Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
File: 323830343a316335303a3a2f33322d3334203d3e203631363439.roa (raw, json)
Hash identifier: 507R8yqlHSGTSF65sSbnecNIYegrTAxk21EcnfbzbLU=
Subject key identifier: 22:AF:93:E7:88:41:09:A9:49:A8:C8:E7:25:BC:7C:2D:63:3B:B9:53
Certificate issuer: /CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Certificate serial: 3FB71140BD6888F8B2C93413F69FB63BE8D34990
Authority key identifier: 39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
Signing time: Wed 05 Mar 2025 19:00:00 +0000
ROA not before: Wed 05 Mar 2025 18:55:00 +0000
ROA not after: Wed 04 Mar 2026 19:00:00 +0000
asID: 61649
IP address blocks: 2804:1c50::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:b7:11:40:bd:68:88:f8:b2:c9:34:13:f6:9f:b6:3b:e8:d3:49:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39E00671823C7AB3E8086F0B9E90A44A52E8699C
Validity
Not Before: Mar 5 18:55:00 2025 GMT
Not After : Mar 4 19:00:00 2026 GMT
Subject: CN=22AF93E7884109A949A8C8E725BC7C2D633BB953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:17:6d:90:c6:63:83:83:b3:de:87:c0:cb:75:
0f:00:4f:6d:88:ae:75:67:f3:f3:cd:72:97:85:94:
e3:ab:25:7d:25:cc:29:0e:02:7d:2d:53:dd:2e:58:
0e:e1:bd:87:a8:b7:fe:71:99:72:6c:18:18:49:30:
3b:4c:25:10:36:dc:3b:ad:fc:ac:5b:81:26:23:b6:
22:6c:95:a4:69:0c:ec:4a:db:32:e1:4e:90:a5:ba:
d0:1c:27:cb:66:82:19:7a:32:4a:7f:43:87:6c:97:
d9:00:a5:be:45:7d:a4:35:81:e1:0a:d9:e4:38:1d:
9f:45:f5:73:3d:88:d8:db:e5:a4:3a:1e:c4:6d:26:
60:50:f8:7d:b7:0a:ae:f9:8b:76:05:75:77:8d:09:
cc:ac:c4:84:1e:80:ce:d1:60:75:6c:3b:64:94:52:
3b:2d:c0:4b:01:49:d5:3a:50:69:c3:47:06:b5:b1:
8c:47:de:60:75:16:4a:4f:72:89:f7:23:46:f5:3c:
c2:ad:fa:f7:87:9d:65:91:d9:8b:0c:1d:0b:d0:2a:
5e:10:1f:a9:d1:d8:96:55:d7:43:9f:5f:2f:81:26:
4e:c7:cc:f2:be:39:76:5c:3b:85:27:43:a7:7e:cb:
f6:be:5b:47:48:84:66:66:8e:e8:0b:94:c6:0a:fd:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:93:E7:88:41:09:A9:49:A8:C8:E7:25:BC:7C:2D:63:3B:B9:53
X509v3 Authority Key Identifier:
keyid:39:E0:06:71:82:3C:7A:B3:E8:08:6F:0B:9E:90:A4:4A:52:E8:69:9C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/39E00671823C7AB3E8086F0B9E90A44A52E8699C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6VJefhwCnDBaiEDbun7rgR2zWwXi1qobzHkZGiJq1JHw/1/323830343a316335303a3a2f33322d3334203d3e203631363439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1c50::/32
Signature Algorithm: sha256WithRSAEncryption
15:dd:93:d3:67:ae:a7:71:11:7a:79:68:23:e0:24:cd:d5:37:
c0:9d:28:54:eb:21:3e:a3:ce:a2:ea:27:61:f9:e7:87:42:e5:
ee:8e:d1:8a:d4:20:6c:ea:96:a3:96:72:b2:ca:2b:9c:5d:c4:
27:02:7d:2c:57:a4:92:64:ef:b9:3a:1d:bb:42:0f:b8:5a:42:
1d:54:86:c3:32:e0:20:06:d4:ab:7d:e0:c1:11:d1:4c:ba:1e:
61:cb:6b:dc:b2:97:ca:55:76:f0:d8:23:79:cf:d9:9c:38:fb:
5d:44:99:ee:0b:c1:3d:25:86:e5:73:ab:a5:25:63:93:13:e6:
1c:84:d1:87:86:0f:21:9b:fa:ed:f9:37:77:66:75:27:c7:ca:
bc:b6:10:50:49:04:de:d0:dc:af:96:7e:e6:f2:96:45:60:fc:
ed:8a:f5:1d:5b:71:98:b9:d9:d4:fb:4d:27:9b:05:64:5d:49:
92:f7:2c:fb:b0:69:ba:80:e9:80:40:0c:ab:f6:ac:bb:09:b4:
a7:b3:ed:58:70:3b:60:c2:72:be:64:ec:b3:04:19:ab:e8:1f:
5a:22:0a:e9:b8:13:98:6e:30:fd:09:95:64:a6:bd:47:7d:57:
e9:cf:20:4d:41:15:b5:4c:34:8f:a2:f4:ad:03:27:b2:f2:ee:
06:51:40:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:51:04 2025 by rpki-client