Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa
File: 323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa (raw, json)
Hash identifier: triz6m9WrUmAD9kc8oYe7wbsWL2aiQWtN6a4tFDMsIk=
Subject key identifier: 35:C3:C6:1E:BB:39:68:3B:CE:86:56:5D:F5:1E:1E:73:DF:B3:27:B3
Certificate issuer: /CN=AFA55E041FA0E5D394A1480902275296B12C222A
Certificate serial: 7C83DB38D5BCEC8EE4263D2628625D70DBC63186
Authority key identifier: AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa
Signing time: Wed 26 Feb 2025 19:36:20 +0000
ROA not before: Wed 26 Feb 2025 19:31:20 +0000
ROA not after: Wed 25 Feb 2026 19:36:20 +0000
asID: 61851
IP address blocks: 2804:1a4c:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:83:db:38:d5:bc:ec:8e:e4:26:3d:26:28:62:5d:70:db:c6:31:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AFA55E041FA0E5D394A1480902275296B12C222A
Validity
Not Before: Feb 26 19:31:20 2025 GMT
Not After : Feb 25 19:36:20 2026 GMT
Subject: CN=35C3C61EBB39683BCE86565DF51E1E73DFB327B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:48:f1:36:b7:61:c5:57:d6:b1:67:62:78:0d:
d8:d0:43:79:2c:5f:6a:b2:17:2b:93:fd:b7:2a:6d:
6c:3c:3c:a8:76:df:e6:fe:e1:24:17:af:7b:cd:ee:
9d:05:40:93:8e:c8:7f:fa:e2:82:10:00:c8:96:30:
ff:2d:63:23:b9:91:aa:b3:57:89:d4:76:31:9d:5d:
c4:e3:83:11:dc:9a:a5:23:8e:0a:47:e4:d1:7a:57:
9b:7d:b6:7e:b7:e4:2b:90:33:eb:98:19:3b:4a:8f:
60:11:7e:30:ae:4a:94:9d:28:dc:60:89:0a:db:8e:
2f:ac:90:7a:39:b4:dd:9e:d9:99:ad:9e:a4:59:4c:
08:c4:13:16:0e:ba:13:03:0d:af:ce:37:69:31:89:
89:9d:84:94:cc:d1:2b:1b:f3:ec:71:4b:80:09:aa:
17:43:9b:26:cc:8c:67:d8:b7:d9:c0:62:18:a2:b0:
6c:eb:8b:28:2e:2f:66:65:6d:32:b2:27:89:c7:db:
d0:97:0b:ec:06:f6:28:e2:42:25:1b:45:38:84:f7:
16:52:67:64:46:19:91:63:1f:46:87:6e:e9:29:fe:
c4:ac:8d:f9:dd:99:42:0a:2f:b8:f5:d5:31:20:b3:
3e:c8:73:a9:6c:f4:2d:e2:fe:00:ee:07:5d:6a:28:
5a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:C6:1E:BB:39:68:3B:CE:86:56:5D:F5:1E:1E:73:DF:B3:27:B3
X509v3 Authority Key Identifier:
keyid:AF:A5:5E:04:1F:A0:E5:D3:94:A1:48:09:02:27:52:96:B1:2C:22:2A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/AFA55E041FA0E5D394A1480902275296B12C222A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AFA55E041FA0E5D394A1480902275296B12C222A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Me782YaZqEwWF3uPEK9kGH7oA8kAsF9Rkiqt6TdjQB9/0/323830343a316134633a343030303a3a2f33342d3334203d3e203631383531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a4c:4000::/34
Signature Algorithm: sha256WithRSAEncryption
b9:50:ce:64:27:ed:47:73:33:24:c2:59:f2:81:71:d4:fc:9c:
36:95:3d:00:10:33:ff:6f:63:fe:1a:ec:04:b3:de:d7:49:2c:
68:3c:7d:e3:b4:10:ac:9b:c3:17:5e:04:5b:9e:79:a5:a0:6d:
d8:66:9d:af:67:f7:62:6a:ad:5e:6b:53:6c:00:da:b4:59:d9:
b4:e3:1b:a6:32:59:ec:24:f4:8f:0f:71:23:bd:96:87:c4:c0:
4e:85:8a:53:a3:9a:02:26:67:bb:2d:17:84:2c:b7:8b:02:44:
da:27:95:14:09:03:ca:a4:c9:ea:7d:d5:7f:63:1a:71:e6:ae:
37:94:2e:e5:43:40:3c:1c:44:d3:98:35:0d:99:ef:ef:df:60:
a9:2c:34:ab:e2:9b:8f:fc:f2:b8:32:d0:be:42:ca:18:76:07:
9b:59:5c:89:ba:a6:e4:8d:91:0f:4e:61:df:b0:6a:ed:5a:d8:
65:b8:38:77:7a:c3:67:14:4e:66:d9:bf:a0:ff:3d:62:e9:4b:
0e:ae:54:56:db:d5:97:e0:42:c1:72:0e:db:c5:19:5c:35:ae:
61:67:37:e9:53:b5:bb:7c:e4:f1:68:02:95:3e:a5:b8:dc:95:
f5:b7:7c:91:a1:64:69:d9:76:b5:9c:49:5d:79:6b:1b:9b:c8:
01:b4:2f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:00:25 2025 by rpki-client