Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
File: 323830343a343062633a3a2f33322d3438203d3e20323635393738.roa (raw, json)
Hash identifier: lk7zf/yV9/jEjdBWes+zG6IBWZB6oC/zDDDq/0SGGLc=
Subject key identifier: 20:CC:70:CB:61:EA:49:8D:E2:4B:44:B2:2A:D8:D9:0D:5D:93:83:00
Certificate issuer: /CN=A74B721511D28F530DF02712140284D2F079E9F4
Certificate serial: 59D9CF4DB89FD404CD68820ECAC34D643BCD299A
Authority key identifier: A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
Signing time: Wed 05 Mar 2025 21:05:58 +0000
ROA not before: Wed 05 Mar 2025 21:00:58 +0000
ROA not after: Wed 04 Mar 2026 21:05:58 +0000
asID: 265978
IP address blocks: 2804:40bc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d9:cf:4d:b8:9f:d4:04:cd:68:82:0e:ca:c3:4d:64:3b:cd:29:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A74B721511D28F530DF02712140284D2F079E9F4
Validity
Not Before: Mar 5 21:00:58 2025 GMT
Not After : Mar 4 21:05:58 2026 GMT
Subject: CN=20CC70CB61EA498DE24B44B22AD8D90D5D938300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:56:94:65:b7:94:dc:20:62:42:8e:27:9f:39:
9c:d5:b9:7d:f3:12:bb:7c:33:c9:41:57:2c:03:d6:
b2:f1:7f:d5:ec:c2:6d:fc:23:fa:a7:a5:e0:7f:f5:
68:3b:8e:ec:6b:33:8c:ae:d3:ee:25:5b:fa:1c:be:
18:e7:97:29:09:d3:3f:3c:28:e9:32:77:4e:e2:ff:
eb:c9:04:d5:7d:ab:5d:36:55:54:de:41:57:1b:ba:
cd:22:eb:11:3c:e0:89:28:08:e3:25:71:79:74:d5:
0f:13:b1:12:6c:01:44:32:89:09:90:aa:e6:10:e8:
9e:3d:d3:9b:b4:aa:b0:9f:93:fa:a2:07:d3:1f:3b:
11:0c:f9:47:cc:8c:eb:cb:6a:59:be:db:f3:e7:9d:
f9:c4:86:ed:db:8a:6f:5e:0e:84:69:d4:20:34:9a:
76:9d:eb:ec:d5:cf:50:1e:bc:c0:f0:40:56:72:2b:
0a:0c:60:e7:d5:fc:d3:98:fb:7e:71:ce:b8:dd:fd:
d7:20:11:be:87:94:34:9e:99:e2:93:b0:76:04:c2:
a5:d5:38:c7:0f:a1:bf:6b:c6:ab:62:c6:2b:86:6a:
fe:4e:bf:13:37:08:19:fe:ac:a3:21:5e:37:e8:3b:
45:26:e5:79:20:f5:32:6e:9a:27:d6:48:1c:5a:f6:
7c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:CC:70:CB:61:EA:49:8D:E2:4B:44:B2:2A:D8:D9:0D:5D:93:83:00
X509v3 Authority Key Identifier:
keyid:A7:4B:72:15:11:D2:8F:53:0D:F0:27:12:14:02:84:D2:F0:79:E9:F4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/A74B721511D28F530DF02712140284D2F079E9F4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A74B721511D28F530DF02712140284D2F079E9F4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7t8KUzAgHwZ1GvcayLVfyqSZ3BMMnAuq2sn1A8CLJ4Se/1/323830343a343062633a3a2f33322d3438203d3e20323635393738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:40bc::/32
Signature Algorithm: sha256WithRSAEncryption
97:3e:33:93:ff:2e:35:e2:e5:08:dd:4c:21:b0:ef:c1:63:f1:
35:a0:b6:b3:f2:50:ec:9c:b8:ba:37:5a:01:da:14:8c:27:16:
12:c9:6f:ff:72:7f:c9:5b:eb:9d:8a:af:4a:9a:04:42:ec:50:
b0:db:ca:72:f9:bd:c9:a9:54:8f:b4:47:0e:ef:b8:55:8a:27:
20:bf:95:b0:07:65:f8:2c:e7:e1:21:15:41:a7:b5:db:22:b5:
ac:cd:1b:82:a0:9d:ff:88:06:55:2c:c2:6a:8c:7c:11:4c:28:
7d:bb:18:ee:9f:17:16:e6:fa:14:88:97:52:c8:7d:86:93:41:
f2:c6:18:ef:e2:41:9c:d3:c6:a2:b3:e0:0c:bb:a9:8a:0c:f4:
e5:32:36:77:16:cc:f3:27:0e:c6:dc:a3:25:09:c4:74:ba:91:
b5:57:89:40:c2:dd:ac:52:9d:8a:32:7d:86:f5:a3:49:a1:af:
a8:e5:70:0c:8e:12:41:d6:8d:88:6c:6c:6a:cf:9a:80:e7:e7:
0d:81:1b:93:15:cb:ca:1d:27:77:d2:70:c3:25:c2:5f:28:b4:
51:d2:bd:c6:94:59:7f:22:6c:1a:d0:2a:d8:f6:09:d7:8c:87:
55:bf:dc:41:a1:23:76:a0:85:40:1f:5f:93:62:f6:c1:31:16:
27:e2:51:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:38:17 2025 by rpki-client