Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa
File: 323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier: EBQvGiWf4eXBbMgvN+X3Q6vosdWQTHhJgbaV9HvFUI4=
Subject key identifier: D2:33:76:55:65:FE:50:9C:53:8B:A8:53:31:B3:5D:FC:6B:6A:A4:9C
Certificate issuer: /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial: 4AB3D223DA5B721FBDEBE210DA1318FE2E3ABE71
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa
Signing time: Thu 13 Mar 2025 15:10:45 +0000
ROA not before: Thu 13 Mar 2025 15:05:45 +0000
ROA not after: Thu 12 Mar 2026 15:10:45 +0000
asID: 271484
IP address blocks: 2804:7c40:500::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:b3:d2:23:da:5b:72:1f:bd:eb:e2:10:da:13:18:fe:2e:3a:be:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Validity
Not Before: Mar 13 15:05:45 2025 GMT
Not After : Mar 12 15:10:45 2026 GMT
Subject: CN=D233765565FE509C538BA85331B35DFC6B6AA49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:15:78:d9:fe:61:ac:11:81:2d:0b:8f:4b:
a7:cf:52:21:fc:c4:72:cd:64:20:57:81:b4:1f:b5:
82:f7:b8:e3:2d:1e:b2:e2:6a:7f:9b:5c:11:72:7d:
fe:f6:06:45:c7:1d:5f:10:92:79:d1:eb:b5:6a:5d:
76:68:e3:24:0e:27:9e:6b:5d:c8:ec:6a:bf:ae:6e:
61:8a:5b:5f:1f:6f:08:1d:de:c5:15:74:99:11:14:
13:b1:a2:80:65:5f:50:eb:37:b3:42:9e:ae:57:11:
58:9c:a2:fd:d4:6a:27:3e:83:fd:d0:e4:77:dd:75:
93:ce:38:3e:78:11:11:e4:d6:a9:f8:6c:62:2f:f4:
7a:ff:c6:a0:42:42:ea:ca:f8:34:5d:b2:a5:3a:a2:
c9:0f:23:8d:0b:2a:22:a2:7c:ab:59:5e:94:5b:db:
55:92:4b:7c:fc:a3:ec:ef:d5:bc:41:c1:95:78:99:
92:59:f5:3c:b6:d3:4a:bc:6d:e7:75:0e:cc:36:dd:
12:e7:36:7a:ea:b9:d8:36:80:72:ee:a2:8d:ed:29:
f1:c7:bc:23:bf:5e:fd:1d:3a:77:37:0a:f2:87:43:
e4:3d:a2:db:38:26:92:30:25:38:c8:bc:5b:00:5c:
1f:6f:9f:69:59:e0:3e:11:21:b1:a8:07:f7:5e:70:
f6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:76:55:65:FE:50:9C:53:8B:A8:53:31:B3:5D:FC:6B:6A:A4:9C
X509v3 Authority Key Identifier:
keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3530303a3a2f34302d3430203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c40:500::/40
Signature Algorithm: sha256WithRSAEncryption
4c:d7:c4:9a:5c:92:6f:a8:2a:14:fa:7f:22:a6:f4:2d:41:36:
66:28:4a:aa:05:77:2d:e4:ef:8d:af:71:d1:8a:ef:21:ee:98:
39:28:37:6c:8a:a2:38:1b:9b:29:0a:c1:1d:7b:13:5b:77:66:
ac:bb:1c:38:11:ce:b7:73:c3:da:c2:3b:f5:6b:26:7a:93:c0:
bc:de:51:60:29:64:7f:82:ad:fb:d3:b4:bc:42:38:14:ac:cb:
c7:9d:fd:f4:59:fd:42:55:c2:65:ac:14:5a:fb:a4:68:59:89:
80:af:fc:5f:e1:8d:78:5a:e4:49:d5:80:74:97:43:c1:ab:63:
57:fe:3d:2e:be:e9:43:5a:d4:5c:f0:98:7e:7c:51:5f:f3:7c:
f9:ff:d0:51:40:d5:50:32:8e:c4:fb:4d:6f:88:b7:2c:f8:83:
8b:6f:f6:e9:05:03:21:c9:91:48:0e:8f:53:65:92:45:95:49:
65:58:e2:49:e4:37:c9:f9:83:37:5d:11:92:85:2e:3a:bb:5b:
a6:a8:df:23:47:44:e9:d7:d6:60:2b:05:e1:fd:13:c6:4a:0a:
66:f5:2c:4b:69:b9:47:5d:45:c7:66:95:9d:db:41:6b:18:c6:
d7:9f:fb:8b:c5:ee:e1:e0:b7:2c:18:fc:d9:c7:b7:c0:6d:b5:
10:72:3b:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:51:52 2025 by rpki-client