Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa
File: 323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa (raw, json)
Hash identifier: tUwbslxwj6JCvbbHKNRW3YVzxPb1RInrW+AFIFRBrk8=
Subject key identifier: 55:B7:0A:D5:E1:6C:FD:BB:D8:96:5B:FA:BF:32:34:13:B7:AA:68:C8
Certificate issuer: /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial: 1DEAA01A62B2FD9B039A29C38590AC525F8016E3
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa
Signing time: Wed 05 Mar 2025 19:00:13 +0000
ROA not before: Wed 05 Mar 2025 18:55:13 +0000
ROA not after: Wed 04 Mar 2026 19:00:13 +0000
asID: 270836
IP address blocks: 2804:7228:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ea:a0:1a:62:b2:fd:9b:03:9a:29:c3:85:90:ac:52:5f:80:16:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Validity
Not Before: Mar 5 18:55:13 2025 GMT
Not After : Mar 4 19:00:13 2026 GMT
Subject: CN=55B70AD5E16CFDBBD8965BFABF323413B7AA68C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:74:44:1e:15:5b:4c:e1:59:13:24:9a:9e:25:
b7:a9:ca:5b:cc:8b:da:87:6e:73:1a:25:87:c2:a3:
69:f3:16:39:7c:ef:03:b7:fa:6f:4c:78:c5:c4:93:
11:fe:e4:8f:9b:f4:47:01:31:ac:ef:e2:7c:16:12:
d1:4e:f7:c2:06:70:e0:6f:2e:1c:95:f5:4f:16:89:
ad:38:e8:a0:e8:a8:29:a0:aa:47:d6:b5:a3:4a:2a:
f4:f8:9d:db:99:e9:7f:6a:ea:60:a4:b2:0e:b8:37:
a7:cc:96:0e:76:d3:1f:b2:56:4c:59:db:0d:cb:cc:
75:40:6a:5e:7b:49:39:76:9a:01:d6:dd:ed:65:49:
03:18:c7:2f:64:00:43:a6:07:0c:d2:c6:35:e4:5a:
bb:53:8a:f6:a0:69:45:a6:ec:38:90:20:bd:ca:cd:
fc:71:41:f7:6f:5b:ea:6b:f8:8c:57:b3:52:c0:bf:
f3:87:a9:b9:e2:3a:e2:da:1b:95:fe:f9:39:45:3a:
42:e0:88:1b:c7:23:de:6a:55:8c:2f:cc:ea:ec:a7:
b8:c1:39:80:a8:81:da:4d:f0:11:c6:c0:9d:ef:14:
ed:c3:a3:36:fc:86:b5:f1:1e:15:5a:4f:42:35:a8:
df:bd:0b:d2:8a:26:75:84:27:5c:7f:16:8c:c7:90:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:B7:0A:D5:E1:6C:FD:BB:D8:96:5B:FA:BF:32:34:13:B7:AA:68:C8
X509v3 Authority Key Identifier:
keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a383030303a3a2f33332d3333203d3e20323730383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7228:8000::/33
Signature Algorithm: sha256WithRSAEncryption
99:60:d4:10:f6:fe:fe:10:89:bb:8f:20:4d:b4:2a:4d:d6:92:
c8:76:01:0f:b7:bf:4a:63:cf:6d:b1:ea:2f:4f:a9:73:a3:fa:
a5:2a:64:fd:0d:20:0a:17:9e:c6:07:1e:22:ac:76:cb:99:5c:
cc:87:f4:53:b3:2c:a7:f2:58:9c:1f:00:c7:9f:f3:6f:4b:f5:
62:13:52:03:83:84:13:f2:e3:69:d2:f0:3f:37:c8:bf:61:d8:
c5:b8:cf:34:0a:51:e9:e9:78:0f:2d:a5:2f:08:74:2b:87:d4:
a4:32:0f:3c:42:ac:fd:4d:a7:50:49:ad:6c:b7:ee:62:1d:71:
9c:45:a3:ee:cc:58:0c:3b:95:eb:69:7b:c4:4f:8d:20:75:7d:
64:ef:74:a2:98:77:dd:b2:37:6e:9b:8d:0e:7a:a8:4c:f7:8d:
0c:17:f3:16:23:61:56:3a:62:4b:67:0c:15:61:4d:00:6f:0d:
18:fb:67:05:90:e0:06:55:7d:a1:16:2d:6d:2f:99:37:11:d3:
6e:36:b2:49:91:bf:9d:a2:d5:c8:e8:bf:3e:d0:da:1f:da:b4:
29:e0:e9:7a:1b:c6:ae:27:e0:e4:64:e3:fe:06:90:34:21:7b:
9b:d3:e7:c3:b4:83:82:aa:fb:87:1c:29:39:65:73:76:7a:3e:
5f:61:24:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:36:50 2025 by rpki-client