Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa
File: 323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa (raw, json)
Hash identifier: 9SQ8pJ0roaQ3vuqlJAv3csEC6+la4mJz8AVfgQXktrw=
Subject key identifier: 89:20:A8:2C:39:35:EE:AE:D8:A0:33:F8:0E:00:C4:95:EB:B6:37:7D
Certificate issuer: /CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Certificate serial: 43FEB8928AFF490C689646DAC607A34B29952564
Authority key identifier: 7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa
Signing time: Sat 15 Feb 2025 22:36:46 +0000
ROA not before: Sat 15 Feb 2025 22:31:46 +0000
ROA not after: Sat 14 Feb 2026 22:36:46 +0000
asID: 262182
IP address blocks: 2804:1194:f004::/46 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:fe:b8:92:8a:ff:49:0c:68:96:46:da:c6:07:a3:4b:29:95:25:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7CA1E2D818532F6321B3C9E6EE790B2AFE560E21
Validity
Not Before: Feb 15 22:31:46 2025 GMT
Not After : Feb 14 22:36:46 2026 GMT
Subject: CN=8920A82C3935EEAED8A033F80E00C495EBB6377D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:aa:19:02:d6:b0:b0:68:c2:3c:02:11:01:af:
3a:06:7d:65:36:04:87:c8:6d:46:c7:b5:72:d7:39:
e3:3a:5b:80:0e:dc:22:9f:b7:08:7c:c0:42:d4:03:
11:ba:ab:43:ea:65:45:5c:70:53:f7:10:c4:25:00:
1d:dd:e6:f6:30:55:d4:bf:f9:88:42:e5:6f:da:9f:
de:12:4a:d8:dd:87:40:d5:a0:eb:9f:5f:ab:39:3d:
56:65:56:fd:49:fe:45:b8:aa:d2:be:78:67:e3:15:
7f:2b:29:e4:4d:a4:73:a5:af:8c:b0:49:08:e5:79:
52:78:13:09:b3:71:90:6c:3d:af:91:6c:0b:5e:c4:
0f:24:58:88:10:b7:61:b7:b2:fc:fe:2d:09:b6:ae:
d5:fc:74:f7:b7:36:5b:f2:80:a7:6b:96:d6:85:80:
74:6d:0f:c0:51:3c:1b:fd:1a:24:af:ec:28:49:63:
3f:a9:02:7f:23:98:8b:8d:02:db:93:b9:f1:94:f4:
2a:5f:f5:2c:1b:0e:dc:6b:da:6c:98:3e:77:0c:5e:
d7:50:79:da:a6:db:28:9f:3e:30:ff:d4:b7:6f:a9:
d1:64:d0:a2:d8:9c:a3:7c:75:93:f5:a2:4d:c9:25:
db:1f:04:00:ac:c1:64:8a:d7:22:7d:06:85:1d:2a:
61:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:20:A8:2C:39:35:EE:AE:D8:A0:33:F8:0E:00:C4:95:EB:B6:37:7D
X509v3 Authority Key Identifier:
keyid:7C:A1:E2:D8:18:53:2F:63:21:B3:C9:E6:EE:79:0B:2A:FE:56:0E:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7CA1E2D818532F6321B3C9E6EE790B2AFE560E21.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5HEYRL8ykWxA5aM2vjn7jY25Xv3bqvmy9tigFBNqRkN8/1/323830343a313139343a663030343a3a2f34362d313238203d3e20323632313832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1194:f004::/46
Signature Algorithm: sha256WithRSAEncryption
c2:e0:70:56:d4:45:bf:36:80:c2:37:96:7c:d3:28:7a:47:59:
71:d0:27:7a:d6:0d:6d:f7:d9:91:97:4d:a3:19:f1:34:18:ea:
0e:43:a6:62:c6:4d:c5:ab:a4:14:0b:15:5f:3f:d5:15:f6:76:
65:1f:a5:e6:5e:81:2b:5e:d3:6f:de:e0:0d:17:9a:a2:31:a9:
7f:2e:48:78:ae:d6:a2:0b:59:52:25:24:80:62:77:14:d2:9f:
9b:8a:99:4d:48:8d:4a:5e:50:3d:1e:93:71:58:57:eb:ca:20:
c4:39:a0:93:3d:78:ca:11:37:26:f1:56:54:60:e1:50:c2:83:
37:3a:40:8d:f6:be:38:ab:ed:87:37:40:03:6a:dc:e3:a1:78:
bb:b4:a6:a1:f6:fc:c0:ff:a7:34:77:07:7f:21:0f:df:d4:76:
3d:f5:f9:b2:b0:c2:40:3c:94:d1:3b:71:18:21:91:ca:46:61:
cd:22:99:40:5c:c4:ab:5a:f5:0f:84:b0:b6:34:d3:75:9f:b8:
37:bb:74:6c:ab:ee:63:27:54:57:21:1a:04:50:18:89:54:01:
92:b2:29:6d:76:ca:02:f2:7b:38:cf:81:57:9c:1c:df:14:65:
71:67:28:d1:c9:35:19:8d:a3:4c:73:33:02:63:5a:02:f8:1f:
2b:9c:dc:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:43:30 2025 by rpki-client