Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa
File: 323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa (raw, json)
Hash identifier: /fcAH6nhxEVlZA47qQJWmUOZtBXjel98JDeE57gwbKk=
Subject key identifier: 09:E3:A0:1A:0E:B1:96:36:93:8C:D9:B8:8D:3A:91:FE:F4:BE:A1:FD
Certificate issuer: /CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Certificate serial: 053B504773760BD303882478EB010DAD6166FC17
Authority key identifier: 8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa
Signing time: Wed 05 Mar 2025 19:00:14 +0000
ROA not before: Wed 05 Mar 2025 18:55:14 +0000
ROA not after: Wed 04 Mar 2026 19:00:14 +0000
asID: 266129
IP address blocks: 2804:3b18:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:3b:50:47:73:76:0b:d3:03:88:24:78:eb:01:0d:ad:61:66:fc:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8E84FF9121D9257376D777A092533D8CEDB9EE9E
Validity
Not Before: Mar 5 18:55:14 2025 GMT
Not After : Mar 4 19:00:14 2026 GMT
Subject: CN=09E3A01A0EB19636938CD9B88D3A91FEF4BEA1FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b8:34:94:a5:1b:57:a8:77:21:be:7f:f5:f1:
b4:57:1b:e3:b7:8c:95:1c:df:73:2d:50:4a:0e:9a:
b7:2d:ed:d1:5c:1f:d8:77:75:24:b7:5b:b7:ea:78:
c4:eb:46:20:93:0b:59:97:d5:2f:83:eb:ec:c7:c3:
50:d5:9e:41:0d:58:4c:0c:6d:b0:f2:fe:25:5e:e4:
13:07:16:e7:3f:5d:cb:a9:50:89:45:46:59:d0:72:
df:34:a6:47:73:dc:1a:fc:5b:4e:eb:52:1a:11:03:
4f:2e:f7:81:b6:97:0e:b0:76:b6:9d:f7:b2:5c:f5:
1b:a3:31:52:af:0a:95:89:e3:15:b9:20:fc:c9:f8:
ce:61:e2:50:ac:a4:7c:99:6b:e7:f5:1e:b0:18:01:
57:b8:d3:37:92:47:96:01:d9:e6:94:a7:b1:fd:08:
57:80:9b:47:bb:a4:24:d9:41:88:51:04:34:b0:71:
bf:46:00:cc:b1:61:16:4d:9c:00:33:a0:95:9e:c1:
fa:0a:42:1c:d7:8f:c7:40:99:4f:1f:83:d0:72:5d:
3c:86:3c:40:49:d7:cd:09:72:6c:2a:bc:06:ac:5a:
62:d0:74:50:04:52:4e:d3:51:a7:4d:1c:e2:ac:ac:
8d:8e:98:b8:b4:2f:b2:f1:e2:91:1d:d3:d8:12:13:
10:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:A0:1A:0E:B1:96:36:93:8C:D9:B8:8D:3A:91:FE:F4:BE:A1:FD
X509v3 Authority Key Identifier:
keyid:8E:84:FF:91:21:D9:25:73:76:D7:77:A0:92:53:3D:8C:ED:B9:EE:9E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8E84FF9121D9257376D777A092533D8CEDB9EE9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3YDzQ5nb17ypZJ9vrKb722yBYewkmKDe2EwYqSjJjwuW/1/323830343a336231383a633030303a3a2f33342d3334203d3e20323636313239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b18:c000::/34
Signature Algorithm: sha256WithRSAEncryption
63:72:a8:14:85:e7:b8:ee:10:09:7b:e7:29:f1:8b:ca:6c:2a:
dc:9b:e6:5a:13:63:60:b7:c1:ab:cc:ab:c9:f3:ed:9b:94:8b:
90:28:a4:bd:7e:91:b6:a8:46:78:1b:a8:bf:f4:bd:43:b1:84:
38:0f:1a:06:16:3c:d4:6e:3b:46:87:91:19:a6:ff:d5:e2:bf:
9e:f8:f8:c7:a0:19:98:d9:d8:ab:63:8a:05:63:8d:4a:94:43:
44:68:24:90:79:25:62:38:b9:8c:54:92:a0:51:a3:bf:12:92:
c6:39:d9:5d:04:03:d9:ec:2e:02:71:b0:d6:fd:f6:c5:67:9f:
4d:aa:3c:4b:40:f0:67:eb:84:57:d2:75:47:74:07:49:81:02:
14:07:d4:81:ac:ed:6b:d1:2e:6a:59:bf:2d:4c:a9:42:48:03:
01:a8:be:9f:00:fd:eb:f0:87:2d:5c:57:be:30:e0:81:76:aa:
15:52:d3:ea:8e:6d:de:e9:d9:11:11:a1:09:a4:15:af:dd:f7:
63:98:91:cf:eb:56:e1:b3:f3:e5:37:1a:a5:92:12:82:31:f8:
93:0b:84:4b:b1:bb:4d:41:f7:b1:72:b9:66:a3:7a:d9:d0:0c:
73:cf:78:2d:e2:d0:22:08:b6:0a:92:e0:11:ef:ad:b1:b5:13:
f4:33:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:08:38 2025 by rpki-client