Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/323830343a3464383a3a2f33322d3332203d3e203532393935.roa
File: 323830343a3464383a3a2f33322d3332203d3e203532393935.roa (raw, json)
Hash identifier: tipdpbnsl3L6sx86gYxtO3JT8glKCmWTaIzZ9dI4wwI=
Subject key identifier: C5:9E:C8:11:A9:70:85:0E:82:D4:11:4B:99:7A:4C:98:A0:16:2F:2C
Certificate issuer: /CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Certificate serial: 0ACF900B924644DE24DCFA6378667CD11CF768A9
Authority key identifier: 25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/323830343a3464383a3a2f33322d3332203d3e203532393935.roa
Signing time: Wed 05 Mar 2025 19:00:03 +0000
ROA not before: Wed 05 Mar 2025 18:55:03 +0000
ROA not after: Wed 04 Mar 2026 19:00:03 +0000
asID: 52995
IP address blocks: 2804:4d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:cf:90:0b:92:46:44:de:24:dc:fa:63:78:66:7c:d1:1c:f7:68:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25F750CC8B097F02421DA84CAA0417DC66A794EE
Validity
Not Before: Mar 5 18:55:03 2025 GMT
Not After : Mar 4 19:00:03 2026 GMT
Subject: CN=C59EC811A970850E82D4114B997A4C98A0162F2C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:b8:d5:7f:a9:99:e1:0c:0b:04:a9:f7:2a:
cb:f4:a7:35:68:fc:52:3f:c9:b1:7d:6e:42:f5:b7:
1c:49:a7:b0:f8:ad:56:7a:9b:21:86:84:07:6d:4e:
f7:0f:6d:95:31:96:98:91:e4:e8:32:6c:33:cb:4b:
50:5b:1f:c7:0d:41:4a:8d:4a:01:0d:32:60:d8:fc:
2d:7b:d9:70:a2:d2:b1:71:6c:b7:4b:8f:b8:66:28:
04:05:31:08:2c:ee:89:82:b1:ea:cb:0e:61:41:d5:
7b:1f:50:78:c3:5b:62:f8:27:9c:8f:78:9f:59:60:
fe:d1:72:e4:d3:be:1c:91:4b:11:5c:a9:05:bc:e5:
dc:05:a1:a9:74:38:02:82:c8:05:7a:c9:b8:82:46:
55:23:3e:3c:1c:e9:fd:93:98:8c:3a:1d:22:05:df:
72:cf:87:ad:dc:52:74:29:86:1a:f9:fc:89:18:c9:
6a:96:1f:58:2e:b8:e3:5b:3b:45:62:bf:1f:24:86:
30:bf:c4:ef:95:e4:41:36:3a:89:d2:62:f3:c4:04:
7e:72:00:92:b0:5c:9c:23:2b:2a:67:a8:62:24:4b:
7f:0e:fd:6d:f0:f3:45:fe:9a:45:26:00:6f:2d:0a:
9a:46:0f:7e:b6:94:5c:2c:09:63:1b:5c:3d:84:66:
8c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:9E:C8:11:A9:70:85:0E:82:D4:11:4B:99:7A:4C:98:A0:16:2F:2C
X509v3 Authority Key Identifier:
keyid:25:F7:50:CC:8B:09:7F:02:42:1D:A8:4C:AA:04:17:DC:66:A7:94:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/25F750CC8B097F02421DA84CAA0417DC66A794EE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3upP9FQ58aG8B11wMdKR2feHQwU2CbQerfvhPWCbbhu3/1/323830343a3464383a3a2f33322d3332203d3e203532393935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4d8::/32
Signature Algorithm: sha256WithRSAEncryption
19:f7:56:3d:88:19:ac:01:8b:e5:8b:d3:71:da:7e:b6:f0:a8:
9b:ec:d0:91:42:21:1f:ce:f4:99:e1:a2:05:05:e8:25:b6:8d:
b5:ad:e2:77:75:ee:b7:64:bb:b6:12:4a:53:ee:05:c7:ab:05:
e3:6b:cb:48:17:e9:19:ec:e3:8c:67:32:5a:ff:19:45:46:fb:
92:79:5c:46:ea:c8:cc:9b:ae:7e:0a:c6:2e:3c:a3:4b:11:51:
f2:2d:a8:28:30:68:d2:7d:9d:a6:53:88:43:2e:6f:80:ab:98:
81:cb:ae:8e:c2:82:a2:19:e8:c4:db:f5:38:6e:55:67:d6:8e:
69:ba:66:94:b2:ab:d6:56:03:cd:23:6c:eb:b8:a5:16:54:87:
fe:31:9b:05:72:fd:bd:d9:d7:45:03:f6:62:dd:f1:50:16:1a:
58:f8:c0:a0:fd:81:8c:0f:a0:ad:5e:47:4c:f6:d7:90:6b:35:
59:37:16:14:2b:ab:c6:48:04:db:e9:de:46:54:be:1b:df:c3:
a8:07:8c:66:41:40:66:b6:7c:70:e0:cf:02:be:3d:17:6c:54:
c1:e1:2a:01:aa:ea:86:e3:44:d7:ce:77:4c:3a:ff:44:73:cd:
e8:ec:54:a1:fd:38:4c:f0:63:85:32:ad:a2:d2:47:5b:70:21:
8a:c0:a8:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:42:37 2025 by rpki-client