Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa
File: 323830343a316366303a3a2f33322d3332203d3e203631363834.roa (raw, json)
Hash identifier: KbHkGYKDi+iRWlMh/veoiKKWxYgi6B9oo1wmaw3Not0=
Subject key identifier: BA:60:70:50:4A:2B:E2:16:A3:59:F0:C6:D2:71:69:BB:C2:81:FD:DF
Certificate issuer: /CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Certificate serial: 29AE592DFE2E7D1CB19389665E69247D8686D748
Authority key identifier: FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa
Signing time: Wed 26 Mar 2025 14:49:35 +0000
ROA not before: Wed 26 Mar 2025 14:44:35 +0000
ROA not after: Wed 25 Mar 2026 14:49:35 +0000
asID: 61684
IP address blocks: 2804:1cf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:ae:59:2d:fe:2e:7d:1c:b1:93:89:66:5e:69:24:7d:86:86:d7:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB9F6F01B875008AF2C132009D0509E681E2FA99
Validity
Not Before: Mar 26 14:44:35 2025 GMT
Not After : Mar 25 14:49:35 2026 GMT
Subject: CN=BA6070504A2BE216A359F0C6D27169BBC281FDDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5e:8c:e3:a9:51:f8:7c:11:18:3b:d8:ce:15:
f4:bb:77:81:70:a8:75:23:29:7a:68:7d:3c:fc:10:
56:0b:9b:d5:33:24:fd:a9:a6:d5:61:d3:c0:25:ff:
a6:64:13:c1:ca:13:6b:8f:28:f7:02:44:04:ef:e7:
85:b6:93:bd:9e:c3:8f:aa:cc:67:74:8d:09:ac:df:
8c:b0:a0:6d:0c:60:dd:14:08:2e:45:be:dc:5c:a1:
0b:a6:32:e1:05:7b:e9:35:33:b7:88:30:4b:82:f9:
91:a0:3d:00:fc:d2:18:f4:72:36:0b:e8:9c:c7:4c:
4c:b1:f9:a7:0a:8c:85:1a:8e:89:dd:a5:d0:ee:8d:
b9:89:1b:2f:22:76:c5:86:6d:2d:42:7e:19:6a:a0:
f9:eb:66:07:be:7a:b1:be:4f:1f:30:65:b5:1c:1e:
44:6c:01:ca:c4:34:86:23:ed:18:36:92:ab:66:18:
f7:f7:d2:6a:e9:34:bf:13:17:3f:7a:3c:88:40:2b:
fb:9e:43:65:cb:02:4a:75:bc:b3:31:52:51:bf:a6:
1a:33:ee:60:99:f8:fd:b7:03:07:9e:b5:60:7c:03:
b0:8a:0a:7c:18:f6:93:52:63:24:6a:85:7f:18:9e:
26:77:85:92:7b:28:d7:76:17:3b:49:e2:b6:f2:56:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:60:70:50:4A:2B:E2:16:A3:59:F0:C6:D2:71:69:BB:C2:81:FD:DF
X509v3 Authority Key Identifier:
keyid:FB:9F:6F:01:B8:75:00:8A:F2:C1:32:00:9D:05:09:E6:81:E2:FA:99
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/FB9F6F01B875008AF2C132009D0509E681E2FA99.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FB9F6F01B875008AF2C132009D0509E681E2FA99.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4JTLirbyjyhgBeUjN1dNUivFQNyCDdGHji7caMieatQB/0/323830343a316366303a3a2f33322d3332203d3e203631363834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1cf0::/32
Signature Algorithm: sha256WithRSAEncryption
00:b0:b9:c4:5c:a7:52:a5:e1:6d:c5:15:65:d0:06:cc:b2:ce:
11:54:ef:99:49:3a:f4:88:aa:62:03:6c:94:34:1b:c6:1b:d2:
94:43:69:29:0b:c3:7f:c2:a7:2b:ff:72:7b:f0:d6:71:c8:56:
36:4f:56:89:1c:e7:7a:e9:02:e4:46:3f:5f:59:f5:2e:fc:51:
bd:a8:71:b8:1e:f6:a1:a2:16:5c:9f:e4:68:da:92:87:12:fa:
1c:ca:16:bb:29:b0:e9:1c:ac:f6:4e:91:5a:aa:06:29:c4:c1:
42:af:a9:5a:28:27:92:41:14:99:8f:46:1b:27:54:d8:79:73:
bf:6b:58:37:ac:0f:19:ba:8d:92:47:f1:cb:c9:0c:6d:69:c0:
c4:de:b0:33:80:e3:04:2c:63:68:9f:cc:7c:72:22:da:06:eb:
1c:53:fd:5f:71:e4:7d:0f:df:28:52:f1:29:c0:16:52:d5:1e:
d1:1e:3d:4a:d3:3e:a9:53:71:5c:fa:ca:bc:23:c5:c8:86:3d:
f3:15:43:e9:6e:38:3d:01:c9:d1:bc:f2:47:b0:79:39:22:30:
19:aa:5b:97:df:f9:ea:34:b9:3c:36:be:3b:13:70:ce:da:3a:
1d:f7:cb:ab:71:65:e3:15:e9:89:0f:bd:32:ef:5c:ec:35:7a:
3d:a1:63:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:53 2025 by rpki-client