Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa
File: 323830343a353764633a3a2f33332d3333203d3e20323638303931.roa (raw, json)
Hash identifier: bZLdn4tlKCjIP4Nhxd+LeV3jhs1JdxOWhYJqNDLSFFk=
Subject key identifier: 9C:2F:11:63:98:D6:2B:8C:DC:CC:E3:18:6B:F2:38:90:0F:58:93:F0
Certificate issuer: /CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Certificate serial: B81B6EC30816914870BC829057067E2D667FD6
Authority key identifier: 3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa
Signing time: Fri 14 Feb 2025 17:48:07 +0000
ROA not before: Fri 14 Feb 2025 17:43:07 +0000
ROA not after: Fri 13 Feb 2026 17:48:07 +0000
asID: 268091
IP address blocks: 2804:57dc::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
b8:1b:6e:c3:08:16:91:48:70:bc:82:90:57:06:7e:2d:66:7f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF
Validity
Not Before: Feb 14 17:43:07 2025 GMT
Not After : Feb 13 17:48:07 2026 GMT
Subject: CN=9C2F116398D62B8CDCCCE3186BF238900F5893F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:89:43:fb:ee:c8:5f:9f:c0:09:b5:ef:a9:eb:
1f:ef:a6:ce:d4:97:a2:77:90:60:d5:c1:30:a0:dc:
88:f1:c8:9a:ae:02:5e:6f:e6:89:37:f0:68:02:d4:
4d:6e:da:03:f3:05:44:80:87:1c:2e:34:14:e7:1b:
ce:8d:c4:36:ec:e3:f6:7a:f4:f6:99:ec:56:ed:20:
8a:0b:81:16:f6:5d:a8:e6:92:e9:88:47:3e:33:f2:
cd:47:f0:6e:4e:ec:55:77:66:ce:a3:fc:b8:a9:25:
6a:42:df:77:18:aa:96:5e:48:87:96:bb:63:31:ca:
4b:bb:91:70:bc:6e:dc:15:6c:e1:9d:69:ad:9e:29:
df:87:8c:7d:e8:37:38:35:6e:61:a5:70:37:53:cb:
fe:e8:7c:82:5c:a5:3c:14:ac:55:65:db:ee:96:3d:
76:a9:cf:0f:6c:3e:2b:98:1e:55:dd:3e:eb:83:17:
05:1c:42:82:bf:97:5e:78:00:69:5e:a2:63:a3:af:
b1:9d:14:da:7a:b1:df:c8:26:ce:89:43:a0:38:c2:
db:94:85:fc:85:71:5e:3f:83:9d:76:f7:00:5e:50:
ef:ee:7c:8a:f7:29:d0:bc:be:7b:ff:a5:44:97:65:
54:72:8c:a2:c1:36:c3:72:b5:a5:ca:cb:6b:78:10:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2F:11:63:98:D6:2B:8C:DC:CC:E3:18:6B:F2:38:90:0F:58:93:F0
X509v3 Authority Key Identifier:
keyid:3C:9F:72:B9:D4:E7:CA:7E:EF:4F:D6:EA:F0:70:32:0A:18:60:9E:FF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3C9F72B9D4E7CA7EEF4FD6EAF070320A18609EFF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7a8KTNaRLfS1gR9x49puubkt9znfMNhueKh2VeWK5gE8/0/323830343a353764633a3a2f33332d3333203d3e20323638303931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:57dc::/33
Signature Algorithm: sha256WithRSAEncryption
74:b5:9e:cb:bc:ac:42:87:2a:0b:52:71:0d:10:51:fb:6e:d2:
d7:cc:c7:f2:96:36:b8:4e:b9:c3:0b:1a:92:38:51:0c:20:58:
ad:17:42:88:6a:00:e4:85:61:11:c3:1f:df:eb:3d:52:f5:5f:
77:93:36:1f:ff:f3:e8:eb:ba:d0:c6:31:88:d0:2c:24:9b:ec:
f1:5a:6b:d2:fc:ce:59:cf:1a:00:78:62:15:6d:cd:5f:b8:4d:
60:40:50:e3:64:c6:02:38:54:e7:b8:30:dd:1a:50:10:80:cc:
94:fe:29:fb:48:c1:f3:76:3c:04:17:0f:04:e3:07:d6:a1:01:
dc:0d:e2:f4:00:bc:ad:ce:fe:89:ce:bd:39:fa:dd:f5:9d:a4:
4d:ba:02:e6:50:f7:d0:41:21:57:63:d1:44:a4:5c:a6:e4:6b:
63:7f:59:df:f6:1b:9a:7c:73:c8:f7:5d:0b:51:a9:eb:50:be:
95:2e:8c:81:c7:f2:36:22:8e:02:b2:1e:69:d4:6a:58:fc:a4:
85:a9:1a:17:3b:d5:40:39:d4:04:8e:35:aa:85:36:01:3a:42:
9f:ac:c6:cd:78:cc:80:a4:e0:2a:ca:a8:88:2c:1f:7c:93:c2:
6b:fe:9d:7b:07:94:10:37:17:94:85:1e:7f:aa:c1:f1:98:75:
9b:33:7c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:33:31 2025 by rpki-client