Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666530303a3a2f34302d3430203d3e20323636333638.roa
File: 323830343a333662633a666530303a3a2f34302d3430203d3e20323636333638.roa (raw, json)
Hash identifier: 0kMIHzGNrXnIuDabg0X70ByK7WGY/uSnqTHyYraRX9M=
Subject key identifier: D2:23:C9:A5:23:08:04:29:D4:1C:A8:9C:3F:30:42:6C:CD:03:91:84
Certificate issuer: /CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Certificate serial: 707D36AF752979F6F2A1C31F5AEE7DBD087B68DE
Authority key identifier: 2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject info access: rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666530303a3a2f34302d3430203d3e20323636333638.roa
Signing time: Tue 18 Feb 2025 18:46:39 +0000
ROA not before: Tue 18 Feb 2025 18:41:39 +0000
ROA not after: Tue 17 Feb 2026 18:46:39 +0000
asID: 266368
IP address blocks: 2804:36bc:fe00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:7d:36:af:75:29:79:f6:f2:a1:c3:1f:5a:ee:7d:bd:08:7b:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07
Validity
Not Before: Feb 18 18:41:39 2025 GMT
Not After : Feb 17 18:46:39 2026 GMT
Subject: CN=D223C9A523080429D41CA89C3F30426CCD039184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:5c:b7:de:91:31:9d:10:cf:15:5a:88:55:
d8:ac:de:39:e2:b7:fd:c5:12:a9:85:98:6b:1f:a0:
9c:02:c7:93:ad:0b:e9:ad:33:ab:e7:e9:92:d9:80:
88:79:cb:df:cd:e0:f9:20:98:d9:47:59:15:b6:a4:
f8:c4:4a:9d:e7:c3:4b:f5:45:ef:b5:ce:58:7f:bb:
bc:93:59:c6:48:b2:ea:db:71:05:74:2b:53:c4:17:
79:47:06:26:4c:a3:ae:20:98:33:a1:95:13:b6:26:
ba:cb:8e:7b:4a:64:e6:77:cc:79:11:ce:bb:76:82:
ee:ec:e5:7d:49:14:70:fb:5f:63:65:43:d6:03:20:
48:f0:39:26:c5:94:88:73:72:6f:0b:0a:15:3e:eb:
92:bb:98:88:2d:75:cd:4e:b9:f2:98:27:d9:8d:54:
e2:15:86:46:c0:7c:34:88:5d:2b:d6:2f:19:63:23:
4c:1a:4e:a1:7b:af:7f:80:7a:89:4d:0a:d5:02:87:
49:b3:d9:71:e3:bd:a3:bf:83:e3:0f:0a:f8:a6:48:
e0:2d:18:91:16:38:22:59:86:96:a1:66:73:82:be:
68:a5:90:9e:76:e4:b8:af:e6:91:27:67:5c:21:cd:
63:26:1a:70:9f:37:54:d4:99:45:6c:c8:09:9f:f2:
4e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:23:C9:A5:23:08:04:29:D4:1C:A8:9C:3F:30:42:6C:CD:03:91:84
X509v3 Authority Key Identifier:
keyid:2A:3C:A2:DB:D8:29:73:99:B3:83:1F:D9:90:D4:BF:DB:EC:0B:ED:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A3CA2DBD8297399B3831FD990D4BFDBEC0BED07.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/61fgewLU3GnGfRz8fYCDwQxcqQdQZHSBqGMigdnXMiMM/0/323830343a333662633a666530303a3a2f34302d3430203d3e20323636333638.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:36bc:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
20:ee:b3:be:be:c3:61:ae:7d:11:45:94:aa:94:e8:86:2d:03:
66:86:76:50:ac:40:6a:7d:cb:75:13:8c:42:b8:27:53:09:3c:
3b:40:6c:bf:e3:fb:0e:02:90:76:41:fc:09:eb:19:90:14:13:
91:1d:4b:1e:72:e5:d3:6d:9e:8c:ac:c7:26:82:54:2a:c8:b7:
b8:cd:71:ab:26:c9:df:94:d5:a9:25:61:40:ec:65:b0:91:4b:
39:cb:7c:ea:bb:bc:85:ff:2c:eb:8b:2d:b0:5a:40:44:9f:00:
28:30:8a:05:55:02:ad:88:3b:7e:f7:9e:d8:3d:c9:46:a4:82:
13:8d:ca:0d:30:d6:52:b6:3a:8d:22:1a:bd:e2:18:db:2f:13:
18:ad:8c:3e:61:8b:75:a2:b5:42:38:a0:4b:5e:ea:bf:b1:41:
07:52:a7:1a:34:cf:07:97:fc:89:27:39:5a:56:f1:08:65:08:
67:8d:e2:eb:c2:a9:60:f3:f5:d5:21:51:b8:75:52:20:5a:75:
ee:8a:00:c6:cf:38:75:cc:46:24:2f:48:54:12:d2:be:1d:d3:
d0:53:fe:10:3b:bb:91:5a:71:60:c6:bb:2c:34:09:d5:49:b9:
0a:32:d5:2e:cc:8a:4b:4d:91:13:98:7d:db:f1:25:f9:6b:e0:
5c:d1:0a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:19:33 2025 by rpki-client