Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa
File: 323830343a326465383a3a2f33322d3332203d3e20323635333131.roa (raw, json)
Hash identifier: F4XVcleKMjOWywnCZpoKpWSyXA1FXOTOWqcPSuJe330=
Subject key identifier: 99:CD:72:5C:6D:D4:20:98:6F:62:C4:38:A0:37:62:B2:C1:F4:B3:2E
Certificate issuer: /CN=F24241E6982A012648294002B697451627DFF661
Certificate serial: 241C7481A01B96DD1F4C217100AC9DC7109C2DE4
Authority key identifier: F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa
Signing time: Thu 06 Mar 2025 16:47:34 +0000
ROA not before: Thu 06 Mar 2025 16:42:34 +0000
ROA not after: Thu 05 Mar 2026 16:47:34 +0000
asID: 265311
IP address blocks: 2804:2de8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1c:74:81:a0:1b:96:dd:1f:4c:21:71:00:ac:9d:c7:10:9c:2d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F24241E6982A012648294002B697451627DFF661
Validity
Not Before: Mar 6 16:42:34 2025 GMT
Not After : Mar 5 16:47:34 2026 GMT
Subject: CN=99CD725C6DD420986F62C438A03762B2C1F4B32E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bc:59:47:02:d1:76:94:35:48:e3:2f:be:9d:
1f:82:88:70:fb:ac:1e:92:9f:f2:94:68:c6:e1:70:
41:04:1c:fe:49:d8:a1:10:bc:b3:17:d3:ec:7b:33:
08:d9:fb:ed:06:66:22:ae:10:6b:57:0a:d3:ce:50:
f1:32:b1:1a:3f:8b:18:06:e6:52:1a:7e:cf:33:23:
5d:1e:52:be:20:4b:24:8e:d5:da:d2:62:e0:0e:06:
09:e1:5e:eb:db:21:bb:86:36:9c:45:97:d8:70:ad:
fc:e5:15:02:70:48:ee:e2:d2:01:f3:1c:21:4e:9a:
a4:5b:b1:7e:70:82:e4:1b:30:da:9e:82:a2:c1:83:
54:50:49:ed:7c:c0:33:a3:98:b7:e8:fd:bd:b6:63:
9f:c9:a5:96:f7:a2:56:8f:b5:64:51:5d:f2:c1:db:
d4:2e:b0:a5:c6:6b:4c:82:d1:f7:fe:24:e9:16:8b:
b1:d6:a4:ca:dc:2f:80:bf:a2:68:c9:14:2e:55:3b:
5b:00:65:3f:3b:c2:7f:b7:9c:80:54:e4:7c:34:88:
27:80:2e:e5:e9:16:f4:ae:fb:54:23:b5:aa:55:42:
4d:0b:f2:d8:c8:07:a5:37:0a:d0:56:c5:03:d2:fa:
e4:91:38:39:74:c7:62:f7:cb:64:74:17:98:fd:c6:
27:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:CD:72:5C:6D:D4:20:98:6F:62:C4:38:A0:37:62:B2:C1:F4:B3:2E
X509v3 Authority Key Identifier:
keyid:F2:42:41:E6:98:2A:01:26:48:29:40:02:B6:97:45:16:27:DF:F6:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/F24241E6982A012648294002B697451627DFF661.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F24241E6982A012648294002B697451627DFF661.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3HunNrUqNwTQgfSuMxSH6P7tZbTvZCydAFfFztSCduhu/1/323830343a326465383a3a2f33322d3332203d3e20323635333131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2de8::/32
Signature Algorithm: sha256WithRSAEncryption
57:94:b7:78:18:75:46:f3:7a:4e:2a:aa:5e:ca:8d:c2:d1:d3:
ca:6f:98:63:06:50:22:1d:af:78:a2:82:79:e2:3f:94:b5:1b:
ba:e5:da:30:17:c6:7f:3c:79:66:1a:60:1b:6a:1a:11:1e:74:
1d:8b:78:e8:a1:49:f1:e0:e7:39:60:e5:2a:6e:7f:ae:68:89:
72:0f:53:e2:4b:e6:aa:ff:68:6f:c1:47:47:aa:32:d1:db:64:
68:e7:eb:f0:54:4b:dc:10:4e:5b:d3:08:95:26:39:ca:1e:e1:
0b:14:8d:31:f4:3e:e3:7b:a1:2a:bf:81:e9:2b:11:09:63:81:
b7:0c:91:fd:ec:12:6c:bb:3b:5d:58:bf:66:20:3b:a9:50:2c:
df:03:7e:d9:94:68:be:55:64:df:ab:50:06:da:d8:fe:70:e3:
d0:f0:9f:6f:ff:4b:28:96:68:1e:40:97:4b:54:4a:31:25:69:
93:04:d8:60:f9:19:73:1e:7d:d8:ef:79:17:19:bb:27:48:ee:
c1:cf:04:06:45:83:59:7d:7c:79:98:17:d0:c9:34:f5:5a:f0:
5c:01:20:d6:fc:87:6a:0a:6c:e9:17:78:f9:de:ae:c6:f2:c6:
b9:ea:83:a0:07:94:7f:a3:85:e6:3e:01:b6:e2:88:de:45:92:
df:ef:09:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:55:20 2025 by rpki-client