Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/323830343a356666383a3a2f33322d3438203d3e20323639313337.roa
File: 323830343a356666383a3a2f33322d3438203d3e20323639313337.roa (raw, json)
Hash identifier: x6rW9jCCge7pgSikdO+N6Nk7UH7lwIZA6/UkvStSYRc=
Subject key identifier: BB:32:95:DB:98:38:5C:F1:52:85:E5:79:62:A2:BF:81:55:AD:79:12
Certificate issuer: /CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74
Certificate serial: 7EB713D8AFA01AFDB1AC491881C782C6C6AE7C54
Authority key identifier: 00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/323830343a356666383a3a2f33322d3438203d3e20323639313337.roa
Signing time: Thu 06 Mar 2025 17:52:23 +0000
ROA not before: Thu 06 Mar 2025 17:47:23 +0000
ROA not after: Thu 05 Mar 2026 17:52:23 +0000
asID: 269137
IP address blocks: 2804:5ff8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:b7:13:d8:af:a0:1a:fd:b1:ac:49:18:81:c7:82:c6:c6:ae:7c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74
Validity
Not Before: Mar 6 17:47:23 2025 GMT
Not After : Mar 5 17:52:23 2026 GMT
Subject: CN=BB3295DB98385CF15285E57962A2BF8155AD7912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:24:f5:64:ed:5b:35:80:9e:e9:15:89:c1:b4:
7b:88:4b:02:45:8a:c4:e9:36:0f:51:36:33:f4:31:
c2:fb:6a:c2:aa:9c:92:42:f7:4e:26:b2:60:7a:3a:
1d:b0:dc:c3:93:a5:5f:9b:20:4e:0e:75:5b:b8:18:
7f:60:43:bd:1f:cd:cd:e0:f7:8e:91:45:c5:be:53:
3d:e8:97:44:d3:93:99:8a:11:d4:3c:a3:3e:6d:f5:
ab:32:56:90:07:c9:46:6a:f3:ef:1c:83:c2:66:55:
bf:54:55:fc:2d:7b:83:27:13:f4:d1:54:ab:21:94:
94:ce:ee:2f:e4:70:77:ed:de:ea:b3:49:78:a2:f7:
41:51:66:6f:af:1c:86:ad:5a:3e:94:6f:4c:20:ee:
ff:15:f0:25:d0:a2:22:93:8a:d7:13:c8:3b:8d:2a:
5a:a1:68:fb:a9:c5:4f:62:f4:b0:09:e7:ff:01:d0:
21:c8:83:3a:54:73:ff:3c:a2:30:31:33:65:a5:f4:
de:0e:c0:20:c9:66:ee:d7:86:69:5d:ac:6d:e7:6d:
d3:9e:37:d7:ba:a5:6a:d8:bc:54:f1:5f:5b:b1:b4:
85:76:66:08:5e:5b:34:17:a1:c0:f4:a9:c4:12:1e:
37:82:2c:a5:2b:e5:f9:46:b4:8f:22:ce:96:c3:4f:
f3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:32:95:DB:98:38:5C:F1:52:85:E5:79:62:A2:BF:81:55:AD:79:12
X509v3 Authority Key Identifier:
keyid:00:D9:5A:AB:43:E0:36:D7:A6:DE:22:28:E9:DB:13:FF:AB:79:BE:74
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00D95AAB43E036D7A6DE2228E9DB13FFAB79BE74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8aP1i4ygyyirdYtc5QQm58TJuQXadqT71yyjh3NMQyCK/1/323830343a356666383a3a2f33322d3438203d3e20323639313337.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5ff8::/32
Signature Algorithm: sha256WithRSAEncryption
1d:90:7e:e2:5f:69:37:cd:18:17:ec:b6:9a:9e:80:e8:5e:af:
5f:bd:ab:b9:17:48:77:b3:e8:8e:a9:ae:17:68:ae:5d:c2:95:
91:bf:7a:b2:50:05:04:6c:1d:11:8b:c7:97:75:13:43:21:88:
85:00:28:3c:57:3f:35:ff:42:01:95:1e:43:2e:ef:b4:17:17:
e3:28:1c:74:5f:f2:c8:b0:49:64:1d:b6:08:b0:ff:71:9e:c7:
7d:ca:cb:4a:d0:b1:e9:23:43:25:e6:be:67:bf:b1:b5:aa:bc:
27:d9:bf:30:4c:9d:a2:45:4b:58:c2:e5:5d:eb:50:bf:c6:85:
a8:15:db:1f:c8:df:bd:fd:e8:ef:26:0b:1f:23:0c:98:96:90:
b9:3a:08:25:47:ff:a7:98:50:3c:04:48:42:85:78:7e:fb:f1:
f1:b5:9a:1f:5f:82:85:3e:a5:e1:9d:e1:0c:fe:61:c7:b2:73:
90:f7:0c:12:f4:e9:d4:2b:94:94:09:7e:27:6a:8a:43:38:c5:
6b:a3:37:93:de:5e:27:95:51:16:e0:a9:c8:3d:99:f2:6c:3e:
cc:69:55:82:33:cc:8d:08:29:c2:8a:95:4c:f3:53:8e:42:5b:
81:8b:51:20:b0:41:1c:9b:58:bf:a5:b4:c1:51:d1:ff:4a:cb:
90:85:b7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:59:40 2025 by rpki-client