Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
File: 323830343a323761383a3a2f33322d3334203d3e20323633393135.roa (raw, json)
Hash identifier: UhTWnyVMbYu8EHBAglnDBIow7lLgfSvBg43ee63dnW4=
Subject key identifier: 38:9C:77:7F:82:A2:9A:06:84:8A:E7:54:4C:93:89:24:8B:86:25:F9
Certificate issuer: /CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Certificate serial: 3FBF273A5354C9918ADE532691234B7689E7A4C7
Authority key identifier: C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
Signing time: Thu 06 Mar 2025 18:22:58 +0000
ROA not before: Thu 06 Mar 2025 18:17:58 +0000
ROA not after: Thu 05 Mar 2026 18:22:58 +0000
asID: 263915
IP address blocks: 2804:27a8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:bf:27:3a:53:54:c9:91:8a:de:53:26:91:23:4b:76:89:e7:a4:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43
Validity
Not Before: Mar 6 18:17:58 2025 GMT
Not After : Mar 5 18:22:58 2026 GMT
Subject: CN=389C777F82A29A06848AE7544C9389248B8625F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fc:da:8f:35:22:7e:23:fd:ca:d0:15:32:23:
65:ab:d7:1b:fa:d7:3b:da:0f:15:60:dc:7f:15:36:
13:12:86:e6:32:0c:84:9f:bd:2a:99:f9:17:16:d8:
a8:fd:47:eb:30:40:59:7c:1d:b8:bc:1b:07:9c:c0:
cc:82:43:0d:9b:8f:73:7c:d8:86:69:a6:33:6c:81:
c3:5f:de:9d:f0:14:7d:d4:57:90:27:ea:b4:0c:79:
3d:78:47:d3:1b:d2:20:cd:9d:52:a2:04:d6:f3:67:
34:f0:9d:20:40:c9:66:89:7b:89:c4:94:75:e8:5f:
ca:5f:1b:11:a4:e4:96:d0:39:70:86:4c:10:79:c1:
db:bf:86:83:3e:86:c0:9f:e1:11:f6:31:96:d5:73:
b8:b0:b8:f4:a4:63:93:a1:a9:3d:3c:5d:23:db:f7:
19:fb:0a:1d:5d:bb:a4:65:f5:fc:93:6a:76:d0:f1:
fb:71:c8:e3:a6:d4:74:ea:77:0f:9b:22:8e:65:90:
aa:eb:36:d9:87:76:c3:f7:b3:ba:5c:c5:2c:6e:1f:
d5:8c:5c:b8:5a:c0:16:40:8b:ff:40:ea:ff:b8:ad:
eb:fd:bc:da:1b:87:71:6b:37:f2:d4:68:76:21:bc:
3c:64:d3:13:46:70:67:f8:95:a4:07:15:31:3f:88:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9C:77:7F:82:A2:9A:06:84:8A:E7:54:4C:93:89:24:8B:86:25:F9
X509v3 Authority Key Identifier:
keyid:C0:28:A9:5F:B6:F7:E9:B3:04:AB:7B:15:BA:9C:F3:7C:74:20:EE:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C028A95FB6F7E9B304AB7B15BA9CF37C7420EE43.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/1/323830343a323761383a3a2f33322d3334203d3e20323633393135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27a8::/32
Signature Algorithm: sha256WithRSAEncryption
44:00:53:d4:f1:18:ba:f5:5e:1e:fb:7d:52:d9:ed:39:ca:e8:
53:f6:11:4b:65:11:8e:a3:76:97:6d:90:91:51:ac:60:7f:65:
1b:b5:55:bd:06:a7:48:7d:ff:f3:1c:97:2f:ab:10:2e:1c:e8:
98:a4:eb:3d:03:1b:30:16:94:e6:db:8b:94:b0:31:e9:b8:f8:
42:35:fa:61:eb:8d:bf:4a:c8:cc:68:82:3b:6f:23:bc:fa:9f:
87:86:f0:b6:03:35:01:29:06:e2:eb:cd:19:63:bc:97:e4:b5:
ac:91:22:3b:f3:31:3d:6e:f5:21:11:d8:08:c5:c2:2d:b7:f1:
02:7a:f0:95:92:db:bc:45:da:cf:07:a2:b4:d4:c4:06:8b:a6:
93:9b:a4:53:fc:ac:35:70:f8:6b:3b:c7:9e:09:ea:7f:23:b0:
32:f6:b3:1e:c4:25:aa:ce:2a:b3:f0:80:ba:b5:97:fb:73:3e:
25:34:e0:c6:f8:95:fb:43:9f:29:03:b8:86:c7:3e:54:90:e0:
24:fd:c9:ef:b4:6d:c4:df:fb:cf:5b:30:14:86:2f:6b:49:5d:
c4:2b:09:54:5f:4b:13:1c:60:05:a9:ab:db:5c:82:ce:6c:e7:
88:b8:e6:8f:b3:de:bc:f5:96:f7:4e:eb:bb:b6:ce:ac:64:1a:
2d:d0:c4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:56:21 2025 by rpki-client