Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
File: 323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (raw, json)
Hash identifier: JyqLpCC8e0HeiVYChWcbK1KJtOM+u27pO0ftJeI92MU=
Subject key identifier: 99:D3:F8:3D:65:8C:C7:C0:51:2F:9B:74:E7:1D:B1:E4:97:DB:62:13
Certificate issuer: /CN=E2072C475E2925AB717FA25CB0C35668A240297C
Certificate serial: 1F5BE153169660D20F823DBEEE98CBC577EFA41B
Authority key identifier: E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
Signing time: Thu 06 Mar 2025 02:16:35 +0000
ROA not before: Thu 06 Mar 2025 02:11:35 +0000
ROA not after: Thu 05 Mar 2026 02:16:35 +0000
asID: 271378
IP address blocks: 2804:7a8c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:5b:e1:53:16:96:60:d2:0f:82:3d:be:ee:98:cb:c5:77:ef:a4:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2072C475E2925AB717FA25CB0C35668A240297C
Validity
Not Before: Mar 6 02:11:35 2025 GMT
Not After : Mar 5 02:16:35 2026 GMT
Subject: CN=99D3F83D658CC7C0512F9B74E71DB1E497DB6213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:17:7c:6a:ed:40:24:d9:25:61:0a:5f:3d:d7:
6c:68:17:70:8d:c6:8e:d9:ff:1b:8c:7e:8f:05:69:
ae:37:0b:46:73:e1:fb:fc:80:96:2f:66:3c:b2:16:
a7:5f:60:0c:5a:5e:88:a8:7d:6e:79:6e:99:f2:ab:
0f:01:50:fe:dc:3e:1c:35:1e:d8:85:34:39:83:b7:
75:36:b5:67:2d:cf:26:8a:bd:14:53:9e:5d:dc:d4:
a6:2a:75:27:dc:71:8e:78:b6:4c:f7:53:80:78:05:
86:bb:b0:62:c8:85:a6:fe:d8:55:c5:73:1a:34:8a:
ab:11:85:6c:96:63:bc:ad:4b:1d:03:95:1f:64:c4:
af:50:de:6c:e4:3c:d6:24:b2:9a:69:30:fd:46:09:
32:98:b1:2a:1c:b3:30:b6:22:5e:47:f0:67:a3:50:
74:5a:cf:68:89:42:a7:9e:73:56:96:ea:10:cd:e1:
28:b3:e9:b0:c9:b9:1f:d9:e5:2c:2e:f0:f9:8c:cb:
d1:24:3c:42:6b:e2:9c:6d:70:f6:69:50:bf:41:40:
aa:90:95:ce:4e:2d:51:1b:94:49:c8:60:76:57:51:
af:d6:d1:ad:e2:0b:9f:19:5c:fa:be:52:4b:72:fd:
55:d8:c4:87:56:76:8a:88:52:71:eb:05:dd:80:f6:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D3:F8:3D:65:8C:C7:C0:51:2F:9B:74:E7:1D:B1:E4:97:DB:62:13
X509v3 Authority Key Identifier:
keyid:E2:07:2C:47:5E:29:25:AB:71:7F:A2:5C:B0:C3:56:68:A2:40:29:7C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/E2072C475E2925AB717FA25CB0C35668A240297C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E2072C475E2925AB717FA25CB0C35668A240297C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/1/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a8c::/32
Signature Algorithm: sha256WithRSAEncryption
08:3b:b5:95:62:b6:04:16:29:b9:f1:3a:67:ff:2e:6a:01:42:
80:23:93:a9:15:f1:8d:bf:93:4f:f4:96:bf:41:c5:0e:5f:cc:
77:2b:8b:8d:ab:28:1b:8c:79:74:40:16:d5:48:f4:2a:49:8b:
63:49:38:6f:60:80:5c:6b:8b:39:dc:67:86:f7:df:0c:cc:ac:
98:b8:d9:74:fd:24:e4:8c:f5:d7:f8:07:91:34:2b:da:34:20:
bd:0f:06:7c:0e:20:2b:e6:0d:6b:51:17:c5:a7:c9:d9:54:60:
8b:1d:7a:0a:95:73:48:6b:57:97:2b:ac:4b:c0:6b:21:af:a4:
2f:a5:11:50:dd:b9:66:d4:3e:3d:c6:a6:db:65:30:60:36:e7:
46:ff:9b:5e:28:74:a7:cb:17:0f:c1:dc:70:a1:bd:bd:8b:7c:
e5:9c:64:53:ae:14:43:87:40:81:01:91:82:51:b9:ec:48:50:
94:b8:43:2c:51:7d:48:f5:32:a4:7d:4f:5e:ac:e7:70:3e:39:
1c:92:62:f0:c5:2f:81:2d:22:d7:f0:75:6d:4f:c1:4a:21:23:
e0:59:af:98:b4:e2:29:a7:51:a1:8d:4e:9a:37:75:1a:8d:7c:
e7:5f:f6:6f:d7:1e:b0:d0:8a:d8:a8:41:b6:7f:4d:92:16:b4:
7c:a6:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:40 2025 by rpki-client