not before: Mon 03 Mar 2025 12:37:02 +0000
ROA not after: Mon 02 Mar 2026 12:42:02 +0000
asID: 262675
IP address blocks: 2804:a44::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8a:0e:38:7f:bd:ac:bc:7f:ba:4c:d8:78:2d:cb:f9:55:57:c2:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9C7E4020A3FE6A17C349B27BF2790BF977A2E619
Validity
Not Before: Mar 3 12:37:02 2025 GMT
Not After : Mar 2 12:42:02 2026 GMT
Subject: CN=9F30A9164A53FFC4069A35965FD0A80BDA102F40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9d:1b:32:98:4f:02:90:ed:ab:68:8f:e3:bd:
04:49:58:f7:ee:01:98:25:03:8e:c4:1f:3a:e4:86:
0f:85:ce:e0:5a:b3:1d:e4:ed:25:8a:82:c6:24:e6:
56:09:7f:78:72:32:f3:27:a2:87:65:0a:a6:3d:ae:
6a:2f:57:87:12:81:63:c9:89:26:f4:07:ef:8a:b8:
e9:26:d8:a5:0a:96:b9:dc:f4:7b:b1:04:c7:b2:f4:
f5:9b:ff:24:b8:62:d3:c8:85:d0:4a:17:cf:35:69:
4e:15:13:85:cc:43:1b:a3:93:10:a1:1f:a9:93:97:
05:62:a6:b2:aa:f4:b3:6b:cb:98:f9:57:9b:6b:93:
72:60:90:44:3d:cd:7e:bf:d0:ba:ab:28:ce:48:5b:
b0:25:54:39:56:63:bf:f8:ec:3d:e4:01:6b:86:4c:
aa:79:86:66:3c:04:bf:85:54:c7:b1:c1:52:10:c2:
9d:de:88:58:2e:7e:93:d8:98:de:d1:79:bf:81:19:
39:e1:54:4b:11:a3:04:7c:a2:71:85:50:0a:e9:84:
72:42:91:cc:97:bb:ab:75:47:73:74:2d:3d:9f:63:
28:5b:4e:4f:ae:ec:00:e1:69:f6:a7:db:33:4e:78:
a3:c4:eb:c7:36:c8:75:49:61:d4:d5:4f:47:23:64:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:30:A9:16:4A:53:FF:C4:06:9A:35:96:5F:D0:A8:0B:DA:10:2F:40
X509v3 Authority Key Identifier:
keyid:9C:7E:40:20:A3:FE:6A:17:C3:49:B2:7B:F2:79:0B:F9:77:A2:E6:19
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C7E4020A3FE6A17C349B27BF2790BF977A2E619.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/35Lkdt9SdLEZ9v5sUEZzvkGMwRT4xB9nMVLfgirjGkw2/0/323830343a6134343a3a2f33322d3333203d3e20323632363735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:a44::/32
Signature Algorithm: sha256WithRSAEncryption
96:81:49:68:b5:07:ca:36:17:89:9d:38:ef:b1:05:b1:4d:ea:
21:ac:2f:83:62:17:37:fa:40:a8:3d:32:42:ac:a5:2d:64:b2:
1f:38:9b:cd:09:98:37:43:1b:2b:97:5b:50:d6:70:50:8b:07:
bd:70:d0:ad:c1:71:f1:18:ed:2e:ae:4f:b9:9e:f2:6f:7c:a6:
8d:f0:19:d6:0f:20:df:df:77:90:df:1e:01:08:8a:ea:5d:a5:
57:31:18:7a:46:b4:8d:bf:76:1c:b7:b5:5a:f5:41:47:10:8c:
7d:a9:df:76:31:6c:a4:96:47:af:96:e2:4a:de:28:4b:13:1d:
22:af:ce:82:04:92:5a:0b:f1:92:9b:b5:40:96:fe:aa:08:37:
af:76:be:d6:d4:c3:3d:43:4f:b9:e3:17:6d:11:73:e3:7f:2d:
a4:2e:ae:0c:d7:a8:00:d3:4d:86:22:1d:c6:f6:14:ce:79:10:
0a:d8:39:3d:19:3d:dd:eb:3a:52:8f:3d:88:0d:bb:71:47:a1:
fa:0e:00:81:4c:7e:09:fd:f1:d4:6b:1d:38:75:cb:7f:22:38:
42:08:34:87:50:af:98:7e:fc:b8:89:b9:67:e2:d3:f8:e4:bc:
7c:18:4f:0d:33:3c:41:cd:b6:11:04:1b:b9:0d:1f:05:61:91:
64:dc:d6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:17:26 2025 by rpki-client