Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
File: 323830343a323762633a3a2f33322d3438203d3e20323633393139.roa (raw, json)
Hash identifier: yg/+CVjgu2k2RC6iZyS5wyy4SKTfUj/bl2VpXsl7RJA=
Subject key identifier: C0:DF:07:4D:5C:B6:84:9D:7C:A0:F0:B0:AD:3F:7B:34:E3:86:96:13
Certificate issuer: /CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Certificate serial: 1529C5DCA855AD36930B39F58A43E2FAFD745E7C
Authority key identifier: 8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject info access: rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
Signing time: Fri 07 Mar 2025 04:40:34 +0000
ROA not before: Fri 07 Mar 2025 04:35:34 +0000
ROA not after: Fri 06 Mar 2026 04:40:34 +0000
asID: 263919
IP address blocks: 2804:27bc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:29:c5:dc:a8:55:ad:36:93:0b:39:f5:8a:43:e2:fa:fd:74:5e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BAE9C90EBC5082F802055EFAA6360C661BF85CE
Validity
Not Before: Mar 7 04:35:34 2025 GMT
Not After : Mar 6 04:40:34 2026 GMT
Subject: CN=C0DF074D5CB6849D7CA0F0B0AD3F7B34E3869613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:44:96:cb:86:32:c2:73:1b:14:2f:81:23:48:
35:ca:07:e8:28:1b:73:1e:5f:db:67:d0:d6:0a:44:
f3:5d:03:ad:37:42:31:63:a3:11:e0:d1:ba:7d:fb:
f4:ac:da:96:83:d5:19:44:92:21:59:9b:17:94:37:
16:2f:ff:63:d2:e1:22:7c:d0:1e:e4:ee:bd:5b:eb:
11:23:29:93:bf:ca:44:57:09:ee:fd:b1:bc:ca:b3:
e1:c5:a1:ad:06:d5:60:9e:26:39:98:80:79:19:64:
4a:e4:5b:4c:67:73:b1:d8:32:70:30:cf:a6:f2:b5:
77:11:57:e8:d5:dc:7b:da:3b:65:4d:e0:29:c9:ef:
31:2a:cb:53:7c:a7:96:09:0c:6f:ed:b1:78:ef:dd:
f2:bb:cb:4f:53:20:00:75:9a:b5:12:41:5c:15:0f:
c8:89:05:0b:36:32:24:30:d4:24:d4:7b:a5:04:19:
4a:51:f2:ac:e6:fb:92:83:ea:73:96:39:5b:c5:a3:
a7:dd:a2:43:55:e9:9b:7b:6b:71:bc:00:98:e6:5c:
b3:89:35:9d:d0:5c:c8:e0:81:51:49:93:1d:eb:46:
4f:d0:8d:ae:06:65:ab:5a:aa:b4:7c:51:39:dd:9e:
47:ee:f4:34:b6:e2:a7:b8:08:9b:41:1d:d0:bb:e6:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:DF:07:4D:5C:B6:84:9D:7C:A0:F0:B0:AD:3F:7B:34:E3:86:96:13
X509v3 Authority Key Identifier:
keyid:8B:AE:9C:90:EB:C5:08:2F:80:20:55:EF:AA:63:60:C6:61:BF:85:CE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BAE9C90EBC5082F802055EFAA6360C661BF85CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cG2obEUYfMKhWAX457nFgzoTXYStiLK4DaE34VDSK85/1/323830343a323762633a3a2f33322d3438203d3e20323633393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:27bc::/32
Signature Algorithm: sha256WithRSAEncryption
18:b2:73:85:93:5c:d1:eb:6b:a3:8c:b8:81:f2:a1:cf:18:a1:
06:42:77:6f:e5:e6:c6:22:b4:4d:1c:fb:36:3d:04:1e:91:b5:
98:8e:a1:0d:ca:44:e4:47:d0:a3:d6:52:a6:8d:d8:27:3b:e8:
2c:d8:76:24:16:3b:1d:98:03:73:93:3f:b8:51:40:4e:da:77:
53:7c:4c:87:ff:ef:17:97:be:31:11:c3:c4:7e:ea:c5:ca:ff:
9c:27:a3:55:c2:36:a2:3c:fc:b9:e3:0d:16:3d:4c:f8:fa:85:
de:3a:46:4a:e1:d5:23:9d:fb:88:f5:fb:30:3e:21:9a:db:dd:
ad:46:62:dd:a8:6b:8d:de:79:04:b7:f8:b2:b8:84:c0:a8:db:
06:0f:d0:18:c3:53:18:d5:f6:73:63:23:48:b6:9a:2a:c1:d4:
f6:1d:49:9a:c0:5d:0a:8b:c5:e3:d7:f2:24:93:72:46:d7:c5:
75:35:4c:c0:f1:70:7e:ec:aa:97:ca:96:ab:ae:22:5f:77:df:
31:b3:54:9f:38:ff:dd:93:e8:46:fc:6d:75:78:b1:c9:a2:54:
49:1f:61:17:a0:4e:8b:bd:0b:7c:ef:35:c0:67:56:02:19:5e:
f7:e6:23:2c:d7:6e:ea:6a:81:57:68:ac:b4:24:37:45:77:14:
d5:8e:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 04:56:46 2025 by rpki-client