
Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
File: 323830343a356534633a3a2f33342d3334203d3e20323639303234.roa (raw, json)
Hash identifier: g0Dby2FaFuooaNVcmwl7d1CLe+A5cOBV8gvTF8S+bu0=
Subject key identifier: 0D:EA:03:28:2B:F1:6C:E0:F8:F8:8F:CB:E5:24:80:C6:A8:14:CE:CC
Certificate issuer: /CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Certificate serial: 48C06A9C3261FDBBDCBE6F714AC06BA2B895C3B9
Authority key identifier: DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
Signing time: Mon 10 Feb 2025 18:03:53 +0000
ROA not before: Mon 10 Feb 2025 17:58:53 +0000
ROA not after: Mon 09 Feb 2026 18:03:53 +0000
asID: 269024
IP address blocks: 2804:5e4c::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:c0:6a:9c:32:61:fd:bb:dc:be:6f:71:4a:c0:6b:a2:b8:95:c3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DDA22D6D75544BECC6E53486FED661DF02BAFC69
Validity
Not Before: Feb 10 17:58:53 2025 GMT
Not After : Feb 9 18:03:53 2026 GMT
Subject: CN=0DEA03282BF16CE0F8F88FCBE52480C6A814CECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:05:4c:c9:4d:42:f9:9c:28:ff:d3:30:3d:
39:6d:67:f2:26:98:c4:fb:86:61:a2:ad:e3:b1:75:
12:05:30:d1:2b:a9:2e:1f:f4:48:b4:13:29:26:f4:
1b:cd:33:c0:fc:b4:2a:2f:7e:10:31:31:68:b5:23:
30:1e:5a:6c:20:18:98:85:8a:45:5c:4c:1c:1a:27:
2b:c6:28:78:82:99:43:bd:28:cd:2b:98:d5:39:92:
03:fc:29:1f:d3:70:4f:7b:53:45:42:9f:68:b6:b0:
07:e9:e0:da:61:51:e6:8b:0d:9a:66:8b:a9:0e:13:
ba:21:e2:29:6b:c4:aa:27:a6:66:71:cb:25:24:c0:
69:23:48:96:73:dd:1b:ad:fb:c5:a5:ed:97:09:23:
15:cd:77:13:b1:00:4d:96:1d:b4:7e:6e:c5:a0:68:
76:d0:9e:4d:71:eb:0a:0e:de:8d:d5:b6:2e:0c:dc:
39:bb:4c:09:af:7d:39:9e:73:c4:fe:25:c2:fb:57:
36:e0:b7:0a:ba:33:bc:4d:a6:b7:40:ee:13:26:be:
d1:29:a6:74:d0:5e:3e:d4:d7:65:85:69:28:a3:23:
25:15:35:8b:39:e8:84:6a:75:2c:ae:21:38:3c:20:
77:68:57:d6:8f:f8:f0:7b:3d:17:e4:73:13:1d:76:
5c:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EA:03:28:2B:F1:6C:E0:F8:F8:8F:CB:E5:24:80:C6:A8:14:CE:CC
X509v3 Authority Key Identifier:
keyid:DD:A2:2D:6D:75:54:4B:EC:C6:E5:34:86:FE:D6:61:DF:02:BA:FC:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/DDA22D6D75544BECC6E53486FED661DF02BAFC69.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DDA22D6D75544BECC6E53486FED661DF02BAFC69.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8CcHsHRVw3n51bHgNu3Yqc7P4WFLS8mY54LXaUvkYDdZ/0/323830343a356534633a3a2f33342d3334203d3e20323639303234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5e4c::/34
Signature Algorithm: sha256WithRSAEncryption
26:28:2c:5a:03:bc:a7:5b:d2:b7:49:6c:92:25:f0:d0:8d:08:
05:94:f3:26:e4:98:2f:91:9a:44:3e:a0:de:3e:eb:6b:66:57:
15:60:7c:d4:29:60:a4:47:cf:c3:7d:cf:29:fa:46:22:c3:f1:
9a:f8:b0:63:c2:bf:b8:70:73:bc:76:8e:17:4b:2d:15:db:87:
8a:83:63:2a:d2:89:11:0d:3a:e0:6d:f2:28:28:fc:68:df:d7:
28:83:3a:4a:59:bb:b0:15:41:b1:eb:91:9f:66:67:c4:aa:52:
dd:93:8a:c5:0c:b8:ee:85:1b:39:de:43:15:db:df:23:44:92:
af:08:19:c0:8b:cd:86:6c:2d:8c:70:ff:37:05:e6:54:b6:e1:
e3:b2:61:32:02:a4:d3:91:3e:a5:ec:f7:8a:76:2d:ce:d8:61:
82:ca:49:21:28:7d:f1:96:9b:3a:f7:6e:30:c4:11:34:2e:f2:
78:e2:2c:a0:2e:99:e1:47:16:c3:87:d5:cd:10:d7:9b:01:eb:
44:d7:de:b5:5e:02:a9:be:ab:d4:1c:a8:85:9f:89:68:38:25:
a5:e1:44:5c:08:5f:04:ab:6b:15:68:f9:e6:11:29:9e:cd:a0:
58:5a:f8:9c:ec:c6:8a:ad:d8:aa:d5:dd:6f:4d:42:00:b0:3c:
7f:e1:b7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 22 08:00:19 2025 by rpki-client