Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
File: 323830343a313932633a3a2f33362d3336203d3e203631373736.roa (raw, json)
Hash identifier: sxqEh9k3NHsV+8kULQ8g3RjUyCcN86Cu8VmFPoP+HLA=
Subject key identifier: AC:19:A4:2D:B2:0F:0F:E5:C9:B7:04:C6:42:62:EB:75:F4:DA:11:23
Certificate issuer: /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial: 618534D50FC7E52379AA575C1EAFD75DF003A7C0
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
Signing time: Sun 02 Mar 2025 22:11:32 +0000
ROA not before: Sun 02 Mar 2025 22:06:32 +0000
ROA not after: Sun 01 Mar 2026 22:11:32 +0000
asID: 61776
IP address blocks: 2804:192c::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:85:34:d5:0f:c7:e5:23:79:aa:57:5c:1e:af:d7:5d:f0:03:a7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
Validity
Not Before: Mar 2 22:06:32 2025 GMT
Not After : Mar 1 22:11:32 2026 GMT
Subject: CN=AC19A42DB20F0FE5C9B704C64262EB75F4DA1123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b2:00:2a:ab:b8:f4:26:c4:c3:d8:61:e6:72:
9d:ec:61:5c:28:3b:e2:59:5e:d4:9c:6a:94:be:5b:
79:bf:f0:2b:68:c1:5d:bc:98:ba:54:08:3c:85:f3:
c9:87:19:e7:86:50:c2:44:22:1c:2b:17:24:1d:e0:
ef:5c:33:b2:48:ee:66:1b:d8:84:7d:8f:7d:fe:10:
72:27:c7:d2:2d:ee:16:91:37:a2:2a:19:bc:4f:fa:
53:b6:73:af:b2:13:71:e8:92:a0:ec:8d:96:d5:c8:
f0:c2:41:be:ae:34:51:7f:a3:39:89:c8:16:c5:bc:
7f:d5:6c:47:82:7d:cd:cd:38:e6:fe:51:29:4b:58:
ea:ea:89:37:16:56:a4:8a:a3:59:5c:60:93:c6:57:
4d:2b:d7:a2:07:68:f5:27:b7:56:b1:d7:1f:4a:f6:
63:3e:cd:ee:b7:5e:03:b6:4e:6b:79:be:48:9c:41:
d7:ee:d3:eb:64:f6:8e:67:00:26:22:d8:69:d6:55:
84:e7:54:46:41:c6:2e:2a:41:4b:77:28:d2:90:d8:
e9:38:03:ef:5c:87:1d:f4:34:6d:66:df:12:b7:80:
00:2b:17:28:4b:1d:60:3d:c3:32:0e:d1:53:92:27:
22:7a:e5:b8:ef:b7:e5:6e:ad:db:a4:17:4b:95:66:
13:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:19:A4:2D:B2:0F:0F:E5:C9:B7:04:C6:42:62:EB:75:F4:DA:11:23
X509v3 Authority Key Identifier:
keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33362d3336203d3e203631373736.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:192c::/36
Signature Algorithm: sha256WithRSAEncryption
3e:bf:70:ec:6a:8c:2a:5e:c4:02:e7:c6:28:fc:95:b9:f4:6a:
9e:23:83:44:22:b3:72:bf:65:39:8a:fb:7b:73:88:07:d6:b7:
69:de:b0:87:eb:83:83:4f:af:32:90:1f:37:35:d7:a0:00:9c:
2e:bd:a7:23:54:07:b0:d0:9a:7d:29:d6:c8:94:38:c6:9c:18:
9f:b0:cd:e9:c3:f8:e7:cf:0c:e2:61:bb:01:55:43:70:cc:06:
1e:82:db:4a:c4:4a:bb:df:d4:04:fa:16:16:16:26:a8:85:74:
2b:76:07:ea:fa:2f:12:b2:e3:8c:0b:b1:47:83:00:b8:5a:ea:
e3:4b:3c:01:58:d1:cf:65:98:dd:d8:27:49:f4:2b:49:a9:84:
6a:7c:7c:09:96:c0:92:2c:a6:a8:2e:98:8b:e5:4d:b7:eb:ed:
00:8a:2d:2e:11:59:04:1f:d6:ff:4e:59:92:6e:e3:ef:f6:c5:
a4:34:05:10:85:1d:8b:77:37:8c:de:45:66:ad:d3:b7:51:fc:
99:77:a9:c1:fa:97:cb:17:50:2c:77:be:e8:25:c2:f6:e3:15:
78:b7:ae:74:06:4f:06:21:2a:90:8c:03:28:74:0f:ff:9e:f6:
db:44:25:3a:00:81:cb:c5:6a:c1:fa:58:e2:5b:2f:ba:58:7a:
c9:2c:bc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:15:06 2025 by rpki-client