Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa
File: 323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier: g2JksfqiEGfBjdLz0ql5dcWakwy3rnpXr5mgh2lh8c8=
Subject key identifier: BE:07:A5:97:D2:31:77:F1:D0:88:B2:83:5D:BF:B6:27:A9:7F:65:1A
Certificate issuer: /CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Certificate serial: 3AA054639CFC69287B846DCA4640569D18AF6F1E
Authority key identifier: E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa
Signing time: Thu 06 Mar 2025 02:31:44 +0000
ROA not before: Thu 06 Mar 2025 02:26:44 +0000
ROA not after: Thu 05 Mar 2026 02:31:44 +0000
asID: 52706
IP address blocks: 2804:c70:8005::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:a0:54:63:9c:fc:69:28:7b:84:6d:ca:46:40:56:9d:18:af:6f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E35E54F1D0263B8E903A0929A61313C8C5BE8DA6
Validity
Not Before: Mar 6 02:26:44 2025 GMT
Not After : Mar 5 02:31:44 2026 GMT
Subject: CN=BE07A597D23177F1D088B2835DBFB627A97F651A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:af:88:0b:39:3a:d0:a5:b9:8e:ca:03:a6:57:
e3:42:52:24:0e:7a:0a:01:ed:39:21:68:8c:d0:6b:
83:30:4f:48:0d:16:8c:bb:e7:8e:0b:42:e6:10:8f:
86:89:97:ee:e7:4b:09:88:82:43:1e:10:a4:ff:65:
96:19:e6:4d:29:c7:a1:8c:3f:b8:e8:b4:be:c4:28:
39:c2:39:48:7e:7d:48:84:88:3b:83:bb:2f:c1:9f:
71:33:93:82:08:69:8f:14:02:2b:fc:0b:44:9d:a3:
65:88:47:6d:4c:b1:ee:14:06:b0:0f:2c:65:76:db:
42:1b:25:56:47:3e:0a:52:68:3e:15:33:c1:9d:82:
5e:d5:03:27:33:96:67:b6:f0:7e:0b:ae:0f:1e:f5:
b6:05:80:9e:97:79:69:52:9d:fb:cd:0c:f7:c1:38:
6b:b7:b7:79:c9:5a:b5:dd:f0:be:34:11:f1:90:7a:
9d:35:81:9f:d2:b8:8b:c9:29:90:78:13:24:dc:40:
33:9b:bf:00:38:4d:52:87:79:5e:71:3a:d0:75:b3:
a3:95:fd:fc:98:a5:74:64:a2:2d:39:6b:90:4d:b7:
cb:bd:22:5c:50:d5:60:62:40:4f:00:09:11:83:5d:
73:54:64:78:91:b7:e6:4f:da:ed:70:f6:a6:0d:8a:
50:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:07:A5:97:D2:31:77:F1:D0:88:B2:83:5D:BF:B6:27:A9:7F:65:1A
X509v3 Authority Key Identifier:
keyid:E3:5E:54:F1:D0:26:3B:8E:90:3A:09:29:A6:13:13:C8:C5:BE:8D:A6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E35E54F1D0263B8E903A0929A61313C8C5BE8DA6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/1/323830343a6337303a383030353a3a2f34382d3438203d3e203532373036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:c70:8005::/48
Signature Algorithm: sha256WithRSAEncryption
00:02:ee:04:b6:fd:43:b1:91:da:ea:32:6c:a5:6d:ca:b2:f0:
cb:2d:26:6e:6a:14:d1:46:bd:5e:e6:64:ca:68:a6:dd:f3:71:
13:2e:1d:e0:fe:a1:35:69:5c:ea:66:c0:70:0a:77:4b:77:8b:
0d:6d:59:3b:8c:9f:29:89:43:9d:67:33:23:a1:6c:6f:ab:82:
ee:fe:e1:fe:86:ca:19:82:86:5f:15:4f:1f:5a:b8:6c:4a:9d:
e4:c4:b4:1e:3c:e1:6e:46:26:46:07:82:68:15:14:e2:34:2b:
71:28:86:fb:ae:a4:a6:e7:97:ef:78:77:64:47:f4:65:58:30:
b2:28:0e:aa:1e:a4:9b:67:c1:6e:3b:06:98:65:da:90:e4:f5:
53:59:21:a7:6a:15:0c:c2:94:c2:e9:e5:0a:b5:01:bb:42:bd:
ec:3d:d8:5c:e8:02:f4:52:b8:fd:0d:ba:5a:e9:49:a0:b8:f3:
e5:d0:6c:bc:cc:59:b0:b4:fe:38:4b:7e:b7:f6:61:8e:71:51:
bc:e0:d1:57:14:02:f7:60:19:bc:9e:d9:8d:81:23:7c:0f:ca:
aa:6f:94:6b:8e:d2:e5:8c:3f:fb:98:80:dd:dc:ab:c8:b7:4e:
89:2d:73:cd:15:b9:91:57:bc:32:fe:ef:bc:26:71:35:22:5b:
e9:de:f0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 21:04:16 2025 by rpki-client