Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3333203d3e20323637303336.roa
File: 323830343a343732633a3a2f33322d3333203d3e20323637303336.roa (raw, json)
Hash identifier: 8hVO6SXXNM/iIuGHi+xKzoCytcjfaLGyYXAT61955hI=
Subject key identifier: DF:F1:19:64:5F:5C:D2:BA:EA:B6:B0:B0:DB:C2:4C:E2:D8:A6:F2:A3
Certificate issuer: /CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
Certificate serial: 578F726B1AD1E4555F928015B2128DD3E611FD21
Authority key identifier: B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3333203d3e20323637303336.roa
Signing time: Thu 27 Mar 2025 20:40:59 +0000
ROA not before: Thu 27 Mar 2025 20:35:59 +0000
ROA not after: Thu 26 Mar 2026 20:40:59 +0000
asID: 267036
IP address blocks: 2804:472c::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:8f:72:6b:1a:d1:e4:55:5f:92:80:15:b2:12:8d:d3:e6:11:fd:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B44D3F216BC388705EB728F618C985D7B6CB8F81
Validity
Not Before: Mar 27 20:35:59 2025 GMT
Not After : Mar 26 20:40:59 2026 GMT
Subject: CN=DFF119645F5CD2BAEAB6B0B0DBC24CE2D8A6F2A3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3d:b5:55:e7:2a:77:ee:5f:bd:82:b5:a4:02:
30:5a:be:a9:6e:ac:58:c1:bb:59:35:ed:61:d8:88:
13:19:a7:ee:33:f3:b0:58:9a:33:88:a4:4e:74:58:
07:9b:e8:4a:39:65:b0:23:65:8d:4d:34:ea:bc:ac:
68:36:08:89:6a:8c:6c:3d:7f:79:de:9a:5a:11:b9:
31:c7:6e:2a:e0:a4:ea:fd:24:e0:11:ce:ce:fa:37:
df:96:63:11:ca:85:7d:3d:a4:b0:a4:60:a2:e3:c0:
1f:48:94:0b:49:98:0e:9a:4c:a1:d8:70:e5:03:d1:
d1:42:a0:70:c2:65:d7:b5:07:b8:fc:fd:ce:60:51:
b3:5e:9a:ec:68:11:1e:73:c4:b4:cd:f6:ee:b8:55:
9c:3a:ee:a0:9e:a2:03:6c:6c:85:af:8f:45:98:44:
87:1d:b1:34:49:ef:63:da:d6:0a:42:f6:18:60:f9:
a4:37:83:5d:19:15:c6:c1:ed:4a:a3:6f:2f:78:f2:
c1:db:ef:d3:47:70:98:a6:01:36:88:e8:4e:85:80:
70:50:f3:6c:4e:90:1c:fe:b2:60:fb:fb:c7:d8:49:
a6:73:9c:cc:5b:df:4f:52:d4:16:9c:25:96:b1:7e:
1f:28:84:a9:b4:0f:9e:22:70:4b:ee:b8:e2:c0:e8:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F1:19:64:5F:5C:D2:BA:EA:B6:B0:B0:DB:C2:4C:E2:D8:A6:F2:A3
X509v3 Authority Key Identifier:
keyid:B4:4D:3F:21:6B:C3:88:70:5E:B7:28:F6:18:C9:85:D7:B6:CB:8F:81
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/B44D3F216BC388705EB728F618C985D7B6CB8F81.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B44D3F216BC388705EB728F618C985D7B6CB8F81.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9G7kNKks12igDfJDbs4pSppgtQCr616FsmBfzofbR4JE/0/323830343a343732633a3a2f33322d3333203d3e20323637303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:472c::/32
Signature Algorithm: sha256WithRSAEncryption
13:c8:0a:c7:99:de:25:f4:81:de:40:5c:ca:cc:77:78:b5:e6:
f9:6b:92:d9:e4:c6:85:f1:20:fd:7e:d7:05:b3:ba:81:c1:5e:
c7:f9:55:da:52:6b:1c:2e:19:1c:d7:42:a8:f3:93:ec:cd:ed:
3f:d3:c4:a2:36:07:6a:0b:a0:b9:bd:2d:d5:b5:c1:c6:ab:81:
91:97:da:0b:8b:f3:37:3f:41:2b:d6:26:15:8f:4f:67:9e:21:
59:a8:d8:9e:73:a5:7d:ef:81:ec:19:28:a0:4f:b0:fc:69:bb:
40:bf:3f:a3:09:a4:fb:98:db:45:53:0c:ce:e6:17:b8:4d:cd:
9f:da:06:3d:b7:0a:a0:88:cf:74:03:f9:45:a9:f4:e7:c5:69:
bd:43:06:4d:25:1f:19:7a:31:cf:89:1c:e2:d9:4b:e3:20:47:
b8:33:5c:20:84:f0:e3:78:b0:95:bb:6d:f8:92:ae:cd:5a:a0:
92:67:76:66:a3:8d:4d:ec:f8:38:af:d1:cd:28:35:2f:ed:c1:
b8:ee:c2:68:43:ea:1f:4a:00:2c:51:ca:33:14:58:a8:1e:28:
d9:a3:a8:b9:5b:33:b8:5d:5a:24:8e:64:32:ea:e6:88:15:68:
43:07:22:ab:50:da:ac:fb:d9:4e:d4:02:98:c4:14:99:7d:5f:
63:b4:56:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:10:10 2025 by rpki-client