Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa
File: 323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier: cyMTuiLBnYMIlubxvHXL7Vr8yEnBsmrqucpDLPPN238=
Subject key identifier: BB:22:AC:3C:E4:8F:D9:D7:09:ED:2A:2E:D6:74:B7:1C:15:F6:55:13
Certificate issuer: /CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Certificate serial: 2CF50BC3D780A38E6C49753AB7C89ADE7729EC10
Authority key identifier: 3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa
Signing time: Thu 13 Mar 2025 15:10:44 +0000
ROA not before: Thu 13 Mar 2025 15:05:44 +0000
ROA not after: Thu 12 Mar 2026 15:10:44 +0000
asID: 271484
IP address blocks: 2804:7c40:8000::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f5:0b:c3:d7:80:a3:8e:6c:49:75:3a:b7:c8:9a:de:77:29:ec:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3B5BBCE7F8F28C41BFC307B8430A56A16C67E800
Validity
Not Before: Mar 13 15:05:44 2025 GMT
Not After : Mar 12 15:10:44 2026 GMT
Subject: CN=BB22AC3CE48FD9D709ED2A2ED674B71C15F65513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7f:c7:b2:96:23:74:2c:0e:07:9a:a8:f4:c0:
0d:2c:02:ce:d9:3a:da:54:58:a2:15:f2:a7:b2:e6:
00:d2:a9:b1:f4:44:2b:87:8a:74:ce:9e:ca:b6:c7:
b2:55:3e:a5:36:d6:44:0a:4d:53:03:3b:24:96:df:
3a:8b:d1:3e:e7:8f:09:ff:74:75:89:46:2b:be:82:
1d:ce:dc:59:9b:48:83:61:c8:3b:c8:9f:07:08:09:
cb:af:21:f8:de:04:04:19:43:6e:15:9d:9a:68:ee:
a5:58:52:94:fa:3c:ce:60:ac:18:0c:e8:9c:36:7e:
9b:30:ab:5e:c6:3b:10:23:66:f8:60:8b:e0:34:7b:
82:2f:a7:9e:17:ec:f0:a5:e1:79:a9:1f:11:54:ee:
30:ce:86:c1:0a:f5:45:52:1b:48:b7:7c:5f:14:e0:
c4:60:bc:c8:43:ec:b7:ad:16:29:e1:0c:7f:8c:9b:
5c:d7:15:e6:07:7b:b9:67:c1:5e:38:63:c1:85:b1:
16:33:04:1c:3c:93:7a:b3:2c:3e:4e:6e:4f:da:44:
b3:ed:23:1c:f9:b6:44:3d:d9:e4:71:78:f9:db:9c:
7c:3a:af:83:f2:78:cd:22:36:59:1d:71:61:64:92:
53:e9:2e:98:02:2e:49:c6:3e:87:7f:48:59:56:42:
01:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:22:AC:3C:E4:8F:D9:D7:09:ED:2A:2E:D6:74:B7:1C:15:F6:55:13
X509v3 Authority Key Identifier:
keyid:3B:5B:BC:E7:F8:F2:8C:41:BF:C3:07:B8:43:0A:56:A1:6C:67:E8:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B5BBCE7F8F28C41BFC307B8430A56A16C67E800.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7c40:8000::/40
Signature Algorithm: sha256WithRSAEncryption
7b:c7:fe:24:b5:20:4f:2d:13:00:9b:b9:45:b5:60:64:5a:7d:
d5:74:92:8a:36:af:47:36:1e:b1:d0:69:a2:49:53:1d:0e:10:
cb:26:09:c7:3f:7e:b6:a4:c0:89:82:95:c0:11:51:91:48:51:
c6:1e:86:81:63:2d:64:c8:2f:e0:67:6d:24:07:d0:b9:09:bc:
7c:43:83:39:d4:7a:ad:39:18:90:7d:a8:db:b1:e9:7c:a8:8b:
d0:e4:be:a7:f1:76:21:ba:3a:0f:92:27:1a:cd:7d:a4:83:e5:
31:d3:aa:a9:5c:8b:5a:29:af:f3:55:10:75:ad:94:a6:1a:95:
50:40:1b:3f:60:55:af:b8:b8:9d:af:89:d2:f9:11:8a:42:ec:
fb:19:6a:87:0d:dc:87:8b:32:be:e1:75:b0:90:bc:81:a4:57:
25:a6:da:65:c9:70:e2:fc:64:c6:c8:8b:ba:a4:49:ff:7f:7c:
d1:02:33:c0:a8:63:6f:58:a5:5f:65:91:59:ee:9c:9b:ea:0a:
ac:0d:4b:09:d4:03:fc:68:d5:92:cf:fb:a2:a3:5c:4d:6d:8b:
6d:b2:7a:79:ec:fd:a2:c5:29:70:70:ed:5d:5b:8b:a5:e5:b0:
62:93:88:38:c9:7e:7b:da:44:ed:66:a2:bc:05:dd:af:b8:77:
aa:ca:89:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:56:45 2025 by rpki-client