Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/323830343a373766303a3a2f33322d3332203d3e20323731323039.roa
File: 323830343a373766303a3a2f33322d3332203d3e20323731323039.roa (raw, json)
Hash identifier: gg7el4I586LwRBHkr/pqYtWdjkEvh0vwFtIdz3Rb/aQ=
Subject key identifier: 02:63:98:43:14:F7:00:82:5D:B4:22:F7:B4:B6:C2:A8:B6:48:60:2A
Certificate issuer: /CN=0D43F36140A4C38AD745FB2C264948998A60F421
Certificate serial: 4C75B01103801F6FD700BD57D19F01567EFDA1C8
Authority key identifier: 0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject info access: rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/323830343a373766303a3a2f33322d3332203d3e20323731323039.roa
Signing time: Sun 26 Jan 2025 20:20:59 +0000
ROA not before: Sun 26 Jan 2025 20:15:59 +0000
ROA not after: Sun 25 Jan 2026 20:20:59 +0000
asID: 271209
IP address blocks: 2804:77f0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:75:b0:11:03:80:1f:6f:d7:00:bd:57:d1:9f:01:56:7e:fd:a1:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D43F36140A4C38AD745FB2C264948998A60F421
Validity
Not Before: Jan 26 20:15:59 2025 GMT
Not After : Jan 25 20:20:59 2026 GMT
Subject: CN=0263984314F700825DB422F7B4B6C2A8B648602A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b9:17:ac:c0:23:ce:6b:5b:86:40:3b:51:60:
4c:e9:ca:7e:4b:2a:15:b4:5f:b3:38:db:ba:95:9f:
af:64:47:7d:fa:64:a6:c8:90:1b:5c:f1:7b:2b:f7:
f0:27:98:ed:bf:ca:39:bd:7e:bb:69:cd:70:3a:1c:
5f:2b:b6:31:d6:04:e1:80:7a:19:f2:84:9f:62:37:
1f:4b:01:e0:94:ec:f1:9c:a4:ab:9b:24:47:91:2f:
cc:06:6e:ca:97:af:5e:4a:c8:40:9d:ec:76:65:81:
8b:54:cd:63:c5:13:cd:de:62:ae:17:a7:64:c2:ef:
1b:0f:43:d1:f1:40:a8:a3:23:7e:76:33:1f:94:c6:
2c:88:bd:a3:57:15:e6:86:68:6b:3e:5c:9c:41:cd:
ad:76:b9:03:4a:63:cd:5d:89:7f:6a:9c:e0:2d:9a:
44:3b:9c:9a:1c:fd:23:84:64:63:ed:d3:ac:51:be:
e1:74:3e:95:24:ab:4a:a1:80:57:e2:0b:0e:85:11:
2b:e9:87:f9:ac:7a:d2:f7:d6:63:66:25:a9:a4:6e:
48:f5:23:a6:d0:81:ec:87:9b:13:c1:19:95:25:ee:
59:ee:61:18:be:93:b9:91:0c:12:e1:46:c3:6c:80:
60:3f:69:ef:b6:f4:19:69:bd:e6:d6:42:56:80:d8:
fd:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:98:43:14:F7:00:82:5D:B4:22:F7:B4:B6:C2:A8:B6:48:60:2A
X509v3 Authority Key Identifier:
keyid:0D:43:F3:61:40:A4:C3:8A:D7:45:FB:2C:26:49:48:99:8A:60:F4:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/0D43F36140A4C38AD745FB2C264948998A60F421.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D43F36140A4C38AD745FB2C264948998A60F421.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/7uFxE3aKQsSqPHLbMutFQU2SwqLSJrTSLfLwqkbj3FoL/0/323830343a373766303a3a2f33322d3332203d3e20323731323039.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:77f0::/32
Signature Algorithm: sha256WithRSAEncryption
5c:4b:c7:72:5e:52:64:f3:db:34:1e:e7:6b:22:c9:f1:7b:38:
cd:40:61:cf:ba:af:15:4a:7b:fc:94:85:25:c4:79:8d:59:40:
b9:2e:c4:af:9e:72:6c:58:00:c1:43:a2:d4:49:fc:c6:a8:10:
43:61:c9:af:83:51:bb:5a:36:94:66:14:6c:77:2e:b7:a6:4d:
f1:aa:bd:d4:b0:0a:11:78:61:14:44:e4:c0:4c:e7:63:55:7d:
45:c0:35:18:d6:e2:d6:8d:79:6d:57:07:19:d8:a8:d0:bf:ae:
c9:02:9f:f8:dc:cf:11:5e:05:c4:58:5c:8f:ec:7b:23:65:71:
00:f6:19:1a:47:15:ee:e5:a7:a5:e0:1f:4d:91:c1:21:94:2e:
37:88:7c:98:0b:72:07:6b:0e:be:6c:f6:d4:0d:25:b7:86:b4:
d0:dc:66:b1:f4:3c:e1:eb:7f:96:a8:96:8e:d5:e9:ca:56:5d:
37:75:20:77:4d:4c:e6:73:97:ed:fe:5f:4a:b6:1f:2c:8e:2c:
9c:c9:d0:f9:75:e8:58:6f:db:1b:d7:68:86:40:55:c4:ef:45:
a8:a5:77:01:01:c7:a1:14:7d:1d:f9:5e:05:95:76:37:a0:4e:
dc:a8:cf:ad:92:e8:cc:61:db:c3:15:c9:0c:9c:7a:a8:c9:d8:
7b:8e:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:39:14 2025 by rpki-client