Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa
File: 323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier: 51gh5cZvKcku/HTCN3fV9dVatQeeJSDnbxCgtyYWsmE=
Subject key identifier: CD:03:BB:2D:CD:E6:1A:E0:95:37:44:00:B9:CA:0F:44:5C:89:88:CC
Certificate issuer: /CN=03981ED1B457034CCBAC00F384454B3A021E294E
Certificate serial: 1AE5406DCAAB05186C58EA70577C8ADCC7766EC8
Authority key identifier: 03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject info access: rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa
Signing time: Thu 06 Mar 2025 03:55:54 +0000
ROA not before: Thu 06 Mar 2025 03:50:54 +0000
ROA not after: Thu 05 Mar 2026 03:55:54 +0000
asID: 28131
IP address blocks: 2804:170:4900::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:e5:40:6d:ca:ab:05:18:6c:58:ea:70:57:7c:8a:dc:c7:76:6e:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03981ED1B457034CCBAC00F384454B3A021E294E
Validity
Not Before: Mar 6 03:50:54 2025 GMT
Not After : Mar 5 03:55:54 2026 GMT
Subject: CN=CD03BB2DCDE61AE095374400B9CA0F445C8988CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:02:04:1a:a4:83:e6:f9:0b:ee:1d:ab:ea:0d:
8c:c1:8e:c7:54:a7:d7:36:f4:79:62:f0:37:f6:e1:
cf:8d:f9:41:0b:f3:81:b0:bc:97:f5:0a:13:14:84:
68:64:ab:a3:08:45:d7:81:30:93:40:a3:11:2d:5a:
dd:e5:a3:8e:b4:19:9e:f6:a8:53:44:c4:5c:c2:41:
6e:84:2b:0f:93:f0:59:de:58:58:eb:7c:56:a6:37:
0d:ea:13:3f:84:cc:ce:79:df:23:44:f9:56:3d:ba:
3a:e8:b3:8e:36:8c:ba:2c:2e:79:d2:13:c0:ca:5f:
96:4f:3c:0f:0b:c0:dd:e3:f8:ed:31:e7:d9:e6:79:
ba:2d:08:c1:e8:2f:a8:1b:ba:7e:d5:f9:03:13:fd:
1c:db:03:2d:d4:ef:5b:db:9a:0b:47:37:6b:bd:a6:
30:3c:7e:fc:2a:7e:1b:55:16:46:79:5b:ba:4a:7b:
c6:f1:a9:6a:06:78:91:55:84:7a:0a:28:7b:3a:1a:
a5:ed:b3:11:41:e3:e0:dd:29:7d:44:9d:00:03:f7:
e9:7d:62:a2:38:b6:e8:dd:28:98:82:dd:3e:02:13:
da:ac:b1:d2:0c:5a:55:30:28:7b:7d:ba:b9:22:47:
1b:54:89:e0:2c:46:a8:6c:20:4c:58:b7:45:4b:0a:
1a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:03:BB:2D:CD:E6:1A:E0:95:37:44:00:B9:CA:0F:44:5C:89:88:CC
X509v3 Authority Key Identifier:
keyid:03:98:1E:D1:B4:57:03:4C:CB:AC:00:F3:84:45:4B:3A:02:1E:29:4E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/03981ED1B457034CCBAC00F384454B3A021E294E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03981ED1B457034CCBAC00F384454B3A021E294E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/1/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:170:4900::/40
Signature Algorithm: sha256WithRSAEncryption
73:2e:bc:74:b6:3e:2b:27:14:0a:ab:67:73:aa:7f:f0:7f:3b:
e6:b5:59:e7:1f:3a:86:13:b6:60:02:d5:d5:f6:8d:ce:ac:f9:
29:52:71:39:ff:09:56:1d:6e:22:12:c8:42:ab:d1:17:11:0f:
ab:1d:68:9b:cd:e2:46:64:9b:3c:93:e5:fe:d0:86:36:49:52:
fe:c9:74:7a:bf:d8:0a:8a:c7:d5:06:c6:63:61:4e:a9:6f:2d:
4f:b9:68:05:90:7f:95:19:b9:e1:a7:1b:66:9d:1c:f9:ae:9b:
e7:fb:38:e4:7a:5f:17:48:a1:86:ac:74:66:d4:ec:c9:ff:dc:
77:08:c6:c0:2b:a9:e5:4d:32:19:f5:ee:51:5a:8c:1c:aa:cb:
d8:4a:41:34:f5:64:a8:16:3b:43:87:e2:9e:73:d7:94:1a:6a:
e4:0b:84:5f:f8:0a:88:fb:55:35:28:15:0b:91:e0:48:42:23:
98:f8:26:f7:28:af:ba:c3:ac:24:98:b1:83:7f:e2:70:71:47:
24:f1:94:5b:90:b8:a2:ed:74:66:bf:d9:23:5d:a0:d7:89:eb:
f0:10:12:37:60:5e:73:07:b2:bd:8d:7e:de:46:7d:8e:cf:89:
02:c5:a3:50:91:86:7d:10:65:b3:b3:80:0c:7f:a4:4e:5d:0f:
4c:23:a6:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 13:14:50 2025 by rpki-client