Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a343030303a3a2f33342d3334203d3e20323731363939.roa
File: 323830343a376661303a343030303a3a2f33342d3334203d3e20323731363939.roa (raw, json)
Hash identifier: o6Ec3vGXjGezGdi/C0FF7+sA5isrxw4BA6SFSNKJLTo=
Subject key identifier: C9:86:A9:8F:3B:A1:1C:45:68:65:D0:5E:D3:0B:2D:96:48:49:92:26
Certificate issuer: /CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Certificate serial: 4F69279E33FB821207EE6B05453F29B881C4A32D
Authority key identifier: 22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a343030303a3a2f33342d3334203d3e20323731363939.roa
Signing time: Mon 17 Mar 2025 17:41:21 +0000
ROA not before: Mon 17 Mar 2025 17:36:21 +0000
ROA not after: Mon 16 Mar 2026 17:41:21 +0000
asID: 271699
IP address blocks: 2804:7fa0:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:69:27:9e:33:fb:82:12:07:ee:6b:05:45:3f:29:b8:81:c4:a3:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F
Validity
Not Before: Mar 17 17:36:21 2025 GMT
Not After : Mar 16 17:41:21 2026 GMT
Subject: CN=C986A98F3BA11C456865D05ED30B2D9648499226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f6:11:43:ba:f3:0e:98:b6:8d:4c:07:da:f5:
e2:a1:a7:5a:97:48:e2:d7:e8:e8:42:e5:5b:0a:3b:
5e:2a:56:cb:a0:36:7b:b3:2d:aa:b2:aa:d1:d0:9b:
2d:8e:26:b4:51:32:4d:b9:18:48:2d:ec:9f:36:1f:
60:77:c9:16:f2:a2:22:af:53:58:dc:24:9e:e4:c8:
c7:e6:20:b3:a8:b3:34:b2:9b:c7:53:90:b2:78:ae:
fe:a3:3c:04:31:02:26:b2:51:34:e4:12:bc:bb:8f:
6a:02:93:69:6c:3d:2b:eb:8b:08:87:3a:29:7d:22:
9d:59:d1:7e:c8:c0:6a:e0:7f:79:9b:56:42:5d:10:
f1:c6:4c:32:af:34:c6:c8:ae:98:28:d9:98:67:b8:
53:e3:82:73:cc:5d:f7:ce:92:10:93:62:c1:22:91:
43:af:fa:22:80:d9:2d:45:46:ed:fc:60:31:1b:23:
1f:75:22:1a:04:af:c7:2f:04:5c:5c:bc:c2:13:70:
25:53:10:a0:d9:d2:cc:6a:ad:9c:45:7f:66:20:a9:
47:c7:13:2c:7e:de:50:66:a1:7d:98:45:e8:bd:3b:
a8:86:30:8e:70:69:53:a1:5a:06:fa:ec:a7:b9:56:
b7:67:57:6a:fc:4c:3d:37:72:0a:8c:af:1c:b1:d5:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:86:A9:8F:3B:A1:1C:45:68:65:D0:5E:D3:0B:2D:96:48:49:92:26
X509v3 Authority Key Identifier:
keyid:22:B8:86:5E:E2:EC:8B:B0:8F:2A:5F:E2:2F:8E:7E:C0:7E:38:34:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/22B8865EE2EC8BB08F2A5FE22F8E7EC07E38340F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nwECWQZDXAhW5VpadVvCaJ6swpbsRP8PJc4YfN7ZLDX/0/323830343a376661303a343030303a3a2f33342d3334203d3e20323731363939.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7fa0:4000::/34
Signature Algorithm: sha256WithRSAEncryption
6a:9a:bb:ca:22:8f:a4:9c:7e:9c:eb:9c:64:7c:3d:19:a5:d3:
e4:92:d5:9f:fa:3c:a4:d7:60:54:9e:68:04:a9:41:0e:f0:a4:
f1:eb:96:5a:db:9c:30:46:9d:36:aa:d0:06:ce:d8:04:a9:9b:
45:c6:60:a3:1b:9f:8f:38:5b:81:b5:bc:08:a8:79:aa:e9:85:
80:33:fa:41:5d:9d:0b:bb:23:e4:6a:76:bc:b9:1c:02:c0:a2:
4c:b0:21:c5:54:dd:3f:25:3b:b0:a2:3b:ff:1b:36:fe:a7:f2:
ac:76:75:6b:83:bd:0e:fe:7d:24:ee:77:e1:67:cc:33:a4:29:
a6:02:e3:3a:0d:69:bd:98:93:64:89:a7:2b:44:37:bf:66:9f:
ba:46:92:3a:65:84:f2:e2:01:20:c3:d6:26:14:77:03:fd:5c:
f8:75:f7:3e:7b:0d:9a:a3:ca:b4:59:10:9b:0d:25:2f:b0:3e:
7d:96:c6:c1:30:a7:3f:85:a1:e5:a8:1e:da:8d:59:09:6a:ca:
2f:7e:03:aa:e6:64:d7:01:aa:31:00:14:91:62:cd:2a:15:bf:
d7:3c:b6:16:78:ad:0d:bd:e2:91:8c:78:fe:ae:3f:05:63:43:
33:71:f5:8d:5e:6a:38:65:6c:06:e7:7f:af:90:1b:ef:d6:37:
22:f3:26:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:12:52 2025 by rpki-client