Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d313238203d3e20323636343636.roa
File: 323830343a333834343a3a2f33362d313238203d3e20323636343636.roa (raw, json)
Hash identifier: SrgGXfTL5tGvJgKChtdrfRfPcN7M+ibkY30ZpIbhMww=
Subject key identifier: 82:AF:F5:27:30:82:96:94:4F:E3:4A:4B:0B:CB:C9:92:F1:06:6F:21
Certificate issuer: /CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
Certificate serial: 5F38B7C91A50ED4BA8772FA652D9FDF2694FEC6D
Authority key identifier: 0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d313238203d3e20323636343636.roa
Signing time: Tue 14 Jan 2025 21:04:30 +0000
ROA not before: Tue 14 Jan 2025 20:59:30 +0000
ROA not after: Tue 13 Jan 2026 21:04:30 +0000
asID: 266466
IP address blocks: 2804:3844::/36 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:38:b7:c9:1a:50:ed:4b:a8:77:2f:a6:52:d9:fd:f2:69:4f:ec:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9
Validity
Not Before: Jan 14 20:59:30 2025 GMT
Not After : Jan 13 21:04:30 2026 GMT
Subject: CN=82AFF527308296944FE34A4B0BCBC992F1066F21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:f5:9c:98:5d:67:f1:ad:cb:08:77:04:bb:
fc:99:a2:8a:3a:32:22:92:b7:6a:9d:66:b7:b9:2c:
6e:ab:84:c1:06:a1:80:1d:ac:5d:c0:ae:5f:76:4a:
03:c2:8b:fe:4c:1a:cb:06:f8:54:81:a6:d8:0f:3b:
c9:b5:7b:65:69:d2:75:2b:eb:c4:02:ce:0a:43:32:
57:cc:a3:85:ed:2d:af:d3:0e:e9:38:d4:c4:bf:87:
dc:09:8d:7e:7b:2f:e5:04:23:08:c1:c9:55:db:9d:
4c:dc:65:70:87:09:93:d3:2d:7a:ef:9c:14:a1:99:
7d:32:b6:e4:11:ec:7c:f2:83:4e:4c:f3:8d:99:96:
4f:7c:b6:11:a3:e6:22:3c:c0:c3:fc:20:8c:c2:63:
99:f8:3c:40:69:9b:c3:88:2c:09:28:8f:37:3d:6d:
93:28:62:ee:92:a2:21:90:e4:43:db:44:0d:0d:25:
53:7a:d3:ab:54:10:5e:9b:9d:a9:e1:b9:8f:e3:41:
21:de:af:34:b9:50:98:f7:91:21:e7:70:c0:9d:46:
7d:5a:e6:73:a2:12:f8:6d:2f:8f:7b:e5:78:7d:07:
ad:61:eb:3c:13:e3:78:b8:81:76:cf:ad:84:fc:46:
1e:d5:bc:57:24:48:1c:f2:f6:72:8c:58:3b:5d:5d:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AF:F5:27:30:82:96:94:4F:E3:4A:4B:0B:CB:C9:92:F1:06:6F:21
X509v3 Authority Key Identifier:
keyid:0B:7B:08:31:DF:8A:D4:A3:7B:CD:7D:74:EB:A3:B3:A3:13:51:86:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B7B0831DF8AD4A37BCD7D74EBA3B3A3135186B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7UKZQgY4Hzd9BZ9zKTWkqVqSLx48QbpV8Ubb8EW5HH6/0/323830343a333834343a3a2f33362d313238203d3e20323636343636.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3844::/36
Signature Algorithm: sha256WithRSAEncryption
9a:06:1d:79:cd:76:fc:68:ba:5c:d2:60:ac:de:4b:7a:f1:ca:
cb:f7:46:49:b7:8b:d4:31:a3:2a:e4:66:75:94:e3:ba:76:87:
99:31:80:bc:dd:8b:ff:06:d0:e5:9e:b3:7d:40:05:ca:2f:2c:
98:ce:e0:1b:50:fc:35:8d:8d:3e:cc:ed:26:0c:60:cd:7f:65:
f9:b8:8c:08:df:fd:fa:bc:5d:f0:9a:b5:de:e3:fe:54:b7:39:
1d:71:41:94:5a:07:2d:ac:4d:8c:9e:e6:7c:db:f9:5f:38:c5:
2e:a2:9d:11:fa:dc:2a:1b:b7:10:cc:e7:9e:1c:30:3f:df:7b:
8f:84:e3:80:e2:0d:1c:6c:ac:a0:74:a2:99:ff:51:a2:9f:fb:
25:fe:ab:a5:75:4f:78:be:b2:2c:9a:84:c5:d4:e2:e1:d0:e0:
15:ad:9e:28:59:ec:9c:b2:77:96:e1:bc:1d:50:a9:37:5a:d7:
bd:e3:c2:74:c3:db:49:6e:b8:0f:6c:5d:ba:6f:e7:88:17:1a:
e9:50:b9:82:b1:a9:43:7b:ed:dc:23:6a:86:bf:cb:64:ed:75:
79:57:0a:8e:b9:52:6f:b0:f3:78:e7:60:88:92:f8:89:f4:86:
63:60:63:2c:80:29:eb:a9:af:ff:bb:e4:21:57:02:0e:d4:9f:
7f:c3:ac:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:07:40 2025 by rpki-client