Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d3438203d3e20323634313237.roa
File: 323830343a323264633a3a2f33322d3438203d3e20323634313237.roa (raw, json)
Hash identifier: orUpteGth+JTOjLIpkDk5D2ZHYpZbmhzL1wAvYz4Wnc=
Subject key identifier: 7E:B7:FC:5E:34:DC:C0:79:9A:1A:B4:B5:EE:95:10:50:A7:F5:D5:FB
Certificate issuer: /CN=154E883FCB52E91706C17788E2199491DC6E45F7
Certificate serial: 0B497C1DDD88EA343E3C90C75AFA6E5E744F062E
Authority key identifier: 15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d3438203d3e20323634313237.roa
Signing time: Sat 08 Mar 2025 20:15:32 +0000
ROA not before: Sat 08 Mar 2025 20:10:32 +0000
ROA not after: Sat 07 Mar 2026 20:15:32 +0000
asID: 264127
IP address blocks: 2804:22dc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:49:7c:1d:dd:88:ea:34:3e:3c:90:c7:5a:fa:6e:5e:74:4f:06:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=154E883FCB52E91706C17788E2199491DC6E45F7
Validity
Not Before: Mar 8 20:10:32 2025 GMT
Not After : Mar 7 20:15:32 2026 GMT
Subject: CN=7EB7FC5E34DCC0799A1AB4B5EE951050A7F5D5FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:81:90:10:85:21:ec:74:3f:0e:92:36:5e:8a:
db:ce:15:7d:52:76:57:b7:3a:c9:87:a9:5d:5b:1c:
c6:9b:ec:69:55:6e:c2:3f:10:f5:0e:67:d3:3d:26:
31:0b:f9:f8:5c:a9:01:51:da:6d:08:4f:26:f1:f5:
38:96:17:38:22:36:06:a0:90:ad:35:d1:af:f7:b3:
39:f6:cb:dd:83:33:0b:b8:ce:4d:2b:f2:f5:74:36:
61:9f:4c:27:e7:b5:61:69:bb:d9:cd:b6:c4:7c:33:
b4:d1:dc:16:4f:b9:22:8d:e4:28:df:e9:be:e4:16:
46:45:60:03:b9:19:aa:e1:4e:05:4a:4d:52:77:ad:
19:a4:ad:f6:f6:cd:67:92:5a:18:1d:32:ff:8f:ee:
16:9a:18:18:11:e3:f2:73:39:95:cc:d5:71:58:fe:
1f:22:fe:4e:48:74:e7:5e:f0:98:25:1d:ff:d2:61:
03:5f:8a:80:fa:ec:fd:8e:c5:49:96:a7:2c:08:40:
45:01:3d:b9:ec:8d:6c:8e:4e:34:3a:7b:54:fd:77:
4e:fb:38:69:c5:42:53:44:d9:d9:74:82:40:2b:ee:
83:4c:08:b1:6c:53:f3:9a:be:91:05:1b:ff:df:53:
dd:99:b0:19:41:b3:91:ab:13:96:7c:8d:c6:5e:48:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B7:FC:5E:34:DC:C0:79:9A:1A:B4:B5:EE:95:10:50:A7:F5:D5:FB
X509v3 Authority Key Identifier:
keyid:15:4E:88:3F:CB:52:E9:17:06:C1:77:88:E2:19:94:91:DC:6E:45:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/154E883FCB52E91706C17788E2199491DC6E45F7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/154E883FCB52E91706C17788E2199491DC6E45F7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3wKJBj5U3kNW4hZBKMY4pjnhJ8HEjo6Dau8JQMFag1U6/0/323830343a323264633a3a2f33322d3438203d3e20323634313237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:22dc::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ff:33:ee:95:75:f3:ab:fc:74:b0:a2:00:b8:d2:50:51:7c:
c9:75:90:31:ac:4a:da:1b:31:b8:94:ec:4c:52:e9:4d:f3:df:
05:18:7a:29:f8:14:08:7b:86:71:70:87:a4:3c:52:80:66:63:
96:6b:ef:d3:cb:03:1c:30:75:71:d9:99:e2:a7:8c:1b:fa:69:
3f:86:d4:34:ec:5b:4d:f6:93:c8:47:10:6c:d4:0a:e5:e6:10:
33:9c:bc:c6:c0:8b:6d:a8:72:d3:9a:75:3e:25:e5:f8:6e:48:
42:69:96:d8:58:fe:b6:aa:00:ba:aa:47:51:8d:d7:14:af:27:
1e:db:a3:35:18:bf:9f:2a:10:ae:78:2f:84:a1:8b:ba:2a:02:
4b:db:09:37:7d:23:da:02:e8:81:97:0d:b1:06:85:c5:9c:59:
51:6f:7f:4a:c9:c2:1e:75:33:7d:d2:53:7b:f9:4f:0f:80:95:
a3:d5:4b:f6:3d:1b:12:0a:d2:8c:df:52:80:67:4d:e9:89:51:
5b:53:aa:0f:27:5e:08:55:13:72:c1:ee:6d:9b:c2:50:c2:07:
85:af:b6:ea:9e:39:d1:cd:fd:6c:ca:58:c7:4b:12:7f:de:c3:
82:15:8d:84:07:c0:e9:90:61:31:20:d9:11:55:aa:bf:be:02:
95:f9:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:23:43 2025 by rpki-client