Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa
File: 323830343a316134383a3a2f33322d3438203d3e203631383530.roa (raw, json)
Hash identifier: OAINXJyMsL/fCNd9WJSYwUpgSIIfLjWoBKs7XCdAtNU=
Subject key identifier: B8:F3:55:E5:E1:6C:02:78:DE:8C:E9:FF:9B:E9:E0:4D:82:A1:28:56
Certificate issuer: /CN=112BC8F17C006D0ED5EBA116CCCF9A649579B39D
Certificate serial: 383F52C58B6FBFD490984342FB169F1E8C8A24F0
Authority key identifier: 11:2B:C8:F1:7C:00:6D:0E:D5:EB:A1:16:CC:CF:9A:64:95:79:B3:9D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa
Signing time: Thu 27 Mar 2025 16:06:25 +0000
ROA not before: Thu 27 Mar 2025 16:01:25 +0000
ROA not after: Thu 26 Mar 2026 16:06:25 +0000
asID: 61850
IP address blocks: 2804:1a48::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:3f:52:c5:8b:6f:bf:d4:90:98:43:42:fb:16:9f:1e:8c:8a:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=112BC8F17C006D0ED5EBA116CCCF9A649579B39D
Validity
Not Before: Mar 27 16:01:25 2025 GMT
Not After : Mar 26 16:06:25 2026 GMT
Subject: CN=B8F355E5E16C0278DE8CE9FF9BE9E04D82A12856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:13:71:3a:5c:47:7c:42:95:1b:ed:86:59:df:
06:98:d5:ba:28:cf:cd:38:b6:bf:6d:f6:e3:9d:38:
89:c1:26:ed:dd:46:f2:43:80:61:e5:0c:34:a3:c7:
ae:5e:1e:f4:0d:04:8b:eb:7e:a3:ed:29:8a:ba:d3:
25:e2:8c:34:48:d5:c5:bc:0f:2c:d2:32:c2:f0:e9:
c6:63:27:5e:a5:cb:9a:a3:3d:3f:3c:c3:2e:22:9c:
e0:16:e2:b8:1a:35:2f:05:f5:10:e4:ac:2b:53:4f:
c0:e3:e9:73:dd:d6:c4:ab:09:94:c2:48:0b:fb:69:
b2:32:96:1e:ce:16:97:fe:c7:be:6b:95:07:e6:37:
44:1b:b1:7f:5b:59:ef:9c:1b:48:16:e2:0a:9d:25:
4b:81:9c:4c:f4:2e:4e:c1:7a:6b:04:80:b6:10:56:
95:38:e6:f1:38:55:b9:03:9f:48:d3:33:a9:94:fd:
b5:a6:9c:26:9d:04:c0:1f:5e:24:9c:a0:a3:51:d0:
85:f2:5c:cb:b6:11:34:d9:12:c2:4d:41:b7:fb:fa:
de:5d:42:0f:ef:f9:78:ed:6c:c6:fc:a7:88:34:5d:
04:6f:99:92:1d:f6:16:e6:df:9f:9c:f7:dc:27:71:
18:1d:6a:68:4d:c6:6e:c1:56:fd:f4:77:44:3f:68:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:F3:55:E5:E1:6C:02:78:DE:8C:E9:FF:9B:E9:E0:4D:82:A1:28:56
X509v3 Authority Key Identifier:
keyid:11:2B:C8:F1:7C:00:6D:0E:D5:EB:A1:16:CC:CF:9A:64:95:79:B3:9D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/112BC8F17C006D0ED5EBA116CCCF9A649579B39D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/At42ADg6ixAnwtn1F7PUXKrvBvA2F1u12XRd6KqHTFnk/0/323830343a316134383a3a2f33322d3438203d3e203631383530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:1a48::/32
Signature Algorithm: sha256WithRSAEncryption
13:c0:d8:68:5f:fa:a2:ad:ab:18:e9:b9:73:45:55:3e:31:5d:
fa:a6:64:da:98:e9:a4:28:e0:c8:69:13:70:4f:6d:20:27:1f:
94:3d:b8:d1:6e:98:a4:98:e7:de:d6:eb:ae:4c:93:ed:94:e4:
66:2a:fe:8a:74:7f:8d:44:04:e7:0e:76:5c:92:ab:1b:86:86:
6d:92:39:90:4d:13:e8:75:44:3d:51:5d:f1:b3:16:6b:00:0f:
79:1d:0e:98:0f:b6:9b:e8:23:d5:61:d2:c1:53:44:4c:a1:9b:
f8:0f:e7:f0:67:da:e1:78:d7:be:c1:aa:03:c1:2a:8a:1a:e5:
30:b5:9a:03:0d:d0:f1:a5:b1:70:10:bb:69:17:66:e3:f6:22:
03:0d:43:31:c9:d8:31:c5:cf:bb:41:e1:93:d4:db:4c:ec:71:
b4:60:f9:7a:77:50:b5:92:61:0b:46:83:34:9a:60:84:d6:19:
6a:3e:1c:bf:a1:b9:04:92:52:cd:44:b6:5b:db:98:b3:d0:fc:
85:71:0c:cf:0d:db:b5:91:c4:80:7f:01:15:a1:7b:72:f2:d9:
b4:35:83:59:36:29:e5:e3:63:ad:5e:fe:60:33:2f:fd:1e:d3:
5b:21:8b:5d:c2:54:61:d2:de:37:d6:eb:18:fc:04:b6:93:56:
75:10:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:21:17 2025 by rpki-client