Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa
File: 323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa (raw, json)
Hash identifier: FVJlg76zsiFIfRzwHjWJZAiSFiMl0j2j2H/CwENa5OQ=
Subject key identifier: 4A:4E:CD:C7:26:49:B2:89:D7:F8:0F:62:2F:59:29:9A:19:16:AC:3D
Certificate issuer: /CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Certificate serial: 0A8BCEEACEC758EEB4AF3C50B99651F678356C65
Authority key identifier: 21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa
Signing time: Thu 20 Feb 2025 11:43:54 +0000
ROA not before: Thu 20 Feb 2025 11:38:54 +0000
ROA not after: Thu 19 Feb 2026 11:43:54 +0000
asID: 263891
IP address blocks: 2804:2748:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:8b:ce:ea:ce:c7:58:ee:b4:af:3c:50:b9:96:51:f6:78:35:6c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21E94E1E8DEC1B82A9B2FD138115496F1B02F390
Validity
Not Before: Feb 20 11:38:54 2025 GMT
Not After : Feb 19 11:43:54 2026 GMT
Subject: CN=4A4ECDC72649B289D7F80F622F59299A1916AC3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:7c:62:e5:d2:b9:39:fb:1c:38:2d:48:6a:
73:7d:ef:10:d1:c0:be:e0:2f:11:3d:07:84:9f:26:
9a:37:88:42:12:57:88:7d:cd:f5:80:bd:7b:0a:f9:
c8:e5:8d:7a:2c:49:fc:c4:62:d2:17:d4:63:f3:f3:
46:d7:41:b0:a6:eb:4e:ba:87:37:a7:91:76:6f:69:
59:49:91:fe:8e:cb:7b:2a:d4:96:ae:5a:9c:c6:a8:
f8:ba:01:98:ff:e9:51:be:f6:b4:5c:43:21:54:43:
8e:ce:46:6c:df:ab:0b:ad:79:8b:eb:f7:5d:ae:8b:
69:5f:5b:bc:94:f9:25:27:4c:b6:1d:3d:7b:be:ff:
18:e7:f0:4a:04:89:52:3c:45:7e:a7:24:f6:38:fa:
4a:e7:8c:eb:dc:bd:00:1a:0e:84:7a:ed:e2:dc:45:
48:67:b9:d3:12:b8:d6:63:1b:4a:14:75:2b:e7:25:
d2:8f:58:de:0c:0f:f5:82:28:f0:32:dc:5e:a9:00:
84:80:f8:00:49:7e:ed:d6:d2:a4:57:99:d5:d9:cb:
35:d6:8b:02:e8:a9:3a:10:b3:54:b1:33:83:f8:98:
59:97:5d:cf:61:40:91:53:75:82:ab:db:8d:88:40:
cd:39:f4:ab:4c:69:a9:94:0f:18:f0:9a:a4:26:d8:
11:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:4E:CD:C7:26:49:B2:89:D7:F8:0F:62:2F:59:29:9A:19:16:AC:3D
X509v3 Authority Key Identifier:
keyid:21:E9:4E:1E:8D:EC:1B:82:A9:B2:FD:13:81:15:49:6F:1B:02:F3:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/21E94E1E8DEC1B82A9B2FD138115496F1B02F390.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BQgAd2e6J4fmuWFhX7mUYwwhs1cGx5X3QoWFawBEeU4Z/0/323830343a323734383a633030303a3a2f33342d3334203d3e20323633383931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2748:c000::/34
Signature Algorithm: sha256WithRSAEncryption
02:7c:d6:61:cc:a3:5f:42:ed:f6:34:74:52:ce:58:68:f9:79:
39:d4:74:a4:63:ec:ed:07:fd:ec:15:64:1b:99:4d:1e:83:51:
85:bf:46:61:87:1b:0e:58:1f:cb:0c:b9:34:d3:17:1f:94:b7:
b3:c0:4b:ca:74:a4:c3:9c:f5:8f:57:a2:bf:e6:3c:0f:5d:94:
de:f8:bd:8c:0f:9c:9d:d9:5d:99:12:29:e1:56:a6:c7:71:3e:
e9:7a:5a:e8:d0:d8:6b:9c:5e:8b:99:30:92:77:30:33:05:7d:
21:8d:f2:72:58:75:dc:25:75:91:38:44:1f:e6:3e:52:31:89:
c7:ba:57:5b:fc:01:28:14:4f:c7:40:95:44:d9:82:86:b0:47:
cf:4b:15:93:07:cc:c5:6c:b5:d6:60:57:bc:58:f0:86:f8:1e:
6c:f4:26:4f:db:22:19:b0:65:7a:9d:3b:c8:7f:a5:51:69:30:
02:55:85:b7:84:18:7e:ca:8f:af:9b:18:8c:37:f8:f3:c1:28:
6c:41:15:81:7f:64:49:ef:64:bf:35:77:e3:46:50:9b:58:a9:
92:9b:d6:e5:59:49:d8:ea:d3:2e:d1:b7:a8:3a:33:bf:65:11:
86:6b:aa:a7:10:5a:9e:2c:8e:92:38:3c:db:fe:bb:f6:65:4f:
a7:86:50:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:00:23 2025 by rpki-client