Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa
File: 323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa (raw, json)
Hash identifier: nhX4B8aSDA8N3nChVqRois6aRPNIMOFYJ3V9PMCJyK8=
Subject key identifier: 8E:B0:E3:AE:4A:31:4C:E4:A7:3B:CC:37:7B:3A:C7:CD:E0:70:56:40
Certificate issuer: /CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Certificate serial: 16A6A4682322D25F02FE3002F47A69DA0A097531
Authority key identifier: 19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa
Signing time: Thu 06 Mar 2025 18:53:31 +0000
ROA not before: Thu 06 Mar 2025 18:48:31 +0000
ROA not after: Thu 05 Mar 2026 18:53:31 +0000
asID: 61672
IP address blocks: 2804:1cbc:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a6:a4:68:23:22:d2:5f:02:fe:30:02:f4:7a:69:da:0a:09:75:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19FA718A7689F718ABB4C46D0D9B0A0C03666281
Validity
Not Before: Mar 6 18:48:31 2025 GMT
Not After : Mar 5 18:53:31 2026 GMT
Subject: CN=8EB0E3AE4A314CE4A73BCC377B3AC7CDE0705640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:80:c8:c8:c4:81:c7:c8:7c:fa:57:e9:3d:2a:
30:f9:7e:b0:50:56:3f:66:e4:0a:ac:a9:15:00:bc:
08:73:f9:40:b3:ae:12:bb:4f:73:5d:41:87:8e:9a:
56:d0:cb:2b:9c:27:95:a1:01:35:ce:35:d6:e7:59:
5b:50:25:6d:5b:11:bf:f9:09:94:aa:01:ab:1b:33:
bc:ad:ce:11:07:0d:5f:7f:5d:cf:76:6b:a4:67:67:
d7:69:eb:22:5b:92:9c:92:c2:3f:c6:46:27:6e:9d:
35:a8:9a:5c:52:05:94:d5:26:a1:59:f9:c3:43:57:
42:79:fa:89:66:df:15:f7:84:63:7e:9c:0e:e6:55:
6d:83:e7:c2:d2:cd:f8:80:a9:56:aa:51:a0:01:b8:
08:0f:6b:cf:4c:61:93:f6:0e:69:bb:22:5d:2f:20:
73:e7:b0:88:7b:8c:a5:80:5d:c0:93:1e:1d:15:b5:
4c:17:e6:71:00:d4:7e:b3:0f:92:f8:39:0d:60:86:
c5:1e:54:84:7f:e8:cb:96:33:ac:08:43:b8:82:92:
a9:8c:fc:ee:12:cb:8f:e4:67:9c:c1:26:42:33:ab:
c9:e3:05:a8:36:fd:c1:dd:8f:4a:df:9d:ce:61:9d:
88:c1:cd:f9:88:a4:05:76:e4:5a:be:79:7b:81:5e:
2c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:B0:E3:AE:4A:31:4C:E4:A7:3B:CC:37:7B:3A:C7:CD:E0:70:56:40
X509v3 Authority Key Identifier:
keyid:19:FA:71:8A:76:89:F7:18:AB:B4:C4:6D:0D:9B:0A:0C:03:66:62:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19FA718A7689F718ABB4C46D0D9B0A0C03666281.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3UHaLLWT5iSd8N5hAqQmHUnKXJLP2uFSRgkM7sYpv7FX/1/323830343a316362633a633030303a3a2f33342d3334203d3e203631363732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cbc:c000::/34
Signature Algorithm: sha256WithRSAEncryption
2d:d2:5f:6a:e5:cf:07:d0:be:ab:fe:25:31:67:9e:8f:7f:58:
df:e5:73:85:77:1c:ec:cd:c0:56:9a:b7:35:65:3f:88:5d:0e:
57:87:01:96:fb:65:8d:13:a2:86:40:9e:90:8f:2f:02:5a:30:
8f:48:e2:e9:63:72:e8:7b:5c:8b:bd:2c:74:e9:45:b8:7a:d6:
c5:96:37:2a:f3:c8:f3:b4:21:d8:e2:90:25:56:7b:81:38:de:
bd:d4:b3:06:94:0d:f8:ca:04:48:d1:9d:54:1c:c7:81:03:08:
ff:5c:22:51:67:c2:a4:04:61:8e:0f:4a:74:02:75:01:db:34:
5f:11:85:70:c6:ba:29:87:d2:25:ff:b7:c3:95:a0:01:35:a4:
6c:47:f7:ca:2e:51:5a:67:64:eb:a8:8b:2a:c5:09:f6:b1:bb:
9b:2d:af:5c:35:db:67:7a:56:d0:bb:d3:24:2a:23:79:73:d6:
e5:34:be:6f:fb:72:2d:06:fc:72:6e:36:44:62:62:2f:90:4b:
7d:9a:61:46:4b:3e:01:3a:de:6e:dc:04:6e:b8:b5:41:f4:42:
fd:0a:23:63:7d:de:9f:4e:52:5c:35:47:4d:ae:82:b5:81:d6:
ed:9c:12:9a:d8:11:9e:03:81:5f:6c:e8:8b:dd:85:6d:8b:63:
08:cd:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:49:58 2025 by rpki-client