Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323032.roa
File: 323830343a6439303a3a2f33322d3536203d3e20323032.roa (raw, json)
Hash identifier: QAqZ03kNS2AtKgsGUn5qI8a1y2DJHjJSblrXWSTn66E=
Subject key identifier: 43:E7:CE:EF:84:45:8E:F8:23:B5:89:2D:71:1C:2B:63:45:93:FD:82
Certificate issuer: /CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Certificate serial: 6E62D0296EE2D518D568822DCC56A6686F46284F
Authority key identifier: 4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323032.roa
Signing time: Thu 06 Mar 2025 00:58:53 +0000
ROA not before: Thu 06 Mar 2025 00:53:53 +0000
ROA not after: Thu 05 Mar 2026 00:58:53 +0000
asID: 202
IP address blocks: 2804:d90::/32 maxlen: 56
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:62:d0:29:6e:e2:d5:18:d5:68:82:2d:cc:56:a6:68:6f:46:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2
Validity
Not Before: Mar 6 00:53:53 2025 GMT
Not After : Mar 5 00:58:53 2026 GMT
Subject: CN=43E7CEEF84458EF823B5892D711C2B634593FD82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7a:84:e0:a3:63:92:6f:0b:ec:15:ac:1e:68:
8c:24:31:3e:b4:2e:86:cd:13:00:72:a6:84:95:25:
09:b0:6f:11:9d:17:16:53:a3:f2:29:7e:dd:66:3b:
5b:bc:a6:81:e4:93:ae:59:a5:7f:38:f0:a9:98:2e:
19:98:b6:24:80:f5:c5:c4:eb:bf:f6:ef:6e:da:43:
60:e0:b2:52:7d:15:72:d1:58:07:40:2e:43:08:20:
b5:53:15:69:15:cc:5b:6d:1e:c9:24:e5:ef:59:43:
ae:0c:e2:e2:95:29:62:8d:35:b8:ea:e8:6f:52:0c:
9c:a9:8f:a7:57:da:f2:c4:74:0d:6d:6f:57:55:a1:
78:a1:c1:00:43:91:71:22:18:d6:1f:ab:80:44:e3:
f8:f6:cd:bc:8a:95:22:fe:b3:02:d9:f1:0c:50:0b:
31:b9:a8:66:cd:c6:c5:f2:d4:ac:c8:9f:b3:74:0f:
84:56:58:00:16:a6:42:61:4e:2b:06:b9:e5:ae:8d:
1a:af:dd:c0:68:a2:0d:2f:e2:9b:bd:95:1a:f9:52:
5b:50:e6:1c:2b:9a:0a:6c:87:9f:b0:6f:86:d2:74:
2c:50:1f:31:f8:46:56:77:21:d4:8c:50:ef:13:21:
82:a9:64:95:48:3a:2a:a1:b1:f8:72:bc:f7:42:39:
24:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:CE:EF:84:45:8E:F8:23:B5:89:2D:71:1C:2B:63:45:93:FD:82
X509v3 Authority Key Identifier:
keyid:4C:33:10:98:B8:4D:C9:29:6B:BD:AE:E9:D2:C0:5B:E2:AC:3C:C5:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4C331098B84DC9296BBDAEE9D2C05BE2AC3CC5A2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7rAziowefNmFrwbW51SyPKaD3H1wNUj1JwUPwgujmacU/2/323830343a6439303a3a2f33322d3536203d3e20323032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:d90::/32
Signature Algorithm: sha256WithRSAEncryption
20:51:c2:89:54:33:04:67:43:86:35:29:ba:9d:f3:d3:7a:c1:
e3:0b:d7:48:82:23:be:d0:20:d3:70:55:9d:98:88:9b:08:0c:
86:84:dc:ef:b6:03:da:34:73:16:ef:cf:91:f3:d7:eb:62:af:
96:b5:2f:fe:af:04:a3:17:bd:a0:c4:3a:ca:26:34:20:5e:68:
33:d5:fa:f9:75:f5:b1:39:06:5b:b0:4a:30:0f:d0:bb:11:7d:
2b:c6:03:68:2b:97:ea:ee:f3:6a:9c:14:bf:fb:e9:95:b6:80:
e1:9d:9f:5b:7e:bf:3e:fc:16:37:14:e5:17:a6:bd:ef:2f:14:
cd:d1:2a:0d:c4:49:2b:ed:5b:03:d3:69:d6:04:db:0e:49:5a:
14:02:e7:f0:0e:89:6f:03:98:b9:03:10:37:88:77:f6:ff:22:
4a:68:56:c5:5a:69:5d:f0:ce:17:6b:39:f1:d8:b1:1d:83:a0:
9d:c1:22:f2:9b:e3:5a:9d:c0:d7:64:6c:68:eb:ca:54:03:6c:
72:24:69:9c:f0:27:3e:a4:6f:dd:10:32:d8:c2:29:61:98:f1:
12:3b:e2:bb:28:69:46:7a:6d:5f:7f:80:54:70:1c:42:98:7c:
97:8d:f7:ce:d3:d7:26:34:c0:79:d1:b9:4e:79:68:eb:b5:ee:
62:11:e5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:07:13 2025 by rpki-client