Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa
File: 323830343a326635303a3a2f33322d3334203d3e20323634383833.roa (raw, json)
Hash identifier: UhuA4JaTHqXuDos7SEPbAnepHfJlw4HrEcewbAoILag=
Subject key identifier: 33:35:C6:2D:1F:C0:1D:BB:62:8C:09:2F:F7:0C:0B:18:58:D4:79:89
Certificate issuer: /CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Certificate serial: 6B5172202E83360C7151C748CAE1A4CE023F4F9E
Authority key identifier: 76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa
Signing time: Thu 06 Mar 2025 18:07:54 +0000
ROA not before: Thu 06 Mar 2025 18:02:54 +0000
ROA not after: Thu 05 Mar 2026 18:07:54 +0000
asID: 264883
IP address blocks: 2804:2f50::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:51:72:20:2e:83:36:0c:71:51:c7:48:ca:e1:a4:ce:02:3f:4f:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B
Validity
Not Before: Mar 6 18:02:54 2025 GMT
Not After : Mar 5 18:07:54 2026 GMT
Subject: CN=3335C62D1FC01DBB628C092FF70C0B1858D47989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:5d:8f:a1:18:97:8b:fb:21:c0:47:ee:fd:42:
91:2f:d3:f8:d7:4e:a0:1f:74:d1:7f:a6:05:4e:45:
07:0f:b0:f1:65:20:35:71:b4:d7:63:54:8f:64:3c:
9a:6c:95:e7:ef:76:25:d5:14:fa:bb:92:50:fa:9e:
2c:05:3b:c3:7d:3d:28:ca:c5:9f:ef:d8:6f:83:3a:
9d:89:6e:b1:38:3b:06:c2:df:ca:12:05:89:a7:36:
3e:aa:26:be:3f:5a:75:55:f6:23:c2:48:2e:12:46:
61:6c:72:76:08:71:19:0b:7c:52:e6:e4:ab:32:95:
9d:85:f0:df:a6:c2:a1:d0:1d:9e:b6:79:8c:99:93:
da:e0:0f:70:09:f8:81:bb:6c:d6:68:bb:0e:2d:88:
a3:35:55:4f:67:4f:2f:fe:4e:5b:00:bd:bf:f5:10:
75:e8:33:c2:b5:69:f6:f2:56:49:ac:53:ed:6e:7b:
ae:91:d2:e4:df:d7:46:25:35:73:cb:c2:00:61:c4:
f9:bc:42:61:b3:2d:b2:5e:89:ed:46:ca:e2:10:2e:
4c:c6:21:d9:2d:bd:43:61:fc:72:25:92:13:6c:cb:
26:eb:aa:7e:a8:c3:b0:90:73:ee:0d:71:61:a9:86:
aa:cf:95:76:68:7c:4c:32:df:a2:ff:98:2a:a7:f3:
cf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:C6:2D:1F:C0:1D:BB:62:8C:09:2F:F7:0C:0B:18:58:D4:79:89
X509v3 Authority Key Identifier:
keyid:76:52:D9:D4:F9:A6:42:C7:B0:47:74:C9:0C:F6:F3:FB:21:B7:F4:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7652D9D4F9A642C7B04774C90CF6F3FB21B7F42B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UVZi5HTGfxTm7X4YW7fqFW3dU5ox3MzCkEczXxPpzYQ/1/323830343a326635303a3a2f33322d3334203d3e20323634383833.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2f50::/32
Signature Algorithm: sha256WithRSAEncryption
56:68:de:dd:de:96:6d:c1:b1:e8:35:d4:b4:0b:f1:da:30:51:
0b:8b:cb:e8:67:3a:11:af:e3:9b:34:04:b8:d9:4e:bf:fe:92:
a5:09:20:19:17:60:0f:a8:52:90:70:6d:3f:38:d4:d3:70:7d:
a5:f3:47:cd:06:1c:2d:f4:de:4b:4d:8a:74:34:08:41:70:91:
d1:90:1a:68:1c:7d:61:99:dd:53:cb:0e:b6:0c:31:04:c8:0d:
02:60:20:ae:49:5f:cb:c8:47:0b:d7:67:2f:2a:07:38:d8:de:
e6:78:49:0e:1d:eb:1a:71:ab:cd:9e:ea:d8:4c:b9:36:78:66:
9a:b0:23:32:ce:86:fa:05:e3:1c:87:ad:31:ab:3e:e9:c0:c8:
e9:ae:21:48:f6:97:f4:37:03:f9:ac:99:10:61:16:d6:cd:93:
f8:dc:1d:f6:9a:7a:88:07:00:04:73:cf:f5:ed:c7:9b:f1:a4:
27:b3:ce:b1:d2:10:04:5d:df:8e:f7:78:1b:f5:1a:93:a4:cf:
68:4e:08:0c:de:58:27:7c:8e:67:9e:79:86:0c:f8:2d:a2:33:
f0:b1:a1:4d:a0:60:23:20:2e:41:7c:dc:09:e5:cd:b6:0e:93:
a9:22:3f:c9:fa:01:83:c1:4c:66:92:d7:65:32:0b:64:7c:33:
d2:0e:d3:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:41 2025 by rpki-client