Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3438203d3e20323638323839.roa
File: 323830343a346565343a3a2f33322d3438203d3e20323638323839.roa (raw, json)
Hash identifier: 8QVrrPvDESPyLlcybwCmEcTLp6Hw5J3De08ADxJOVDg=
Subject key identifier: 78:27:5B:50:5C:4A:CC:A5:18:5D:C6:B3:E5:0C:23:A4:9D:77:8F:88
Certificate issuer: /CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Certificate serial: 1C2F43863C4CF7EAA502F3B1A2F89B0C43CFA91F
Authority key identifier: D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3438203d3e20323638323839.roa
Signing time: Mon 10 Feb 2025 11:15:33 +0000
ROA not before: Mon 10 Feb 2025 11:10:33 +0000
ROA not after: Mon 09 Feb 2026 11:15:33 +0000
asID: 268289
IP address blocks: 2804:4ee4::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:2f:43:86:3c:4c:f7:ea:a5:02:f3:b1:a2:f8:9b:0c:43:cf:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8BA7C35A5C2420589B30C33D9CF1374505F3DBC
Validity
Not Before: Feb 10 11:10:33 2025 GMT
Not After : Feb 9 11:15:33 2026 GMT
Subject: CN=78275B505C4ACCA5185DC6B3E50C23A49D778F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:60:e8:b7:25:f7:16:27:9a:66:f3:78:ad:fe:
5e:f6:27:8f:48:ed:93:fa:d7:a3:ad:c3:a6:b8:f2:
b1:77:18:48:77:47:6a:f2:7c:f5:b9:2c:03:25:e8:
a9:a1:32:b0:06:6e:06:57:8b:6b:53:63:7c:18:ee:
9e:88:ee:9b:84:3b:43:cb:93:a4:d2:72:96:82:3a:
65:70:80:fd:3f:97:43:42:8e:67:a9:93:4a:f8:da:
61:41:72:1d:96:40:d9:52:1d:9a:b6:87:d7:2f:16:
d1:0d:6c:fc:30:4f:76:86:13:12:cf:7e:f3:ba:7c:
32:12:c9:1b:49:69:2e:f5:59:9e:be:f8:ac:bd:73:
d1:c9:d9:64:fc:78:df:2a:93:fe:5a:83:b1:cc:79:
16:fd:96:fe:96:eb:be:4d:46:03:da:10:b9:bc:b0:
c3:08:9c:40:23:10:02:92:93:fa:c3:99:a0:e7:6f:
12:87:27:dd:b4:32:7d:7b:e6:49:56:f0:35:7a:9c:
00:47:f8:f9:7a:1e:4e:e1:02:1d:01:1e:f7:61:63:
26:e3:2e:89:9f:0c:4f:9c:80:5f:06:59:9b:28:52:
93:93:6b:38:7a:e0:38:4a:69:39:5a:14:82:61:54:
1d:d4:79:9a:69:92:73:bd:96:b6:ec:6b:49:17:71:
07:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:27:5B:50:5C:4A:CC:A5:18:5D:C6:B3:E5:0C:23:A4:9D:77:8F:88
X509v3 Authority Key Identifier:
keyid:D8:BA:7C:35:A5:C2:42:05:89:B3:0C:33:D9:CF:13:74:50:5F:3D:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8BA7C35A5C2420589B30C33D9CF1374505F3DBC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/5NWgGTnyPJTvvhBYW48ViTn1WKh8icyStVecxq7yTzVt/0/323830343a346565343a3a2f33322d3438203d3e20323638323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4ee4::/32
Signature Algorithm: sha256WithRSAEncryption
a2:ba:8b:72:68:c7:0b:4e:5d:3d:7f:af:cd:78:8b:ec:3b:f3:
f7:68:a8:88:c7:f7:d4:c3:0c:b0:bc:60:5c:60:43:a8:e2:e2:
5a:b9:7c:a8:71:0f:18:ae:38:f3:59:3e:ad:f7:e8:e7:56:30:
9a:62:8a:80:7b:df:8e:c5:42:22:74:68:c7:4a:93:42:0e:fb:
63:e8:c7:07:06:cd:04:a3:b9:d7:81:12:a0:f6:4e:d4:3b:59:
9d:0b:e0:12:25:3d:57:59:1f:3b:89:0a:26:5a:a4:b8:da:33:
f4:55:38:50:4d:6d:21:ef:f2:9b:19:cc:0c:89:0f:b5:22:1c:
59:46:c8:d1:0d:3f:e7:b2:29:d2:a1:bd:0a:11:ab:9e:b9:22:
86:80:40:de:7b:aa:14:83:67:44:0a:52:6b:c4:bf:6c:44:a6:
db:7b:67:af:f2:3c:06:f7:af:e6:2f:37:fd:36:cd:4d:83:d3:
20:c1:25:45:e7:e1:16:a6:15:17:c5:c8:d8:60:99:69:a5:35:
a8:df:b9:04:f3:88:22:fe:cf:1d:39:8b:86:a2:85:a2:23:50:
c4:81:8c:e6:1b:3d:56:77:6a:45:27:4f:8a:bf:5c:33:49:15:
bf:14:57:85:7d:fc:5f:7a:ce:59:e1:b3:2c:df:56:52:d0:19:
de:c0:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:23:39 2025 by rpki-client