Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa
File: 323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa (raw, json)
Hash identifier: g+EcTmcPEUxKIxZ16Ub5pypUGxBH88mopAcFyO82ED8=
Subject key identifier: 0B:96:1E:E2:02:C6:28:88:85:B2:F3:AD:ED:E4:90:6A:CA:C6:41:B2
Certificate issuer: /CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Certificate serial: 149A13CB3E5EA15EC9794A59F3DC7502CADEDADD
Authority key identifier: DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject info access: rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa
Signing time: Fri 21 Mar 2025 19:04:18 +0000
ROA not before: Fri 21 Mar 2025 18:59:18 +0000
ROA not after: Fri 20 Mar 2026 19:04:18 +0000
asID: 273663
IP address blocks: 2804:8a58:100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9a:13:cb:3e:5e:a1:5e:c9:79:4a:59:f3:dc:75:02:ca:de:da:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53
Validity
Not Before: Mar 21 18:59:18 2025 GMT
Not After : Mar 20 19:04:18 2026 GMT
Subject: CN=0B961EE202C6288885B2F3ADEDE4906ACAC641B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:45:d0:2c:e2:53:0f:c1:09:4f:32:1f:c7:00:
6f:db:7e:92:b9:21:84:8f:b3:0d:c4:a3:75:54:75:
2c:f7:95:7c:fc:08:b5:81:c8:29:62:5c:2e:45:95:
52:21:ad:90:c4:7d:6d:f7:a8:1e:ef:f5:16:2c:91:
fb:c7:cf:29:58:cd:ed:50:bd:a4:d5:dc:80:a6:d9:
60:d6:ab:b5:00:ef:33:ba:8f:f1:ad:4e:54:e0:e2:
a2:a7:28:af:6f:03:2d:ad:dc:90:0d:ec:25:b6:db:
ae:b8:cd:e9:c6:69:37:83:9c:89:6f:ac:be:fc:b9:
16:d2:42:87:38:d0:fb:1c:d4:73:0d:97:99:b3:cb:
f7:b6:b5:6e:29:a8:bc:1f:ea:55:9e:64:30:d6:f2:
5d:3b:f8:d7:27:75:42:00:01:ff:7d:ae:bf:74:83:
17:53:8c:ba:6d:91:a7:4a:e9:b7:48:0d:cb:35:88:
50:a6:e4:9d:ec:6a:c1:b4:fb:9a:94:f9:8b:2b:e8:
d6:78:61:46:2f:6e:fc:58:9a:4d:92:79:bf:a0:33:
58:6a:3d:a3:4c:97:de:4b:51:25:d6:a0:c4:ca:eb:
da:25:42:ef:ad:d2:42:8d:83:58:3b:22:13:44:6f:
ea:42:c9:fa:66:ef:55:73:56:16:03:78:ee:4f:65:
a4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:96:1E:E2:02:C6:28:88:85:B2:F3:AD:ED:E4:90:6A:CA:C6:41:B2
X509v3 Authority Key Identifier:
keyid:DB:64:39:C6:5B:7E:8A:3E:95:AE:80:C1:F4:BC:FC:BF:86:CB:6C:53
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DB6439C65B7E8A3E95AE80C1F4BCFCBF86CB6C53.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/63xJf2N5im222paAFHDj6dN4Wr6KcpyUvvwnqtXqJtz/0/323830343a386135383a3130303a3a2f34302d3430203d3e20323733363633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:8a58:100::/40
Signature Algorithm: sha256WithRSAEncryption
83:84:a8:96:4b:d5:57:74:db:86:a9:5e:c8:e8:de:95:ee:e7:
a8:c5:92:26:a2:67:ab:10:02:82:bb:d8:16:14:3e:c7:9c:ee:
53:d9:5b:25:14:b5:43:a3:c5:6a:21:fa:9c:e3:10:ed:b7:9f:
e9:b5:15:5c:2b:55:57:b0:a2:d5:f5:a0:24:a1:12:af:d6:94:
ab:e9:cf:dc:71:12:ef:be:d4:b8:21:4a:9a:e6:33:f5:14:71:
8a:d2:ed:2e:2d:c7:c2:75:fc:d5:80:41:5a:a4:f3:8b:53:64:
86:3b:77:8c:30:fe:e4:98:73:08:26:e4:40:26:9a:db:63:b0:
cb:58:f0:95:17:da:db:ef:38:ed:87:7b:7a:9a:2d:04:db:13:
46:d0:17:b9:a5:b3:8c:88:51:1b:0c:c5:b8:38:8e:05:9c:05:
07:0c:54:94:42:a1:f0:7a:eb:ac:d2:1b:3c:09:34:5b:1a:cc:
b4:bf:b9:82:52:55:13:39:a7:d0:14:45:87:38:55:c4:64:58:
99:97:0d:7e:a1:ce:77:54:4c:61:c8:81:a8:26:d8:a0:4d:14:
9e:79:7f:27:20:cd:09:bb:db:32:31:3c:68:14:48:10:05:12:
8e:f7:c3:9b:9f:19:c2:d4:0a:45:29:01:8e:a0:9c:e1:37:97:
87:91:d7:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:34:43 2025 by rpki-client