Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
File: 323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa (raw, json)
Hash identifier: XmjgnSrpXuYA+7BDqpxnjFGrLH0OCu06yrEaSozEnR4=
Subject key identifier: 8A:05:26:25:F6:C4:40:BB:CF:53:D5:FE:4A:79:EC:64:83:A8:3B:93
Certificate issuer: /CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Certificate serial: 78E667EA54F1CC402B8B60C112F24DC67B122E3D
Authority key identifier: A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
Signing time: Thu 06 Mar 2025 04:42:11 +0000
ROA not before: Thu 06 Mar 2025 04:37:11 +0000
ROA not after: Thu 05 Mar 2026 04:42:11 +0000
asID: 28210
IP address blocks: 2804:56c:b000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e6:67:ea:54:f1:cc:40:2b:8b:60:c1:12:f2:4d:c6:7b:12:2e:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA
Validity
Not Before: Mar 6 04:37:11 2025 GMT
Not After : Mar 5 04:42:11 2026 GMT
Subject: CN=8A052625F6C440BBCF53D5FE4A79EC6483A83B93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:30:cf:96:b2:f3:01:1a:70:8a:34:0d:b3:be:
64:5b:81:25:3d:39:6e:ac:5d:24:03:e2:57:28:52:
37:a7:32:7e:c7:e9:86:e5:76:de:0b:4d:2e:24:f5:
fb:dd:b0:4b:61:09:6b:4a:3c:0b:79:c6:84:10:4f:
13:3c:57:35:87:e1:53:0c:1f:84:79:3c:06:bb:8f:
cd:fc:56:20:f0:c7:ba:8c:6b:33:a4:55:5e:84:a8:
3f:79:4f:8d:cc:79:66:64:e0:92:16:da:a9:7a:f7:
7e:7c:f1:c6:a9:1a:56:e6:04:89:ef:93:a5:29:47:
75:74:11:e7:f3:49:a4:1d:e9:34:5e:01:45:14:48:
5d:26:11:48:40:4d:18:5a:cf:52:ee:71:5a:23:fc:
2b:64:fb:e8:f2:89:7e:d8:ab:f5:ed:c4:d6:7e:36:
ad:32:36:1b:b9:0f:03:c5:de:37:5e:7d:8e:29:27:
22:6b:e7:ba:b9:8d:ec:41:fa:f2:b6:08:db:82:15:
ce:c2:01:a7:c9:37:04:81:e4:9c:13:5b:ba:e2:11:
1d:a6:83:1e:cc:4e:a9:27:68:6c:48:00:21:4c:83:
61:f3:4d:04:60:1f:9c:be:20:db:23:90:6d:b9:be:
96:0f:a3:70:66:e7:ce:15:32:50:fc:48:a9:84:eb:
77:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:05:26:25:F6:C4:40:BB:CF:53:D5:FE:4A:79:EC:64:83:A8:3B:93
X509v3 Authority Key Identifier:
keyid:A6:1C:AB:65:BA:DA:D7:5F:F4:9C:F8:CE:54:AE:75:73:71:D1:C4:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A61CAB65BADAD75FF49CF8CE54AE757371D1C4AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/1/323830343a3536633a623030303a3a2f33372d3337203d3e203238323130.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:56c:b000::/37
Signature Algorithm: sha256WithRSAEncryption
d7:0c:ec:bc:cc:98:ef:5a:69:9c:da:10:3b:5a:ae:88:29:d9:
22:b2:cc:a3:62:e7:f6:3f:e2:ed:8a:42:a8:fb:b9:32:27:a7:
f2:a1:c8:f9:4c:f2:1f:17:8d:dd:5d:1c:c4:cc:97:9b:2a:67:
3e:02:36:45:99:07:26:92:86:10:14:0b:e0:1e:44:18:55:32:
2e:49:58:83:97:c1:cd:31:54:64:7d:1b:ae:c6:20:8a:cd:60:
a0:60:44:7b:f0:bc:01:29:0b:99:fc:25:fa:63:23:68:df:0f:
c6:fb:9e:d2:51:62:8e:18:82:87:3c:74:3d:56:80:fb:28:61:
a5:52:e5:d4:4f:a5:49:2c:b9:f8:24:13:cd:f3:e5:b2:2c:58:
6e:11:72:83:87:e0:12:90:2b:c9:7f:f2:dc:5e:21:6f:47:77:
c5:d9:38:f4:60:8a:96:d2:ec:57:fc:5d:dd:02:80:2b:34:6a:
ff:a8:93:c0:ab:40:8e:cb:75:7f:d0:4a:4e:f3:92:53:22:41:
02:4d:ff:0b:9e:65:85:94:9e:6b:7a:9f:ed:a3:49:5d:c2:66:
7b:e3:93:b5:3c:f8:bb:d6:07:09:e8:48:be:fe:49:05:2c:65:
bf:e5:5d:75:4b:a6:8c:aa:5d:ab:89:ad:a9:f4:e4:c2:9a:6b:
d6:9b:ce:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:44:34 2025 by rpki-client