Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa
File: 323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier: 3Q61+nVEW1XVsVfuqpnvuIZSsgSc/w86PXu5Nhva1D8=
Subject key identifier: D3:6A:C3:BD:C0:24:FB:0A:9E:44:DA:84:9B:FA:EB:9D:ED:E2:F2:D0
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 2A5C8B6239E684F905EFDBEE1EEBA2EE20950E55
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa
Signing time: Thu 20 Mar 2025 20:07:50 +0000
ROA not before: Thu 20 Mar 2025 20:02:50 +0000
ROA not after: Thu 19 Mar 2026 20:07:50 +0000
asID: 52706
IP address blocks: 2804:c70:600d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:5c:8b:62:39:e6:84:f9:05:ef:db:ee:1e:eb:a2:ee:20:95:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 20 20:02:50 2025 GMT
Not After : Mar 19 20:07:50 2026 GMT
Subject: CN=D36AC3BDC024FB0A9E44DA849BFAEB9DEDE2F2D0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:21:e4:60:bf:30:72:dd:c5:db:c9:c0:c1:
83:8b:c8:c2:90:71:41:be:47:05:a5:e3:c2:04:65:
6c:4d:6b:5f:1a:e2:a6:e4:a9:2f:a7:4e:1c:3c:20:
46:8f:1f:65:98:a4:b5:f7:89:60:02:0b:e9:25:84:
25:c4:1b:87:75:b9:8d:5b:88:ae:fa:a8:4e:66:7e:
25:a8:9f:c0:a9:a0:1e:7d:0a:a2:28:cd:47:1d:c6:
1b:99:aa:1c:6d:5d:56:2d:bb:4b:1c:4d:2f:9d:5d:
d3:d6:00:46:3a:f3:d3:e6:98:83:03:2a:38:9e:be:
0c:b7:a2:79:8f:36:a8:a9:4f:9b:3e:f1:ca:ca:83:
95:02:33:30:e4:ab:a4:75:49:7f:f9:b0:e7:5d:1d:
2b:19:b3:c6:1c:1b:48:f5:39:b4:c3:f7:a8:a4:13:
35:dc:47:53:2d:3e:0e:06:7d:a1:32:10:a9:17:99:
80:a9:d8:21:f4:3b:1c:d7:ff:3a:93:77:c3:e4:f2:
51:8f:a2:ab:bf:4c:75:94:4b:9d:0a:bc:f8:ab:55:
55:e3:c0:d6:fa:76:5b:fd:76:f9:80:e1:13:7c:43:
f6:65:1f:81:08:df:1c:dc:8e:b4:43:a4:34:a3:48:
c6:96:b9:d7:c0:ed:26:3f:e8:6c:46:f6:b7:4c:77:
bf:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6A:C3:BD:C0:24:FB:0A:9E:44:DA:84:9B:FA:EB:9D:ED:E2:F2:D0
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030643a3a2f34382d3438203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:600d::/48
Signature Algorithm: sha256WithRSAEncryption
92:ec:1b:a4:64:d2:58:d3:23:db:24:40:81:2b:87:76:bf:e7:
b8:e3:9b:ab:54:a5:af:34:46:58:c6:ee:ce:39:8a:33:2f:38:
5e:08:2f:ea:fd:2e:cf:4d:54:67:48:87:19:43:80:86:74:8b:
ec:ed:ef:38:d9:e3:1c:9f:ee:44:14:f9:b5:63:0d:1f:ed:ed:
aa:ad:37:a6:df:60:e5:90:9f:6b:12:a5:e1:b2:12:9f:46:f4:
2f:ea:b7:49:f6:15:c4:68:74:86:07:15:38:a9:7c:c3:00:60:
7f:06:db:84:2e:dd:2a:6c:40:83:14:9a:64:63:88:75:30:47:
e1:53:62:12:ac:05:48:16:78:db:f6:49:4a:42:a7:7b:62:15:
6b:26:2c:52:16:9e:24:03:1d:67:cd:81:ff:cb:2d:f2:67:d6:
ab:df:69:79:4d:0b:87:49:32:33:a9:5f:50:9d:f3:31:a2:2d:
a5:fa:45:08:0f:32:15:70:c2:2a:93:c8:6e:0f:37:ed:de:02:
9a:97:45:3a:f9:a3:3e:93:4b:b8:36:63:99:df:5d:83:c7:ad:
97:98:c3:2d:b2:b7:9b:d0:d9:9e:7f:13:91:6b:c4:19:00:1b:
23:4b:83:03:22:88:65:cc:f1:42:2f:b2:c9:5d:7d:f9:35:47:
50:98:4f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:52:59 2025 by rpki-client