Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa
File: 323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa (raw, json)
Hash identifier: sPONin/TDR5WP6xpZexgZ2Syfi7Db1aTZGeeJl8PBQM=
Subject key identifier: 82:E8:D6:68:A1:F8:60:87:D3:99:29:EF:A2:3E:2B:4E:B9:3F:19:8C
Certificate issuer: /CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Certificate serial: 1D15331202974888B801152FB266E2265568695F
Authority key identifier: 4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject info access: rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa
Signing time: Fri 28 Mar 2025 19:40:29 +0000
ROA not before: Fri 28 Mar 2025 19:35:29 +0000
ROA not after: Fri 27 Mar 2026 19:40:29 +0000
asID: 270976
IP address blocks: 2804:745c:8000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:15:33:12:02:97:48:88:b8:01:15:2f:b2:66:e2:26:55:68:69:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4A3F13967BD1598A8FC3B219CC9900A809C37494
Validity
Not Before: Mar 28 19:35:29 2025 GMT
Not After : Mar 27 19:40:29 2026 GMT
Subject: CN=82E8D668A1F86087D39929EFA23E2B4EB93F198C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:1e:2e:ee:0e:46:a2:f3:ff:3e:e6:fc:26:7a:
5f:bb:e9:4d:27:74:52:df:43:38:04:08:a1:47:82:
d6:d4:7d:78:80:cc:9a:2f:70:2c:fa:18:f2:8d:7b:
6e:25:41:0b:2c:21:f1:8b:03:9a:fa:d4:c5:1c:4b:
72:fe:5e:ee:9f:01:f4:15:17:60:24:b3:4d:66:9d:
1c:39:3f:38:2a:28:07:99:83:ac:e8:44:4e:9e:ac:
19:93:8a:f9:6d:2e:22:fb:89:01:8a:d9:f0:63:94:
1d:97:7f:09:95:6b:31:31:d0:e1:b5:4b:c3:55:3f:
ee:88:5b:07:27:3f:32:b6:7f:96:5f:e5:24:d3:43:
00:3b:25:6e:cc:cd:c3:f1:77:52:12:0e:93:9f:16:
1c:d0:da:4a:4b:26:11:6d:85:c3:f3:7b:b3:bd:f4:
0f:47:b4:6c:22:d3:4c:e9:29:d7:ea:fb:e1:6b:5b:
3a:2c:bb:be:1f:d9:9d:c1:af:5a:bf:8d:f2:f8:21:
f1:b9:d2:b9:d8:73:e6:31:af:5d:cf:b9:1f:6c:64:
b1:ad:eb:a4:d8:ae:07:64:c1:c7:23:6e:16:d2:0c:
db:1b:57:be:ac:b9:23:42:48:84:4f:9e:f1:6a:e1:
b3:b7:fd:14:70:21:f7:b5:52:0c:47:c2:f3:2e:49:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:D6:68:A1:F8:60:87:D3:99:29:EF:A2:3E:2B:4E:B9:3F:19:8C
X509v3 Authority Key Identifier:
keyid:4A:3F:13:96:7B:D1:59:8A:8F:C3:B2:19:CC:99:00:A8:09:C3:74:94
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/4A3F13967BD1598A8FC3B219CC9900A809C37494.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A3F13967BD1598A8FC3B219CC9900A809C37494.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/323830343a373435633a383030303a3a2f33362d3336203d3e20323730393736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:745c:8000::/36
Signature Algorithm: sha256WithRSAEncryption
24:08:6c:e2:e6:ad:27:aa:a0:3b:61:4f:74:d9:42:d0:44:34:
5a:84:ba:a2:f0:5b:a8:38:43:6f:35:d3:03:50:66:93:84:49:
5d:02:be:28:bf:68:b5:35:4b:a9:aa:c8:fa:e9:58:ef:c5:88:
0a:69:91:4a:4d:6b:ae:76:38:46:1c:98:f0:6a:2f:ec:ab:54:
56:fd:22:73:ec:0b:e4:96:72:2d:c1:2c:56:26:e0:03:ba:23:
78:30:e9:4a:43:58:dd:54:69:d7:cd:aa:0c:87:ea:23:87:24:
3e:7e:96:05:e1:fc:f5:09:67:0c:56:c5:70:c1:42:dd:d1:bd:
2b:96:e4:2c:b6:5d:cb:df:78:8e:cf:3f:2d:86:4e:40:f0:e4:
ef:2c:fd:5e:df:ea:77:fb:de:e5:aa:fd:4a:e8:bd:ae:96:e4:
60:2c:53:12:fe:32:44:60:d9:16:4f:0a:25:17:1c:17:3d:0f:
e1:f6:7e:89:f0:e3:ff:06:ef:52:e2:fb:48:f8:09:a2:9e:38:
80:de:08:68:b0:a2:f0:c6:82:f0:c1:05:27:f9:fa:3b:65:bd:
f1:d3:e1:6e:c9:33:62:7b:f4:95:44:05:e8:68:e0:7a:52:6f:
2f:2d:08:23:34:af:57:0f:ca:01:37:29:05:ea:0b:72:38:7e:
c0:68:b8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 22:26:21 2025 by rpki-client