Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa
File: 323830343a343737343a3a2f33322d3438203d3e20323637303535.roa (raw, json)
Hash identifier: MOvLM51hzFDCbQ2VwoPZsGNPsQP7XAsBwZ3GLqO2m1M=
Subject key identifier: BC:EF:60:30:0C:EC:C0:50:E9:03:7D:86:3D:9E:57:74:A5:75:86:3F
Certificate issuer: /CN=68E8FFC7C7187C981753E423319759DC084F69E3
Certificate serial: 55B1D544317887518EF95D88614CBD809E68DCDA
Authority key identifier: 68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa
Signing time: Thu 06 Mar 2025 04:01:04 +0000
ROA not before: Thu 06 Mar 2025 03:56:04 +0000
ROA not after: Thu 05 Mar 2026 04:01:04 +0000
asID: 267055
IP address blocks: 2804:4774::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b1:d5:44:31:78:87:51:8e:f9:5d:88:61:4c:bd:80:9e:68:dc:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68E8FFC7C7187C981753E423319759DC084F69E3
Validity
Not Before: Mar 6 03:56:04 2025 GMT
Not After : Mar 5 04:01:04 2026 GMT
Subject: CN=BCEF60300CECC050E9037D863D9E5774A575863F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ec:38:10:f6:8e:c1:bf:7a:f1:c2:22:6c:b5:
c2:67:c7:5e:76:66:9c:e3:08:f9:08:44:6d:09:9d:
99:61:62:f9:aa:39:20:08:53:cc:d4:f1:62:2d:1c:
97:a6:5b:df:a7:68:93:6d:87:9f:77:77:5c:00:69:
4a:a1:7a:1f:26:46:43:44:2c:59:d1:96:05:1e:79:
8e:03:e2:f1:78:b3:e3:e4:dd:c9:3b:ef:fc:b6:67:
c9:aa:46:be:d5:c6:f7:0d:3f:14:06:3f:b7:8b:0f:
bf:40:46:b6:85:73:fd:3f:d7:21:47:5d:22:57:52:
dc:62:1e:2c:c7:d6:eb:04:08:0b:5c:02:a5:b6:9c:
51:91:a3:c6:84:48:39:c1:a3:91:90:cb:6d:6b:36:
75:57:8f:60:7f:82:06:c6:f4:be:66:bd:c1:b6:c5:
9a:fd:e6:35:2a:2a:d7:24:46:41:76:8e:7b:5f:0e:
dd:c7:f9:67:e8:92:f3:74:da:a1:36:b3:be:d9:b0:
96:14:06:d7:90:db:86:c1:de:84:ea:76:37:d9:0e:
76:54:fd:be:9c:62:56:87:14:5b:f5:6f:42:62:16:
b1:60:88:c4:fe:97:10:b8:1c:da:40:7c:78:16:6a:
94:ab:34:80:f6:be:4e:6a:81:19:f4:a3:b1:03:bb:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EF:60:30:0C:EC:C0:50:E9:03:7D:86:3D:9E:57:74:A5:75:86:3F
X509v3 Authority Key Identifier:
keyid:68:E8:FF:C7:C7:18:7C:98:17:53:E4:23:31:97:59:DC:08:4F:69:E3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/68E8FFC7C7187C981753E423319759DC084F69E3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68E8FFC7C7187C981753E423319759DC084F69E3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9gxCZR2fMA9eViEfbma1P2Xp1DGQFxVVupekcn7PrNgn/1/323830343a343737343a3a2f33322d3438203d3e20323637303535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4774::/32
Signature Algorithm: sha256WithRSAEncryption
40:bb:4e:07:f0:dd:bf:2b:a7:34:3a:0b:06:ec:ca:fb:da:69:
ec:44:60:8e:e5:d0:c7:1e:82:62:93:5a:df:11:1a:1e:da:8b:
51:b9:38:16:12:9b:8f:da:24:4c:9a:52:0e:45:78:42:01:ca:
f0:7e:5f:d3:1c:8c:1b:81:7c:03:7e:a0:f8:33:91:71:09:cb:
c4:1d:0e:51:85:fc:20:27:6e:d9:65:66:43:9b:15:14:7d:a6:
97:17:1c:e8:74:70:c7:5d:15:d6:19:e8:b7:b9:1e:9f:e7:69:
c3:05:94:0f:a4:2c:05:f3:cb:62:37:d3:56:7c:ec:17:c8:74:
2e:e6:39:52:17:bf:ad:a0:a4:11:f2:71:5f:84:1c:f9:82:90:
75:f9:11:72:4b:81:98:1c:2a:57:9d:4f:54:37:0b:85:73:3a:
ab:d0:c5:85:fb:8d:bd:81:04:2f:6b:b0:4f:1a:9d:a4:4d:44:
07:b8:40:a6:24:2c:7c:2c:65:f0:03:d7:3c:15:65:4b:a2:8d:
a7:ca:d5:e3:ef:61:1a:6f:c3:a0:cc:08:ac:50:c8:83:7b:e0:
5a:c4:93:89:db:c0:10:5c:c9:e2:a8:8f:21:f7:51:03:f4:f8:
94:20:81:35:8c:11:11:d6:d7:98:e5:80:a8:5f:04:86:ce:c0:
b5:ef:60:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:43:29 2025 by rpki-client