Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/323830343a333834383a3a2f33322d313238203d3e20323636343637.roa
File: 323830343a333834383a3a2f33322d313238203d3e20323636343637.roa (raw, json)
Hash identifier: 5GT1kEGrkyq51AlLdE+J7/S+FUm5W64ocgKfXOSY1ho=
Subject key identifier: F4:00:4B:1E:25:92:73:AF:63:97:9E:1E:BC:14:1A:08:24:63:80:5C
Certificate issuer: /CN=85B8203FB1BA45D93576DC8D26B4084FA92D9D2C
Certificate serial: 36D8F0B4ACD0F9C79BDB7C32B992CFB8EDB5095B
Authority key identifier: 85:B8:20:3F:B1:BA:45:D9:35:76:DC:8D:26:B4:08:4F:A9:2D:9D:2C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B8203FB1BA45D93576DC8D26B4084FA92D9D2C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/323830343a333834383a3a2f33322d313238203d3e20323636343637.roa
Signing time: Mon 10 Feb 2025 15:46:25 +0000
ROA not before: Mon 10 Feb 2025 15:41:25 +0000
ROA not after: Mon 09 Feb 2026 15:46:25 +0000
asID: 266467
IP address blocks: 2804:3848::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:d8:f0:b4:ac:d0:f9:c7:9b:db:7c:32:b9:92:cf:b8:ed:b5:09:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85B8203FB1BA45D93576DC8D26B4084FA92D9D2C
Validity
Not Before: Feb 10 15:41:25 2025 GMT
Not After : Feb 9 15:46:25 2026 GMT
Subject: CN=F4004B1E259273AF63979E1EBC141A082463805C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:32:57:50:4d:90:63:6e:58:3b:b7:12:79:a4:
ab:79:4b:93:a2:c1:c9:d5:3f:1b:fa:6b:8b:3a:d1:
79:fe:d6:9f:66:ef:f2:bc:64:3b:29:b3:d2:c3:b2:
07:36:0a:0f:3e:96:09:b7:b0:89:38:5a:4c:fc:13:
87:81:96:7b:54:bf:0a:16:e4:cd:af:93:bb:30:f5:
10:83:36:90:87:e0:25:3f:eb:63:ea:7f:7c:6a:67:
7b:17:94:bc:18:64:8c:f8:3f:78:3b:24:30:d7:bd:
71:12:bd:17:cd:33:2f:06:97:56:3f:de:0b:3b:b1:
6d:99:db:6e:07:09:5c:bc:81:ff:7d:94:cb:5a:8e:
98:65:b6:0b:8f:dd:e8:51:64:05:52:45:db:c1:1f:
7d:6d:15:59:a9:cb:00:7e:af:37:cd:93:6a:15:ee:
24:0d:0a:67:6e:6f:34:ea:33:00:c0:e7:26:aa:60:
82:95:b4:92:ff:ec:3c:0c:74:78:85:3b:c3:db:3b:
a7:27:64:d8:f0:30:f3:02:cc:76:c5:66:ce:07:47:
ee:ef:10:4d:30:01:c3:e7:59:23:a6:2e:b2:a6:7d:
9b:8e:87:3e:e4:23:86:41:f1:69:eb:ef:13:ff:72:
36:ba:7f:97:28:9a:1c:fc:d1:05:a3:b0:3e:f7:37:
c2:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:00:4B:1E:25:92:73:AF:63:97:9E:1E:BC:14:1A:08:24:63:80:5C
X509v3 Authority Key Identifier:
keyid:85:B8:20:3F:B1:BA:45:D9:35:76:DC:8D:26:B4:08:4F:A9:2D:9D:2C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/85B8203FB1BA45D93576DC8D26B4084FA92D9D2C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/85B8203FB1BA45D93576DC8D26B4084FA92D9D2C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3q3udjzpEtZP5krR5jm2iJZ23erUHMcFpXkJeLvzSYpt/0/323830343a333834383a3a2f33322d313238203d3e20323636343637.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3848::/32
Signature Algorithm: sha256WithRSAEncryption
79:fb:ef:80:96:36:fe:76:15:9d:56:a0:e4:e3:80:8a:b8:e9:
ad:9f:82:da:e5:9a:d2:fe:3e:e2:d1:70:b1:e9:04:4b:d3:e5:
84:ad:63:16:5c:1e:73:34:29:47:d2:da:df:45:e5:49:7e:fb:
ba:82:e2:5d:50:83:6e:9a:6b:ae:ce:b4:18:d2:4b:da:37:71:
e9:d1:48:1e:46:02:9c:eb:be:28:ca:36:4e:67:7b:a0:65:df:
27:0b:17:05:e7:a0:37:49:c6:f6:06:cd:36:cb:36:96:e5:f9:
0d:42:84:3c:b7:33:f1:84:4a:83:72:ae:ce:7c:ff:06:9a:8e:
0c:ae:c9:08:d0:98:55:51:b7:cc:5b:f4:6b:d3:9b:15:d4:b0:
9b:6a:6f:fb:88:8c:a8:56:68:3e:11:8b:09:f5:06:94:2c:ef:
e6:07:63:09:cc:85:33:7f:7c:88:7c:d3:33:47:56:f0:ea:c7:
bd:de:53:2e:ca:ce:32:3a:e7:af:bd:43:f7:05:cc:1d:ba:e5:
25:ab:4f:a5:67:5a:d8:97:8b:2d:54:33:38:a6:5d:14:b9:6b:
89:27:9f:1b:fb:da:66:89:34:a3:8d:ba:c8:d5:70:67:c9:e2:
f7:51:5d:92:a4:3a:29:2c:a7:f1:a7:e5:02:4b:85:ec:af:9b:
87:e5:9f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:26:16 2025 by rpki-client