Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa
File: 323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa (raw, json)
Hash identifier: zGh7UqL2DDmX9WrYgb+qU0kcX1WftTr4K3sjVCejqoQ=
Subject key identifier: 27:1D:9B:03:9E:14:03:2A:AD:02:FC:26:F2:55:17:05:0F:5F:EB:7E
Certificate issuer: /CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Certificate serial: 2CF190C77EB9798620CBD1FC6616BD511EB7A8A9
Authority key identifier: CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa
Signing time: Mon 17 Feb 2025 19:18:55 +0000
ROA not before: Mon 17 Feb 2025 19:13:55 +0000
ROA not after: Mon 16 Feb 2026 19:18:55 +0000
asID: 269457
IP address blocks: 2804:64e8:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f1:90:c7:7e:b9:79:86:20:cb:d1:fc:66:16:bd:51:1e:b7:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF
Validity
Not Before: Feb 17 19:13:55 2025 GMT
Not After : Feb 16 19:18:55 2026 GMT
Subject: CN=271D9B039E14032AAD02FC26F25517050F5FEB7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:28:ad:b3:09:06:75:10:44:56:61:23:65:4b:
54:85:a4:ad:0a:70:1f:bb:07:91:81:24:45:83:1c:
f3:58:d7:eb:99:a4:13:48:35:30:1f:0e:4d:0d:3d:
fb:9e:87:7b:90:a8:55:2b:84:31:d5:eb:16:f8:29:
88:ca:ad:ea:02:68:6e:4a:c0:7d:5c:0b:60:c9:7a:
02:10:68:99:07:b0:2b:66:66:ae:42:51:a7:05:27:
3b:03:cb:96:a7:67:56:c7:88:bd:d9:15:75:1c:1e:
64:be:e7:a5:e9:f9:21:b6:a6:01:6a:65:c7:ad:54:
d3:61:f5:44:53:a6:d3:5e:3e:b6:c2:a5:41:59:4e:
9a:88:08:f0:7d:11:9a:e0:7a:5a:cb:5e:5b:04:a8:
ed:c3:38:39:f3:39:a3:43:eb:df:25:af:d1:4b:5b:
57:c1:b7:cf:da:01:25:29:53:4d:85:10:77:c0:84:
f3:ef:c8:49:78:30:a8:ab:45:b5:9c:1f:10:72:ff:
07:8c:b8:20:0d:be:09:cd:75:b3:b8:ad:ce:ae:48:
a9:d6:b3:49:aa:97:22:25:da:1b:ee:2b:d8:5e:fb:
bf:35:38:e9:9f:74:78:5b:7c:61:bc:f3:2b:1f:0b:
06:32:a0:2c:8e:00:1e:e4:e4:37:eb:cf:6a:ce:1b:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:1D:9B:03:9E:14:03:2A:AD:02:FC:26:F2:55:17:05:0F:5F:EB:7E
X509v3 Authority Key Identifier:
keyid:CA:AA:D4:3E:EF:6D:A3:FC:BA:65:80:EB:4E:34:A2:30:2B:19:BC:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CAAAD43EEF6DA3FCBA6580EB4E34A2302B19BCEF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3da9G3irT3X9UQ3c2Z4YQuCtmLUzNq7SsPTudd6WgeWC/0/323830343a363465383a383030303a3a2f33332d3333203d3e20323639343537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:64e8:8000::/33
Signature Algorithm: sha256WithRSAEncryption
0a:b7:aa:b0:43:49:3e:fd:87:a8:99:86:70:a9:9b:6d:5a:9b:
d3:a1:cb:a9:38:f4:4e:4e:15:95:67:42:b4:66:c0:c7:fc:6b:
c5:7d:46:03:94:aa:6a:94:05:74:aa:c2:80:98:76:04:10:96:
d2:52:f8:b3:40:37:2e:e5:c8:38:3d:33:57:78:c3:7a:b0:0f:
fb:a9:f9:6c:57:8c:5e:7f:dd:f1:18:39:21:f9:42:ae:78:dc:
7b:00:8d:df:16:21:6a:0e:27:21:1d:09:38:51:a3:f7:c6:ab:
46:60:64:6e:1e:90:ed:2a:c9:01:a1:5d:92:78:ae:7c:39:bf:
1c:42:58:90:1a:28:7d:54:32:e4:4a:81:13:a2:71:01:67:bf:
bb:56:10:80:6a:2a:13:50:2a:a8:c2:fc:f8:e6:e3:40:32:ea:
2f:d2:23:ad:25:16:50:f7:b2:ce:10:0f:16:02:d4:2b:ec:0a:
32:86:ce:68:d1:0b:8c:80:9b:ab:af:bc:7a:44:0b:3c:f4:f4:
c8:49:01:c7:39:29:41:ba:fc:9d:af:e3:20:22:be:53:aa:b8:
c0:76:b0:f2:5d:a7:1f:95:ca:2b:cc:ee:40:53:2c:fa:7b:5b:
73:7d:05:df:31:27:9e:d2:ab:53:89:9b:8a:e7:e5:ea:36:a8:
66:8e:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 08:07:47 2025 by rpki-client