Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa
File: 323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa (raw, json)
Hash identifier: /1pYXUGiJNlzcrDlu+7hGgbwVbBdHLvZnAiIEDJ3mgY=
Subject key identifier: 0F:03:BA:03:EC:81:B3:B7:41:1F:93:49:A4:BA:AF:FC:F1:8C:06:88
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 3B4DE8027D6C2D8D4B8B63587EE1348083A19D01
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:49 +0000
ROA not before: Thu 20 Feb 2025 11:38:49 +0000
ROA not after: Thu 19 Feb 2026 11:43:49 +0000
asID: 263891
IP address blocks: 2804:2748:4000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:4d:e8:02:7d:6c:2d:8d:4b:8b:63:58:7e:e1:34:80:83:a1:9d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:49 2025 GMT
Not After : Feb 19 11:43:49 2026 GMT
Subject: CN=0F03BA03EC81B3B7411F9349A4BAAFFCF18C0688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c5:b8:ea:36:ac:ca:b2:95:79:03:17:ec:f7:
58:f4:79:b4:dc:91:fe:3f:a4:79:37:5b:f1:fc:26:
49:dd:14:b1:b5:89:1c:2b:eb:2e:b0:68:eb:83:9c:
da:49:e6:11:e7:73:44:c9:0f:31:10:ff:d8:11:9f:
e3:6a:20:c1:89:bf:5b:18:86:98:11:be:e4:fa:32:
e4:4c:05:91:29:c8:ab:fe:e0:91:fc:62:f1:88:b6:
d5:a5:81:36:69:e2:00:bd:15:0a:6f:08:04:3e:d7:
28:e4:17:0e:61:b5:4f:ce:cf:39:9a:d1:0c:ad:7f:
1e:d6:01:0d:7a:91:4d:37:06:c4:07:0b:9a:12:40:
21:48:c3:38:3b:16:6f:5f:64:b2:19:6b:a4:95:e8:
01:ed:29:64:de:ea:91:11:11:8f:73:ca:6d:53:41:
42:f2:b0:e3:ee:83:66:5f:fe:b2:73:40:a6:84:66:
f9:f1:6a:ec:a0:18:f3:3d:f0:d7:7a:25:49:e7:4f:
24:c1:a2:d7:01:6c:5a:fa:5f:a8:93:e8:e0:70:c3:
d0:80:f9:bb:3b:b7:ed:72:cf:68:55:b2:4b:4e:3d:
f3:3d:88:98:d4:a1:df:23:a5:e1:ee:09:39:e2:b3:
a2:b9:24:43:1b:30:cc:0e:57:ba:81:3c:3f:f8:0b:
8c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:03:BA:03:EC:81:B3:B7:41:1F:93:49:A4:BA:AF:FC:F1:8C:06:88
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a343030303a3a2f33342d3334203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2748:4000::/34
Signature Algorithm: sha256WithRSAEncryption
30:ea:0e:81:89:4f:35:46:da:1b:d5:af:07:8c:e7:d7:90:15:
3e:db:46:e5:c2:90:80:12:67:2c:12:cf:a6:b4:50:c6:d4:19:
5e:a5:b0:d0:69:de:8c:ad:c1:7d:05:92:14:89:3a:c6:45:2f:
59:26:74:d4:81:2b:18:f8:e9:4e:f5:c8:98:a5:a4:de:82:09:
c5:e1:eb:77:1e:ec:66:d2:cf:14:b7:53:96:27:8e:fb:a9:b8:
62:a4:2e:91:e3:c3:03:63:07:7e:61:08:c1:93:6a:80:b2:e5:
e9:34:5a:ae:b2:63:0d:91:e4:95:94:70:52:be:24:f8:f4:1d:
a7:d4:3a:ab:d5:37:1e:87:61:e6:c4:e3:92:52:47:0c:1c:c3:
84:e9:84:88:74:5b:7a:cb:af:65:4f:6b:bd:f5:82:56:c8:34:
b8:02:c9:90:e2:73:25:4e:32:07:4d:06:1c:f6:08:b4:11:ce:
06:64:5c:8d:00:25:d1:9e:f7:69:72:f4:45:8f:76:2c:ac:79:
86:c2:83:54:61:4b:91:a1:38:38:77:fc:29:0e:24:f7:2b:cb:
f6:d6:e2:fd:30:b1:9e:db:8f:63:f9:e5:7b:47:59:33:1c:fa:
eb:99:71:d9:39:55:f2:f4:aa:2b:de:87:4a:e9:1e:e6:43:b4:
75:e3:50:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:15 2025 by rpki-client