Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa
File: 323830343a353765303a3a2f33322d3332203d3e20323638303932.roa (raw, json)
Hash identifier: CZFIyUgROoYhEaXtgPsaiQgbOtqsYUiQeqBdyj1tyRk=
Subject key identifier: DA:FF:82:62:8B:35:9A:5E:3A:49:C8:80:B3:8A:61:08:96:56:6D:43
Certificate issuer: /CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Certificate serial: 095F98934E3BAC28AF67FBBE6B57E4144BD7CE3C
Authority key identifier: 0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 268092
IP address blocks: 2804:57e0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:5f:98:93:4e:3b:ac:28:af:67:fb:be:6b:57:e4:14:4b:d7:ce:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0C373D8F768B105DA0240C6AEA40CD1AD762EBA4
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=DAFF82628B359A5E3A49C880B38A610896566D43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6e:29:fe:f2:35:fa:ee:d5:98:0e:15:77:24:
cb:01:3b:50:d6:75:f1:db:aa:f1:96:7e:6f:f4:c1:
23:21:62:a2:92:c6:02:7a:42:b0:36:7e:a9:3a:e6:
88:d9:12:20:ce:a9:71:89:86:2e:39:77:d8:87:11:
01:de:f6:cc:84:80:93:1e:e1:03:b1:a0:82:40:85:
e8:b1:fd:c2:d2:c3:76:33:b4:2b:0d:a1:6c:2e:0b:
55:76:1e:41:a0:84:77:be:e2:47:73:df:6a:34:52:
1c:cb:b9:1d:e4:d5:b5:32:35:0a:06:fa:3e:07:8c:
3d:8d:d3:cf:10:8b:98:78:30:30:d6:a1:2b:12:51:
3e:29:97:b1:38:3f:eb:93:19:71:5f:f9:7e:46:b3:
6d:fc:ed:4c:82:2a:db:e4:ea:4d:79:14:d8:aa:c4:
f7:37:1e:61:8a:09:1a:42:20:df:3b:4d:18:46:57:
1c:08:5d:ad:6e:7e:6a:c9:7f:57:b7:f4:eb:f9:42:
3b:42:86:2a:14:44:1f:77:0e:7d:db:72:6a:80:10:
4f:29:27:d3:e4:44:ec:81:cb:00:17:58:73:4e:cb:
b7:44:73:14:38:35:8e:61:54:b6:a1:a6:b0:3b:8e:
20:f4:68:df:be:7b:c1:80:74:ba:d1:24:7f:01:a1:
1d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:FF:82:62:8B:35:9A:5E:3A:49:C8:80:B3:8A:61:08:96:56:6D:43
X509v3 Authority Key Identifier:
keyid:0C:37:3D:8F:76:8B:10:5D:A0:24:0C:6A:EA:40:CD:1A:D7:62:EB:A4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0C373D8F768B105DA0240C6AEA40CD1AD762EBA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3SnaJwfjGYY5UeNngdWMvj4qhZcteRTmjoLZSZgiN7LK/1/323830343a353765303a3a2f33322d3332203d3e20323638303932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57e0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:c3:54:2f:91:89:dc:c2:2a:f3:43:e4:b9:2a:c3:98:5a:80:
e4:26:43:fb:3e:b6:35:bc:6e:0c:a4:1e:76:4d:2f:2a:72:03:
5f:f7:ed:bd:84:1d:4a:22:5a:db:fe:d3:02:09:9e:d1:c9:5b:
b5:96:03:70:2a:ae:a8:4e:d0:ab:46:eb:27:d1:b9:63:1e:8c:
fc:0e:b6:ae:89:71:b1:a7:53:96:3e:6b:5b:95:c9:36:12:51:
5b:e0:09:b6:6f:9c:83:a5:61:d6:11:3e:3d:90:90:aa:88:cc:
4e:26:2f:ec:68:90:36:dd:ea:f2:fe:82:f6:dc:47:55:f5:c4:
bd:2c:6a:55:67:65:94:ae:1d:2a:ae:a6:51:0e:fd:c7:cf:4b:
c7:1b:89:8c:04:be:5e:71:d8:c3:60:9f:68:db:68:71:ba:11:
cb:6d:5f:fe:be:ec:d7:8f:cc:2b:bd:13:c6:0c:bc:69:40:79:
06:ae:bd:d7:72:cd:ed:99:24:40:6c:9a:6f:84:09:6b:b6:cb:
dd:58:6b:76:04:f3:ac:62:c6:58:1f:15:b2:9b:ad:ea:7e:70:
7a:a7:a5:7a:ef:5b:be:82:3b:5d:e4:5c:a8:f3:9b:d4:0c:43:
1a:92:c6:07:43:4f:2e:29:77:6f:93:26:9a:1b:8a:03:2c:90:
c1:23:f5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:52:39 2025 by rpki-client