Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa
File: 323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier: dsuYXtVAub3+/4hBh+dAVKtYpS9cFT3MlSELlwJ9rK4=
Subject key identifier: 6F:EF:CB:58:F5:F6:F9:9B:F0:89:B8:75:15:4B:2F:BC:48:FB:DF:28
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 52C30DBACEC3A338667E90EDE01383567A185903
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa
Signing time: Thu 06 Mar 2025 02:31:42 +0000
ROA not before: Thu 06 Mar 2025 02:26:42 +0000
ROA not after: Thu 05 Mar 2026 02:31:42 +0000
asID: 52706
IP address blocks: 2804:c70:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:c3:0d:ba:ce:c3:a3:38:66:7e:90:ed:e0:13:83:56:7a:18:59:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 6 02:26:42 2025 GMT
Not After : Mar 5 02:31:42 2026 GMT
Subject: CN=6FEFCB58F5F6F99BF089B875154B2FBC48FBDF28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:28:22:55:10:c7:fb:a5:cb:f5:e4:50:21:e9:
ee:cb:52:15:0f:4b:f1:23:a6:96:fd:6b:d5:e3:b9:
fd:06:ac:54:ea:7c:f9:cf:1f:6a:e7:12:4a:f4:f1:
ef:46:1a:ba:81:83:42:9f:6a:89:5d:7a:3b:87:59:
72:c1:c0:79:5f:d6:42:65:4d:f5:3d:e1:61:bb:7b:
db:7b:04:11:6d:ad:d7:a0:8d:c5:41:c2:f8:9c:d4:
e0:ea:af:48:35:21:93:67:bf:01:61:7a:7b:35:02:
4c:ca:e3:bc:53:6b:e7:a0:3b:3d:83:72:9a:5c:73:
28:24:fd:c7:bd:30:7c:db:19:2c:25:20:a1:9b:ce:
29:2b:17:bf:69:95:67:3f:89:f5:b8:41:2e:69:ec:
93:90:5e:9b:2e:38:ae:65:5f:3b:40:48:27:22:10:
c6:2c:20:64:5d:fb:98:60:c0:e8:75:59:e0:c2:60:
dc:46:d6:26:43:4d:ca:64:fe:74:b3:d4:0d:db:2b:
2a:ef:9b:c5:c5:02:3e:e3:f9:7b:41:7c:59:e3:30:
6b:4e:68:1e:80:e5:dd:70:98:60:30:b0:ce:31:b4:
01:e4:24:79:b9:c9:a3:15:12:2e:b9:ec:40:82:d6:
9b:b3:b2:26:b1:68:6a:95:95:66:70:c6:e0:19:46:
dd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EF:CB:58:F5:F6:F9:9B:F0:89:B8:75:15:4B:2F:BC:48:FB:DF:28
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030303a3a2f33362d3336203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:8000::/36
Signature Algorithm: sha256WithRSAEncryption
14:0a:76:be:d9:22:c7:f5:74:a1:9f:49:4a:80:f6:2d:8a:57:
e2:8e:1d:8e:ab:10:25:fa:0f:ca:a6:8d:0e:61:66:96:ac:08:
86:68:8e:12:d9:40:2e:0b:dc:db:f6:b9:09:c4:7e:e3:50:d4:
14:84:b6:bb:97:3c:c1:96:d4:fd:44:e6:e3:37:cd:9e:b3:a8:
f5:d9:e2:be:22:16:6b:8a:2a:ec:38:ff:d7:56:64:46:ba:b7:
e3:a5:f2:a6:13:46:76:d9:c0:b8:3d:ef:2b:fd:61:c4:2f:b5:
94:07:3b:04:cd:50:7b:3d:a2:5e:93:50:26:43:b3:15:ec:5a:
d4:40:c2:17:3e:2b:0d:cc:43:30:59:1f:0c:04:72:9f:4c:3a:
b5:a2:1a:fe:1e:4e:5d:a0:dd:a2:8b:29:49:b1:ff:7c:38:4b:
73:6f:2d:fa:30:91:3d:66:e1:f3:8f:cf:fc:0a:04:cd:9b:4f:
36:36:9c:82:ad:2e:94:72:8a:7a:d7:14:2f:e2:f0:d6:46:d3:
51:f4:7d:3e:31:44:c2:88:ef:67:91:0a:bb:a5:24:67:ad:db:
42:12:83:81:e1:f2:c1:17:b4:25:cd:05:48:a0:de:0f:5d:6e:
4a:7f:39:34:53:ae:71:ce:c7:b3:5e:e0:c6:c1:6d:2d:51:12:
34:eb:9b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:06:56 2025 by rpki-client