Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030653a3a2f34382d3438203d3e203532373036.roa
File: 323830343a6337303a363030653a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier: sb6JWf+Wi6gz1chtX3OkyV5QrsNGGSINEj5JEmI9K18=
Subject key identifier: FE:23:1E:36:77:2B:B5:84:07:07:2A:9E:38:B6:A8:9F:A6:6B:3B:AE
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 026B65CC2955218E39A52BAC8DE823215B4E411A
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030653a3a2f34382d3438203d3e203532373036.roa
Signing time: Thu 20 Mar 2025 20:08:07 +0000
ROA not before: Thu 20 Mar 2025 20:03:07 +0000
ROA not after: Thu 19 Mar 2026 20:08:07 +0000
asID: 52706
IP address blocks: 2804:c70:600e::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:6b:65:cc:29:55:21:8e:39:a5:2b:ac:8d:e8:23:21:5b:4e:41:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 20 20:03:07 2025 GMT
Not After : Mar 19 20:08:07 2026 GMT
Subject: CN=FE231E36772BB58407072A9E38B6A89FA66B3BAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:af:2c:bc:46:83:be:5b:58:38:21:8e:1a:
65:43:54:5a:34:71:4e:9d:84:43:8a:f2:4d:f4:57:
d9:a3:10:e4:51:0b:99:e9:ee:2d:c3:b2:ad:84:18:
15:1e:65:ad:92:52:53:32:70:ab:4d:1a:20:3f:cb:
19:50:98:2f:a6:c6:1c:28:ec:d3:f3:95:79:a7:58:
c6:16:b5:2b:8f:b1:90:22:cc:95:ac:6b:6e:7d:3e:
ea:38:a2:c8:3f:d1:4c:a5:6f:8d:79:9f:71:af:ab:
0d:cb:66:c0:3e:2e:bd:b0:4d:b2:75:d5:81:58:06:
47:7e:bd:b8:19:f2:46:b2:f2:e8:65:20:b7:79:1e:
ff:03:97:a7:1f:62:2d:ac:17:8b:d1:5d:ee:74:85:
c9:fc:8c:20:58:8d:79:e9:4d:57:52:0b:41:86:f2:
23:f0:47:b7:1a:fd:36:6b:4b:22:50:0c:ca:e7:7b:
d6:c8:93:c4:d6:c2:7a:d1:9a:71:c0:64:91:ad:2e:
b9:f6:4b:82:ce:79:31:7a:c4:f9:56:4b:57:24:bc:
21:6d:30:9f:d6:e5:e7:ea:4b:cb:60:90:8c:ff:a4:
79:af:7d:34:0b:53:72:a9:53:f7:ba:63:05:9b:b1:
1b:3c:0f:e9:ed:ab:99:21:bd:cf:9b:09:f2:a1:75:
6b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:23:1E:36:77:2B:B5:84:07:07:2A:9E:38:B6:A8:9F:A6:6B:3B:AE
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a363030653a3a2f34382d3438203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:600e::/48
Signature Algorithm: sha256WithRSAEncryption
10:fc:cc:3c:13:d0:13:ef:7a:7a:52:56:4b:13:72:ef:2a:fb:
ef:aa:f2:79:60:08:a6:4e:ad:9a:a2:6f:a8:5c:35:2b:99:9e:
b1:8f:bf:4e:78:53:ff:95:ca:c0:b6:bf:00:7d:1d:2f:57:51:
42:02:0c:c9:bf:17:af:08:bb:92:b2:ba:04:53:0a:17:5b:a7:
7a:ff:cb:61:c2:bd:2b:6e:ba:fb:70:98:3c:89:11:52:60:2a:
24:f9:91:77:ce:50:8c:d6:c9:e4:04:14:c1:32:58:10:54:74:
4c:aa:5e:80:45:c5:56:86:7b:c8:07:bf:17:1f:ef:38:76:95:
50:57:e7:b8:c4:4b:d0:46:91:8f:50:b7:81:a7:f8:cb:a0:cb:
a2:b0:79:a4:fc:86:07:62:4e:66:82:8f:72:d9:7c:8a:27:6b:
98:a1:74:10:ef:0b:25:07:b4:8f:34:f5:fd:dc:85:97:67:b7:
03:bd:a4:da:4a:2d:b1:92:db:ea:a8:60:7d:c6:f7:7c:36:80:
ac:c9:74:a1:8a:43:42:72:ec:5f:0c:e1:a3:98:ae:24:45:5c:
c5:e5:ab:3a:71:00:eb:56:51:39:1c:d1:24:4a:32:57:22:32:
92:05:a0:8a:39:ad:18:16:3c:e3:2f:29:b2:93:d8:08:2d:3b:
a8:a2:cf:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:52:59 2025 by rpki-client