Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/323830343a393264303a3a2f33322d3438203d3e203533303430.roa
File: 323830343a393264303a3a2f33322d3438203d3e203533303430.roa (raw, json)
Hash identifier: AGZPJmoBXe4ub3n4QBejdn+nQ3UPAzWXqHK4BjW2yUM=
Subject key identifier: D0:54:12:7E:53:33:DA:30:B5:94:49:0A:9A:46:01:2B:7E:E2:56:37
Certificate issuer: /CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
Certificate serial: 4F77FEE1B53C161A2A95A72357730B4F83A855ED
Authority key identifier: 7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer
Subject info access: rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/323830343a393264303a3a2f33322d3438203d3e203533303430.roa
Signing time: Tue 18 Mar 2025 19:23:55 +0000
ROA not before: Tue 18 Mar 2025 19:18:55 +0000
ROA not after: Tue 17 Mar 2026 19:23:55 +0000
asID: 53040
IP address blocks: 2804:92d0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:77:fe:e1:b5:3c:16:1a:2a:95:a7:23:57:73:0b:4f:83:a8:55:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7A802A6EBF1AA8211D8D3736A55331593F4FC244
Validity
Not Before: Mar 18 19:18:55 2025 GMT
Not After : Mar 17 19:23:55 2026 GMT
Subject: CN=D054127E5333DA30B594490A9A46012B7EE25637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:96:a5:50:6e:06:85:5f:e0:74:91:65:c6:b1:
40:b2:4d:05:ea:1d:aa:35:40:fd:d4:21:91:15:76:
be:90:74:49:c2:cd:cb:8c:db:44:cf:75:b4:b1:28:
00:da:f0:7b:f9:47:1d:51:c6:02:e4:47:66:97:00:
05:27:5b:8d:5c:bf:e3:66:8d:8f:bc:0a:23:8f:22:
f7:83:13:96:32:12:43:eb:c1:86:fc:30:42:ad:0c:
4a:6c:35:50:44:c8:ec:1b:d5:67:18:b5:0d:27:04:
86:55:23:b0:ee:9d:64:2f:2e:d5:74:23:b9:8d:9f:
e4:4c:18:9e:b9:aa:71:b3:e6:13:02:e0:89:30:eb:
e0:3c:99:90:c6:bf:96:54:cc:8d:98:45:0c:11:02:
6d:9e:17:7c:77:04:0d:26:88:67:8e:ab:3a:ef:70:
3e:b1:de:d7:7c:5c:4e:c1:39:d5:2d:18:e2:50:c5:
c9:19:06:5f:db:0b:3b:23:91:eb:2f:6c:35:1f:ab:
9c:c5:5e:95:7d:75:2b:18:22:93:95:24:75:4d:d5:
cb:12:9c:e2:f9:f5:d4:3e:be:be:72:8e:8c:f8:cd:
7e:a1:c7:0a:e5:24:03:88:c5:c7:68:cf:de:03:6f:
bd:7d:05:b2:f6:72:d8:82:8d:bf:a1:9a:ea:52:8c:
90:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:54:12:7E:53:33:DA:30:B5:94:49:0A:9A:46:01:2B:7E:E2:56:37
X509v3 Authority Key Identifier:
keyid:7A:80:2A:6E:BF:1A:A8:21:1D:8D:37:36:A5:53:31:59:3F:4F:C2:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/7A802A6EBF1AA8211D8D3736A55331593F4FC244.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7A802A6EBF1AA8211D8D3736A55331593F4FC244.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hfcH6aRRCNUeoRXHYnQNkNM8XQyBMpvsr3Rm3cAfCSB/0/323830343a393264303a3a2f33322d3438203d3e203533303430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:92d0::/32
Signature Algorithm: sha256WithRSAEncryption
84:5e:58:a5:2b:9a:cb:19:8a:5b:3c:c6:f4:35:e8:62:2a:ae:
43:91:18:0c:81:6d:8a:0c:94:db:b9:fa:50:b4:cd:da:f1:78:
3b:72:ba:87:30:ae:34:1f:00:62:d0:79:59:27:85:09:49:d8:
c0:b2:9c:b4:1d:93:a2:76:d6:8c:b3:1f:27:35:7f:d5:fb:6d:
80:f7:d8:98:b7:60:1c:32:c0:43:8b:3a:7d:6a:1c:99:8b:9b:
d9:ff:eb:75:c6:66:71:5d:9b:65:81:f1:b4:a6:8f:32:18:86:
6d:e7:1a:c9:ad:53:92:ba:3b:68:45:2a:a6:35:66:26:60:f2:
59:af:54:f8:10:77:83:91:1c:1e:3a:25:74:71:e7:b0:f0:29:
e7:92:6b:b6:f6:f1:8b:d2:d6:77:d0:fc:74:ad:ea:1a:68:32:
fc:22:63:de:15:cd:9c:c7:c9:cc:6a:5e:eb:83:4c:63:20:2d:
1a:e7:4a:ed:a2:41:da:fc:bc:ec:e7:3e:78:82:52:b6:32:8d:
44:ff:89:e9:0d:9c:5d:4a:b1:e6:43:30:e4:16:d0:25:90:7a:
b6:23:0f:db:fb:73:23:12:72:33:28:b2:c8:b3:14:30:46:81:
d2:c6:9a:70:6a:5d:de:c0:d3:ab:5c:b5:1d:24:aa:2c:78:2b:
e7:bd:f9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:17 2025 by rpki-client