Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33322d3332203d3e203532363533.roa
File: 323830343a6266383a3a2f33322d3332203d3e203532363533.roa (raw, json)
Hash identifier: pH38jvj39XvoGJKTjfMA30v3oQsVBlQyzwdMeYW4lPE=
Subject key identifier: FF:FA:F8:A3:3E:D7:08:11:C7:21:C2:95:4C:3D:02:EC:5F:0C:09:5A
Certificate issuer: /CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Certificate serial: 080513815E81BAEC3842302EF96A3D3095B4AFD3
Authority key identifier: 03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33322d3332203d3e203532363533.roa
Signing time: Thu 06 Mar 2025 00:00:03 +0000
ROA not before: Wed 05 Mar 2025 23:55:03 +0000
ROA not after: Thu 05 Mar 2026 00:00:03 +0000
asID: 52653
IP address blocks: 2804:bf8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:05:13:81:5e:81:ba:ec:38:42:30:2e:f9:6a:3d:30:95:b4:af:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03748441D9CC7EE2A93E160BAB2724DAEB799F3B
Validity
Not Before: Mar 5 23:55:03 2025 GMT
Not After : Mar 5 00:00:03 2026 GMT
Subject: CN=FFFAF8A33ED70811C721C2954C3D02EC5F0C095A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:3a:ed:38:27:19:d6:d5:99:38:4e:dc:6a:
7d:c0:43:68:23:e9:df:67:70:5e:99:7a:ce:b9:6f:
5a:1f:da:91:8d:68:7f:67:0a:d6:23:41:b0:94:11:
32:15:f3:d4:e9:75:4a:21:39:e8:63:57:57:72:d4:
78:af:26:c7:c8:da:28:2c:6b:3f:b3:9b:5c:4f:8a:
8a:2c:11:6e:a1:f0:a9:8f:70:25:46:1b:3b:05:7a:
5f:4e:c2:25:6c:3c:23:4e:4a:06:3a:58:60:09:88:
1d:b0:e9:86:f4:43:7d:26:58:62:bd:7c:67:28:43:
6e:c8:69:e9:d1:ac:62:34:18:00:91:ed:9f:67:97:
cb:02:7d:ee:b5:76:9e:40:fd:12:c7:74:f4:d0:a7:
e2:f5:32:d5:fc:01:be:d4:9b:1f:6d:72:40:c9:c0:
08:4c:0d:73:fb:19:06:2f:87:8f:58:ab:c9:74:da:
5e:72:3a:ae:bc:62:c0:72:45:dd:fd:05:c9:e5:04:
2b:5f:eb:aa:fe:76:6d:d1:ea:3a:8d:1d:1b:57:47:
3d:fa:fd:9c:36:a2:14:4e:64:ae:f9:1b:c1:9f:a8:
88:eb:c9:06:6a:e0:d7:01:08:89:df:00:67:27:89:
64:df:79:29:e6:ad:a5:e5:82:f4:3a:cd:36:2d:94:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FA:F8:A3:3E:D7:08:11:C7:21:C2:95:4C:3D:02:EC:5F:0C:09:5A
X509v3 Authority Key Identifier:
keyid:03:74:84:41:D9:CC:7E:E2:A9:3E:16:0B:AB:27:24:DA:EB:79:9F:3B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/03748441D9CC7EE2A93E160BAB2724DAEB799F3B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/44TURgBqmYJyoSvAaCNxwc2MdunXqtHem6PpKDiW1zJ6/1/323830343a6266383a3a2f33322d3332203d3e203532363533.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:bf8::/32
Signature Algorithm: sha256WithRSAEncryption
8f:2a:16:49:73:ca:14:41:5d:a0:48:da:f4:ff:15:33:f0:8d:
9c:09:3a:b7:35:90:bf:16:16:ff:1d:cc:04:53:16:96:8e:19:
09:92:f1:36:24:64:3b:cd:c2:46:19:79:48:b7:d0:a0:0d:dc:
5a:af:7d:78:dd:92:a0:73:08:f0:c2:76:94:bf:0e:29:b6:ea:
e2:c0:d2:f0:3f:75:fa:41:56:3e:d4:38:77:85:b4:35:a9:0f:
b1:9e:4e:3d:54:f0:63:50:9b:13:09:ee:2c:e3:fc:3a:3b:8d:
45:f4:02:77:4e:be:c2:6c:81:06:01:3c:01:64:09:5c:53:11:
53:57:ee:00:fc:79:6d:53:89:6d:19:c8:65:8d:ff:aa:c3:af:
b5:f9:fc:fe:d8:40:58:bd:ad:89:3a:c9:10:68:21:09:fa:ec:
15:6a:db:69:81:7b:d1:fc:2d:53:16:08:6d:87:8e:dc:6d:db:
c0:36:f4:e9:98:7f:d2:fe:0a:94:3c:4d:0e:bb:13:24:84:02:
f1:3c:81:16:ab:40:86:e1:f6:21:03:cc:bb:64:ac:76:06:c5:
f8:90:b8:fa:69:1c:b6:6b:09:6c:94:f1:bb:0c:80:8d:9f:97:
ef:4c:de:13:87:3e:48:b0:89:74:63:28:f6:5d:57:e8:bf:2b:
cc:82:25:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:03:02 2025 by rpki-client