Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa
File: 323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa (raw, json)
Hash identifier: PCqDMt5U103sxLk3fdfuKXhOPGfaC1cYTiW+Diobh9o=
Subject key identifier: 79:61:6A:0A:D8:F6:40:43:AF:E4:BF:54:0A:B1:B6:CE:58:A0:67:8C
Certificate issuer: /CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
Certificate serial: 58D32FF380823EB1BE2E8A90308E88F36B36C6A7
Authority key identifier: 9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa
Signing time: Wed 05 Mar 2025 21:31:26 +0000
ROA not before: Wed 05 Mar 2025 21:26:26 +0000
ROA not after: Wed 04 Mar 2026 21:31:26 +0000
asID: 268063
IP address blocks: 2804:5768:b000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:d3:2f:f3:80:82:3e:b1:be:2e:8a:90:30:8e:88:f3:6b:36:c6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7
Validity
Not Before: Mar 5 21:26:26 2025 GMT
Not After : Mar 4 21:31:26 2026 GMT
Subject: CN=79616A0AD8F64043AFE4BF540AB1B6CE58A0678C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ab:92:97:d3:6c:e2:77:40:5e:7b:14:a9:0b:
0c:63:15:09:1f:96:5b:cc:ea:71:39:51:35:8c:0d:
9b:80:9c:aa:e3:4e:d6:88:ae:d3:bd:4e:52:70:30:
56:22:38:18:67:91:e1:86:0d:3e:e7:93:f6:62:64:
44:ea:66:f3:a5:73:db:1f:0d:96:8d:c2:4d:c5:88:
b8:3d:5b:54:30:c6:f6:d2:5c:4f:6d:7e:fa:76:ee:
cf:d1:fa:8f:0b:b4:8e:ca:78:0e:4b:87:88:6a:1b:
85:ff:4c:98:31:77:31:43:d0:4e:c9:8a:74:ce:86:
09:b5:96:5b:ca:3c:68:36:95:1e:13:0e:52:b2:8f:
3e:02:97:d4:d0:ce:57:df:8e:40:85:b3:26:c4:0d:
0d:aa:f2:37:0f:c5:fb:27:45:e9:96:06:81:ce:a2:
d2:f5:91:0e:f4:80:2b:db:fc:5b:33:2e:16:1f:05:
ed:19:5f:ce:73:05:5a:77:9c:47:9b:71:b0:d0:45:
b8:bf:8c:f0:37:4c:95:d3:a9:39:77:7d:fc:6e:4b:
ce:b1:92:b0:6e:d5:82:ed:39:a6:e3:b0:cc:c0:04:
a3:52:92:73:a1:65:a3:76:3a:b6:c3:c8:69:f3:ab:
13:7b:60:32:ed:a5:17:12:8b:c5:ff:1f:2d:cf:b4:
0c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:61:6A:0A:D8:F6:40:43:AF:E4:BF:54:0A:B1:B6:CE:58:A0:67:8C
X509v3 Authority Key Identifier:
keyid:9B:BE:F1:05:0D:0F:0E:92:36:7C:82:3D:2A:9C:8B:46:DD:90:E9:C7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9BBEF1050D0F0E92367C823D2A9C8B46DD90E9C7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/37GqeQDafShYYTmVXGQWczLq9CHYtMTajZTkRsZghQPJ/0/323830343a353736383a623030303a3a2f34302d3430203d3e20323638303633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5768:b000::/40
Signature Algorithm: sha256WithRSAEncryption
31:9e:d0:35:21:d8:0f:06:d0:1f:7f:dc:a3:84:0c:1a:34:4c:
ae:3d:ce:af:d0:23:db:57:26:8b:78:be:c1:c9:2f:05:a1:10:
b9:e0:3f:07:4d:77:7f:f2:88:e1:e5:93:4d:6d:9d:6f:d1:08:
3c:28:1e:07:9a:55:c0:5d:60:a9:64:7d:0e:c7:f8:d2:6a:d8:
0b:98:95:48:25:37:8c:2c:dc:31:b8:e6:22:c7:80:d6:72:d4:
8a:40:ea:65:b6:a6:a4:1d:2c:f2:64:f7:80:7f:4d:c7:e9:9a:
9d:d4:70:8c:ca:32:52:27:64:fe:61:fc:43:90:5e:db:8a:4e:
37:e0:d2:d5:79:ea:51:83:4e:f0:54:b1:33:a0:24:cf:46:8d:
1a:06:20:54:23:1f:06:c1:0b:1b:20:d0:1e:35:90:e2:2e:8e:
8f:4d:3a:06:9a:c8:34:2e:dc:27:bd:86:e2:29:9e:ae:0f:25:
82:cf:5b:8e:e4:a0:9e:0c:84:7e:19:e7:40:ef:97:2e:9c:a9:
64:5d:5a:c8:e7:45:5e:38:ab:77:0e:50:97:50:bc:09:95:20:
d7:8e:80:aa:ab:53:86:83:80:45:df:16:0c:67:af:79:e6:2f:
b1:0b:83:39:43:ba:63:2f:cc:42:dc:1c:a4:d9:7a:1d:0b:d2:
ac:80:fc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:31:21 2025 by rpki-client