Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
File: 323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa (raw, json)
Hash identifier: PuQny36Q+kZclLk4vL7TRI6j0bRlEg19X8xT89H2L6Y=
Subject key identifier: 20:23:41:BD:01:3E:29:09:09:E5:1F:37:89:F9:47:DA:23:48:F1:A0
Certificate issuer: /CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Certificate serial: 646DA4611C2A25E63358C0F188A2625DF60B5DA9
Authority key identifier: 2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
Signing time: Thu 06 Mar 2025 14:11:07 +0000
ROA not before: Thu 06 Mar 2025 14:06:07 +0000
ROA not after: Thu 05 Mar 2026 14:11:07 +0000
asID: 52998
IP address blocks: 2801:80:210::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:6d:a4:61:1c:2a:25:e6:33:58:c0:f1:88:a2:62:5d:f6:0b:5d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2E3906019F53CEC4441CD3D21CFF37C136BF24EC
Validity
Not Before: Mar 6 14:06:07 2025 GMT
Not After : Mar 5 14:11:07 2026 GMT
Subject: CN=202341BD013E290909E51F3789F947DA2348F1A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:32:71:da:19:d4:00:e6:44:17:4d:fc:da:
2f:aa:2c:57:78:75:27:dd:e8:b0:ed:ee:d5:9d:8d:
14:2a:0c:1e:1f:a7:55:68:d9:a3:53:a8:79:dc:2a:
8a:47:2f:dc:22:cc:8e:6c:8e:be:e4:38:a4:48:73:
ab:86:09:4c:83:fc:32:40:3b:86:93:90:fd:b3:da:
c1:b3:bc:b4:1c:69:85:40:03:34:a3:9b:bc:20:91:
eb:64:60:7a:af:ad:98:fd:b6:11:1b:0c:ec:ca:2b:
ae:c7:b1:b0:24:5f:66:11:0b:c7:be:6f:67:27:60:
19:e7:95:84:69:83:95:e2:ae:a0:ed:fc:46:05:fd:
08:2f:11:99:69:3d:51:89:d4:3f:09:d8:77:c2:fe:
28:a8:58:dc:df:f0:ba:57:ad:43:5d:f7:fa:2b:0e:
f0:8a:77:2b:23:cb:ad:2b:9e:bd:3f:35:57:0a:64:
9d:3b:bb:95:1a:98:fe:b5:c6:46:a8:b0:42:5e:f3:
b7:8b:ca:d8:23:9e:57:c8:57:bd:7c:4c:a7:57:07:
b5:fe:ce:db:4a:af:8a:82:14:7a:3b:31:ee:19:48:
e2:88:7e:06:7f:a5:16:60:64:6b:6b:a7:16:aa:4b:
9f:bf:67:72:13:ba:71:2a:f9:64:56:9d:f4:8a:c3:
06:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:23:41:BD:01:3E:29:09:09:E5:1F:37:89:F9:47:DA:23:48:F1:A0
X509v3 Authority Key Identifier:
keyid:2E:39:06:01:9F:53:CE:C4:44:1C:D3:D2:1C:FF:37:C1:36:BF:24:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2E3906019F53CEC4441CD3D21CFF37C136BF24EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/AwY7jWerNXwDugqEiAKYjZWVoZCo7PjniamXLoX1BzuV/1/323830313a38303a3231303a3a2f34382d313238203d3e203532393938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2801:80:210::/48
Signature Algorithm: sha256WithRSAEncryption
70:4b:ea:15:45:99:23:3d:0a:56:22:e2:0e:87:1e:f0:80:c1:
42:d9:ea:b7:a9:cc:4f:d4:64:7c:68:6e:61:6a:80:1e:09:bc:
04:c1:5e:50:1d:15:52:c9:4a:8f:4a:73:c9:4e:24:ba:67:a9:
09:17:7d:18:85:27:7f:d5:e8:b0:2e:08:29:ab:0b:6c:32:8a:
cf:5e:ca:15:fa:cd:00:fd:6f:6f:2e:09:ca:0d:7b:80:87:4a:
b9:a6:52:2e:28:9a:38:a3:e5:93:e9:8f:88:5e:a8:6b:74:b5:
4d:0b:c2:f9:0e:ab:bd:f2:40:bb:00:1e:f9:9d:21:a3:f9:82:
1f:2a:b0:6c:23:41:da:0d:45:d3:3a:06:eb:00:27:64:f5:98:
72:12:52:8e:7a:ab:5d:ce:b1:30:05:70:1f:d3:93:45:4b:3d:
37:73:e5:42:46:d8:c5:eb:50:59:68:60:42:88:6a:2d:a8:51:
ac:3f:fa:20:0a:c6:67:87:a5:99:6b:91:16:d4:b0:ec:9a:e6:
fa:67:ef:39:1a:ba:d1:55:2e:45:cb:d5:de:57:75:cb:04:1c:
d6:1f:b0:cc:e5:4e:52:a6:89:01:55:55:74:62:22:e8:e7:e9:
85:82:c2:c7:93:a2:e3:b3:9b:8c:bb:b8:8e:06:8b:db:d4:c8:
ae:8d:5e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:50:39 2025 by rpki-client