Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: ImIslCeVmPb3nSgMSy5jze8jUNDZEXXgbVaIBflk4Yw=
Subject key identifier: 78:A8:37:E3:7D:22:F4:79:F3:60:98:4A:95:81:4D:5B:13:6E:3B:B2
Certificate issuer: /CN=392AEBF74273723B76684580562B17A77CDEF042
Certificate serial: 61DAA93BF0C319C1A133584AF335CAB5C467C699
Authority key identifier: 39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
Signing time: Thu 06 Mar 2025 18:36:38 +0000
ROA not before: Thu 06 Mar 2025 18:31:38 +0000
ROA not after: Thu 05 Mar 2026 18:36:38 +0000
asID: 262617
IP address blocks: 2804:3d74:8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:da:a9:3b:f0:c3:19:c1:a1:33:58:4a:f3:35:ca:b5:c4:67:c6:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=392AEBF74273723B76684580562B17A77CDEF042
Validity
Not Before: Mar 6 18:31:38 2025 GMT
Not After : Mar 5 18:36:38 2026 GMT
Subject: CN=78A837E37D22F479F360984A95814D5B136E3BB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0e:0a:e8:79:e6:13:23:1a:7d:1a:bc:57:0d:
5f:9d:50:0d:83:b2:7b:25:c4:20:9e:ab:55:fb:c7:
bc:8b:25:04:a4:04:0b:9f:65:5b:3d:c2:b7:de:76:
31:2d:77:ab:bf:49:f8:2e:d8:6d:f4:b9:09:6b:6b:
fc:ed:d4:24:d0:7a:7c:d7:b1:e3:9c:40:79:20:70:
8a:24:76:d4:f4:6c:77:01:da:b0:af:dc:4e:23:27:
13:10:60:13:67:38:97:f9:ea:b0:ef:a4:78:6a:a7:
17:0d:6c:d2:79:df:84:41:5f:66:53:05:46:dc:f4:
38:2e:20:82:de:6f:38:37:14:a8:f9:89:11:03:a6:
80:90:86:a6:a1:a1:c0:3c:85:32:29:2d:a9:87:13:
e0:ef:f4:22:b3:53:e1:f0:81:82:fd:7e:d7:47:78:
b3:fd:71:76:64:bf:61:b2:19:bf:cc:4a:83:43:91:
69:07:2b:f1:24:a6:a6:34:65:0c:9d:57:58:7b:36:
05:54:6c:1c:28:3b:39:d8:5c:0a:83:61:46:c4:94:
bd:6d:f8:4c:83:c1:2b:5a:ce:45:50:af:28:35:68:
6b:94:8b:f8:52:68:ad:1c:cf:5f:4f:a6:8b:75:67:
c1:04:44:d2:cf:7d:e0:3a:59:e9:fe:72:f1:da:3d:
f1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:A8:37:E3:7D:22:F4:79:F3:60:98:4A:95:81:4D:5B:13:6E:3B:B2
X509v3 Authority Key Identifier:
keyid:39:2A:EB:F7:42:73:72:3B:76:68:45:80:56:2B:17:A7:7C:DE:F0:42
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/392AEBF74273723B76684580562B17A77CDEF042.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/392AEBF74273723B76684580562B17A77CDEF042.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bhw3FK3WRRYMAzqnzKfYRsPcjAYr5u3mjP4Nzn6JvtL/1/323830343a336437343a383a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d74:8::/48
Signature Algorithm: sha256WithRSAEncryption
42:44:e6:93:c4:34:b5:b2:9d:ae:98:ad:e8:ce:ad:48:fc:19:
70:a9:22:a4:5d:19:6b:dc:c9:16:95:ae:ca:79:ef:ad:54:66:
95:7d:40:dd:1b:d8:bb:b1:6b:92:63:4e:39:04:cb:b7:db:0a:
26:62:5d:b2:1a:d1:7e:03:35:f7:5d:91:96:16:1d:71:d6:26:
a2:e6:d2:67:2b:86:d5:e8:ab:84:dc:02:02:8d:4a:d0:42:1e:
05:e7:7f:fe:36:ce:97:1e:8d:fb:19:ce:56:c4:36:69:57:da:
07:1b:e0:b5:05:cc:fa:cd:90:20:31:a8:32:fd:a3:62:e8:09:
c1:b3:78:68:3a:fc:ef:73:a0:3d:f5:b1:41:29:86:40:98:28:
19:7b:26:d3:a1:0c:ba:1a:84:89:b4:38:4b:fa:cc:2e:5e:4d:
0b:22:da:9b:d3:ac:79:45:7b:22:2d:23:e3:af:e9:70:21:43:
ab:3a:19:76:2d:fd:b4:21:a5:2f:75:de:05:c1:a9:dd:04:fc:
51:a0:be:87:95:5c:fb:3f:f2:3d:77:4a:ec:8c:cd:d6:22:8a:
d1:68:33:89:c6:6a:78:aa:56:51:27:a3:0f:fd:0d:e6:0e:7a:
48:ea:aa:cd:4f:94:c8:8b:fa:fd:7c:eb:a6:16:7b:d3:32:c3:
52:4f:0d:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:46:19 2025 by rpki-client