Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa
File: 323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa (raw, json)
Hash identifier: iG3OJIG8z3hkTZo+yFC60ZRMc57lWlS7r0L28NgVPUY=
Subject key identifier: 78:52:26:69:7F:AA:80:19:0E:E5:63:D8:D5:78:A9:22:A9:A7:D7:C9
Certificate issuer: /CN=446D4F390AB834CB395232A0680D14394BE75FCC
Certificate serial: 115F051E46760E00A40A33B46B50E04D82EB2AFE
Authority key identifier: 44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa
Signing time: Fri 07 Mar 2025 01:12:29 +0000
ROA not before: Fri 07 Mar 2025 01:07:29 +0000
ROA not after: Fri 06 Mar 2026 01:12:29 +0000
asID: 269355
IP address blocks: 2804:6358:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:5f:05:1e:46:76:0e:00:a4:0a:33:b4:6b:50:e0:4d:82:eb:2a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=446D4F390AB834CB395232A0680D14394BE75FCC
Validity
Not Before: Mar 7 01:07:29 2025 GMT
Not After : Mar 6 01:12:29 2026 GMT
Subject: CN=785226697FAA80190EE563D8D578A922A9A7D7C9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:53:46:fd:e6:b2:05:69:96:56:f6:fd:e8:12:
57:30:c4:ee:f2:47:df:ac:15:d2:91:df:72:0c:7e:
98:f8:9e:3d:ba:92:72:6f:20:87:da:59:d0:b0:89:
f5:4e:4f:cb:c7:a1:e5:48:b2:c5:06:7f:b6:ad:1b:
cc:be:5f:c5:19:a5:11:7b:cf:82:99:98:78:de:3b:
c6:7a:32:89:6c:11:ea:a0:3c:00:18:67:58:ba:e7:
ab:c3:44:04:05:26:a9:f4:83:24:d5:11:d9:42:28:
ae:33:b7:22:ca:e7:7a:02:dc:a4:ca:99:6c:e9:e7:
55:fd:05:1d:6e:5d:53:45:35:6e:c0:a9:e9:90:9b:
9a:27:fc:c8:a4:28:29:04:df:e1:c8:e2:09:4d:fd:
28:63:71:7e:e2:5f:30:24:4e:72:79:97:15:0b:e3:
47:e9:fb:00:2f:62:5e:40:45:38:28:3e:23:90:b4:
45:58:f4:f4:66:7a:2a:ed:d9:63:6a:66:fc:06:d5:
1b:2d:c5:1a:93:bd:ef:ad:96:6d:37:06:0c:f3:1a:
b7:1a:8d:f7:f3:08:85:a2:8b:e0:12:44:55:ea:6a:
a2:c8:26:ce:9a:cb:56:39:51:14:f8:d2:99:4b:de:
b7:01:85:74:58:f4:2c:b2:c1:bf:b1:3c:e1:85:97:
f3:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:52:26:69:7F:AA:80:19:0E:E5:63:D8:D5:78:A9:22:A9:A7:D7:C9
X509v3 Authority Key Identifier:
keyid:44:6D:4F:39:0A:B8:34:CB:39:52:32:A0:68:0D:14:39:4B:E7:5F:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/446D4F390AB834CB395232A0680D14394BE75FCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/446D4F390AB834CB395232A0680D14394BE75FCC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TiGjFf9XnFQDMahHm8CHr8qHLTk3iNpEyotWooVGUJ9/1/323830343a363335383a383030303a3a2f33332d3333203d3e20323639333535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6358:8000::/33
Signature Algorithm: sha256WithRSAEncryption
19:39:18:ef:d1:a4:1c:c9:1e:b1:d6:be:77:c4:40:a1:f3:e3:
0a:3e:a9:1a:61:5a:18:5c:86:76:45:61:2a:ce:12:fa:21:a0:
73:ae:11:96:ae:5a:94:de:65:0d:01:17:a8:70:1a:a8:a9:78:
d1:fa:14:8f:2c:94:d4:a2:21:1f:aa:1b:60:02:17:e2:c1:17:
f7:d4:f4:a9:7b:a9:e0:08:01:20:7f:8c:f9:56:91:72:8c:f2:
ee:4f:de:54:88:aa:f0:c3:3c:e2:0c:45:3b:f4:9f:5e:4d:ed:
c6:8b:71:50:3a:63:17:5d:85:5f:6a:1f:ab:be:be:48:e9:89:
ee:28:53:20:08:68:9c:bf:d6:43:2c:ed:1c:1f:dd:c0:43:a7:
d1:b5:4f:f5:d1:32:22:8d:77:06:17:61:06:06:40:bb:23:a2:
41:d4:66:38:03:10:c9:9c:5b:6e:ef:ab:cb:69:18:6a:ce:5a:
86:1d:f5:ca:eb:5a:7e:11:39:74:3f:0e:da:a2:be:6d:f1:c1:
03:06:23:73:8b:0b:a9:4a:53:5c:28:bd:6c:06:58:ae:6b:e2:
89:80:cf:53:de:fb:f8:06:52:9a:b8:6e:0f:f5:bf:a9:f0:63:
2b:52:08:a0:b4:0d:fd:8e:49:62:db:4f:fa:a0:d5:b5:a5:9f:
da:fe:50:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:47:46 2025 by rpki-client