Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa
File: 323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa (raw, json)
Hash identifier: ZeYgp7BvXvd74/k48bnu+qRITehFL0rvHom26iEGLjk=
Subject key identifier: 91:31:BD:9F:2D:5A:A6:DB:E0:E4:AD:32:E4:3B:25:C9:86:6A:B7:73
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 5AA1F3AE6E04EB0313F8C265D37B6ED594FF432A
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:49 +0000
ROA not before: Thu 20 Feb 2025 11:38:49 +0000
ROA not after: Thu 19 Feb 2026 11:43:49 +0000
asID: 263891
IP address blocks: 2804:2748:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:a1:f3:ae:6e:04:eb:03:13:f8:c2:65:d3:7b:6e:d5:94:ff:43:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:49 2025 GMT
Not After : Feb 19 11:43:49 2026 GMT
Subject: CN=9131BD9F2D5AA6DBE0E4AD32E43B25C9866AB773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e4:59:ed:42:d6:6b:9b:96:9d:3d:25:07:3b:
88:76:6a:4a:8c:85:46:34:bc:31:36:7c:78:15:96:
e3:3e:2f:c2:2c:04:9b:03:de:82:21:63:6c:02:39:
04:c0:50:8c:36:16:a6:4e:04:15:8f:05:20:60:13:
28:ac:03:4c:20:f5:15:85:eb:9e:63:36:41:45:84:
3f:d2:e6:cc:d5:00:b2:9e:20:d6:82:79:86:f3:06:
68:cd:17:e8:06:03:f3:80:c4:01:3b:8a:99:ae:3e:
b1:66:be:ba:86:bb:2c:54:bc:09:92:63:48:c3:d7:
af:e2:01:9f:61:a2:b6:49:44:e4:b3:1b:c2:14:44:
18:35:49:0e:f6:f5:a8:f0:ac:68:18:e3:e1:19:61:
bb:28:f8:bf:35:4f:ea:28:87:c1:25:cd:da:b2:5c:
56:dd:78:3d:3f:87:d6:9b:19:82:65:ba:86:0f:e9:
98:3d:07:3f:93:42:d1:84:76:19:59:dc:92:e9:8e:
d1:a1:2b:3f:23:83:19:a3:e0:34:3e:2e:1d:78:8a:
62:2f:e7:e0:1a:d5:fa:48:28:44:d3:ba:47:94:00:
ac:2f:91:ba:82:b5:4b:de:e7:d5:c1:74:c8:72:d1:
f3:a9:ef:fc:28:1d:3d:85:b6:eb:d8:5f:1c:4f:3a:
f3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:31:BD:9F:2D:5A:A6:DB:E0:E4:AD:32:E4:3B:25:C9:86:6A:B7:73
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a383030303a3a2f33332d3333203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2748:8000::/33
Signature Algorithm: sha256WithRSAEncryption
2c:d7:7c:5e:22:1f:55:4c:cb:cd:07:0e:c0:6d:b8:3f:7a:c7:
bb:95:0f:94:8a:64:5e:47:78:5b:4d:58:03:a1:1e:e1:f1:f8:
16:dc:c8:c5:07:10:13:75:fc:26:0f:73:7e:82:cf:ee:55:cb:
df:db:7b:fc:64:14:1d:f9:9d:7a:4d:b8:55:ae:55:e9:3e:6f:
ba:18:66:7a:a4:64:97:6b:80:45:8a:c8:4c:31:01:ce:2f:ed:
0c:59:83:55:88:b7:e8:99:ee:c5:f4:23:c3:e7:fd:bd:5f:a6:
e9:3d:fd:7c:8c:7e:6c:4e:4e:83:07:78:1e:36:e8:d7:77:9c:
cd:c8:ca:00:89:f8:13:8c:b6:31:f6:4f:6f:b4:8b:90:33:d5:
71:50:f7:c7:5b:dd:0f:e4:2d:9d:f8:0b:64:6c:31:aa:87:7f:
2c:10:dd:63:50:97:d8:95:5d:e2:cf:82:6e:fc:8f:8f:6e:3d:
30:2a:49:89:13:16:df:39:42:66:8b:5b:f7:d0:fe:66:3a:dd:
3e:04:3b:77:a7:8a:6b:b2:f7:92:ec:f0:5c:3b:45:0c:24:8e:
7f:4d:f1:2d:75:bf:89:64:87:66:88:b2:dc:48:ba:8e:50:82:
67:6a:ee:83:c4:44:aa:ea:bd:30:7d:ca:1e:8f:1b:fc:8a:b0:
69:64:27:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:49:16 2025 by rpki-client