Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3930303a3a2f34302d3430203d3e20323730343331.roa
File: 323830343a366265303a3930303a3a2f34302d3430203d3e20323730343331.roa (raw, json)
Hash identifier: J10x12IWijVFdrEnzXL8TRmoa8o5yXxFW7T7Sj0C2+s=
Subject key identifier: 40:11:9B:9D:48:42:62:57:3A:A2:77:41:C8:95:24:76:B9:3D:DB:F5
Certificate issuer: /CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Certificate serial: 0A38AF6782D2E111C762B40E4BF5405DD488B336
Authority key identifier: 7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3930303a3a2f34302d3430203d3e20323730343331.roa
Signing time: Wed 29 Jan 2025 22:29:12 +0000
ROA not before: Wed 29 Jan 2025 22:24:12 +0000
ROA not after: Wed 28 Jan 2026 22:29:12 +0000
asID: 270431
IP address blocks: 2804:6be0:900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:38:af:67:82:d2:e1:11:c7:62:b4:0e:4b:f5:40:5d:d4:88:b3:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A3155CF09025C706805077AAA5B01CEBAB508F3
Validity
Not Before: Jan 29 22:24:12 2025 GMT
Not After : Jan 28 22:29:12 2026 GMT
Subject: CN=40119B9D484262573AA27741C8952476B93DDBF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:63:a5:62:01:ad:d3:4d:28:9b:5b:ff:2c:5e:
8c:c4:58:d3:21:cb:b0:bf:d3:1c:b0:c8:89:e3:4d:
aa:26:d7:b2:df:7c:fd:c8:1d:3b:86:c8:15:c9:d2:
33:54:18:bf:48:b2:2c:dc:1e:6c:8c:38:85:77:6d:
25:b5:47:e2:40:05:f9:31:1b:9f:e8:32:c5:fd:a2:
f0:6c:41:47:f9:87:0a:2a:17:3c:69:23:19:a2:16:
bd:1e:33:90:45:a3:4a:7c:34:2f:6c:f9:1c:27:34:
49:3d:2d:7c:50:05:ae:61:99:2f:f9:f1:a7:5a:60:
9c:6b:8f:1a:f6:2b:e0:66:fb:64:df:10:4e:42:d4:
e0:ac:85:1b:44:fd:15:27:ac:79:4d:f4:cb:85:6e:
2d:25:7a:5d:7e:80:ad:b7:03:ae:0d:7b:da:94:b2:
e5:5b:2e:b2:ce:5b:25:7c:8f:73:6a:25:96:ab:c2:
55:37:24:e2:d3:1a:8b:dc:4e:75:46:f0:06:f4:ab:
29:37:9b:d4:34:b1:e4:59:a4:b7:9a:86:57:dc:18:
7d:fc:5d:d3:b7:f5:0a:d6:2f:cc:5c:ca:a4:91:bd:
44:88:7c:08:e2:94:65:e5:dc:ee:79:cb:f6:b4:43:
26:75:34:50:c9:5a:34:55:45:8a:5d:a6:fd:7e:3a:
0d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:9B:9D:48:42:62:57:3A:A2:77:41:C8:95:24:76:B9:3D:DB:F5
X509v3 Authority Key Identifier:
keyid:7A:31:55:CF:09:02:5C:70:68:05:07:7A:AA:5B:01:CE:BA:B5:08:F3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/7A3155CF09025C706805077AAA5B01CEBAB508F3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A3155CF09025C706805077AAA5B01CEBAB508F3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3TxE1YqYsXZV25FMLMmP3mHVukZzyqGtJ2aYVKtYnG6T/0/323830343a366265303a3930303a3a2f34302d3430203d3e20323730343331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6be0:900::/40
Signature Algorithm: sha256WithRSAEncryption
a5:24:c2:da:c0:c8:21:d8:5c:85:ff:5f:53:1b:71:40:ef:a2:
30:75:84:04:45:45:a3:58:73:16:d7:58:f4:a3:c4:17:d9:10:
91:6d:d8:09:9d:92:a9:13:97:b3:05:67:dd:aa:32:99:f3:a4:
f3:c9:bf:d9:0f:d3:3f:00:2e:d8:b3:e1:7f:f7:8c:ff:50:d2:
ce:70:2a:64:07:d6:8f:f9:a7:82:b7:1f:c1:25:7a:c6:06:43:
b0:3e:68:a1:e7:cc:9c:81:a1:f2:42:a5:25:d0:88:9d:bf:d2:
33:ab:93:10:bf:a6:5d:a0:39:d4:f6:79:f1:9d:03:6e:62:14:
a5:a3:94:34:23:71:46:5c:cd:8d:25:c2:12:d5:23:54:ca:b9:
30:d6:b1:ab:20:b4:3e:cf:e1:3d:ad:72:fc:24:9a:dd:9d:e8:
26:ce:43:c4:d0:af:0c:58:37:de:76:db:16:89:a8:8f:98:af:
7a:6f:26:f1:65:79:cd:f9:94:04:69:3c:e5:5d:b3:a1:84:ae:
c1:d0:3d:b2:ba:7a:88:71:bf:2a:ba:ca:c2:10:0f:fd:ea:37:
2a:8a:29:91:ba:a5:4b:8c:bc:18:73:39:06:34:71:71:89:c0:
ef:3d:82:9f:a0:77:33:41:25:08:0c:96:f1:a3:dd:ce:d2:14:
25:0a:82:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 14:20:18 2025 by rpki-client