Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: c1lGNzU8zeKRUckAOpxz3jhRQGiR1BY3LL3NlIJWgbE=
Subject key identifier: 8E:35:07:A4:42:17:8D:55:5C:13:1C:28:5E:44:C7:C8:65:20:78:DD
Certificate issuer: /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial: 3B7B36CF7CE71236CA5A273A216D056295B90BE6
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
Signing time: Tue 18 Mar 2025 20:33:06 +0000
ROA not before: Tue 18 Mar 2025 20:28:06 +0000
ROA not after: Tue 17 Mar 2026 20:33:06 +0000
asID: 262617
IP address blocks: 2804:3d74:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:7b:36:cf:7c:e7:12:36:ca:5a:27:3a:21:6d:05:62:95:b9:0b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
Validity
Not Before: Mar 18 20:28:06 2025 GMT
Not After : Mar 17 20:33:06 2026 GMT
Subject: CN=8E3507A442178D555C131C285E44C7C8652078DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:1f:63:7c:4e:b4:bb:fd:36:ee:09:c4:00:
96:0a:e9:a5:00:37:ef:51:39:f4:b3:cd:20:32:52:
9d:65:aa:b9:9a:11:e8:8e:cd:d9:f2:2e:d5:83:f4:
8a:5e:23:87:1b:40:a3:71:b6:9a:00:17:ea:1c:2c:
9d:23:be:f8:50:79:3b:6f:d7:c0:97:a7:f4:ab:0f:
a2:d4:6d:c1:b5:90:64:05:e9:5d:88:fc:f0:cb:72:
e9:00:c5:23:bf:0b:ea:b1:1b:a2:46:0f:40:3a:48:
9a:77:f2:da:72:d2:d1:09:50:94:f3:6b:7d:61:67:
9e:6c:a0:3f:e1:a5:d9:85:83:55:d9:e2:83:e6:72:
a8:8a:8f:a3:5e:8d:09:f3:fc:fd:37:31:1b:31:ab:
9a:f9:f7:b1:6d:6e:4b:91:cd:62:ff:02:70:28:53:
91:a2:d5:70:ba:b1:4f:2f:a1:29:3c:6a:3e:32:28:
77:1c:5b:73:67:86:a5:90:26:b0:2a:68:bf:14:a3:
b9:fb:55:94:f8:4b:44:9c:23:7d:66:3d:e5:64:5f:
c9:f6:de:bb:0c:87:84:f0:02:23:f7:b9:9b:43:f7:
a1:a4:aa:c1:0c:63:d5:0d:07:ef:e5:d9:8f:3f:22:
ba:b4:c5:1c:fc:d0:24:74:3e:d1:80:0e:fc:7b:b5:
51:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:35:07:A4:42:17:8D:55:5C:13:1C:28:5E:44:C7:C8:65:20:78:DD
X509v3 Authority Key Identifier:
keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a333a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d74:3::/48
Signature Algorithm: sha256WithRSAEncryption
3b:8c:58:2b:32:52:c3:80:5b:d9:e2:0d:58:2d:46:50:ce:07:
ec:ea:65:b0:46:88:63:2d:2b:38:83:9a:65:4a:a2:e8:86:62:
95:5c:a1:b4:4f:75:30:9c:e3:fe:cf:d8:71:db:d4:be:ca:83:
b0:ca:54:b3:f7:21:07:f9:a9:1a:4a:fe:8e:6f:2f:5f:99:c5:
4e:b3:64:2d:b9:00:14:66:d9:d1:e7:f9:0f:33:21:9e:3f:3a:
03:2e:44:2c:8e:6d:1b:c1:a3:14:c4:54:dc:9c:cf:c8:6e:8c:
fe:74:25:ca:af:fb:4a:00:f2:db:57:6a:18:28:8c:85:29:9c:
41:db:7b:07:7a:e9:d8:b4:e7:80:6d:e1:76:3e:0d:f3:e9:cd:
46:57:4c:08:95:c2:da:6d:c7:7b:28:39:fe:51:b1:66:18:4d:
15:70:0d:5a:1f:78:f9:fd:ce:06:9d:39:d1:c6:00:a6:2e:64:
0a:9a:89:b4:07:27:ee:4f:2a:1d:07:04:dd:35:f0:ab:19:05:
9f:6b:09:cb:f2:40:6f:c4:48:f7:60:e2:45:62:d2:dc:31:67:
36:2c:0a:5f:f3:63:a8:e4:08:dd:2e:78:b9:81:7b:0a:bd:12:
e7:97:3b:f1:48:34:bc:2c:1c:91:95:e9:8f:51:2a:f4:bc:6c:
5f:fe:29:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:19:48 2025 by rpki-client