Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa
File: 323830343a373232383a3a2f33332d3333203d3e20323730383336.roa (raw, json)
Hash identifier: L5sXM8+AV76tvBkuzm/V8QmX0cIOyGfZg43Fmswwbyg=
Subject key identifier: D4:BB:DA:AF:F0:A0:D9:C0:C4:8C:EF:83:8C:1A:41:B7:FF:4A:E3:BE
Certificate issuer: /CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Certificate serial: 6C6363A95C259219A0D0D8DD543B949AB3E0B48A
Authority key identifier: 67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa
Signing time: Wed 05 Mar 2025 19:00:13 +0000
ROA not before: Wed 05 Mar 2025 18:55:13 +0000
ROA not after: Wed 04 Mar 2026 19:00:13 +0000
asID: 270836
IP address blocks: 2804:7228::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:63:63:a9:5c:25:92:19:a0:d0:d8:dd:54:3b:94:9a:b3:e0:b4:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67B531125B42B4898E018F1D5F2837CCA874EB8B
Validity
Not Before: Mar 5 18:55:13 2025 GMT
Not After : Mar 4 19:00:13 2026 GMT
Subject: CN=D4BBDAAFF0A0D9C0C48CEF838C1A41B7FF4AE3BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:4b:19:ac:6f:43:50:62:3c:67:39:9a:e9:
09:e6:9e:eb:31:ae:b9:72:7f:c6:56:16:d9:15:5a:
5b:1d:f0:7e:e6:cf:15:bc:4b:85:c2:51:5c:63:6d:
f0:6b:8b:47:5c:e9:57:a4:34:2e:7d:be:cf:ad:5e:
76:94:93:41:34:bc:3b:c2:a3:60:a3:92:99:7e:73:
5e:1b:70:c1:f9:79:56:8b:ce:9b:d2:af:e6:ef:c2:
6e:8a:48:dc:5d:26:ee:63:d4:da:a1:4f:05:d0:a4:
88:ed:29:9b:d6:b0:ea:11:34:e4:96:47:6b:57:d6:
d6:7d:c9:aa:7b:5d:59:64:c0:6d:5e:51:1e:32:22:
80:86:85:20:31:74:97:30:08:f4:e1:3b:f6:02:6a:
3b:62:f7:6f:97:e3:d3:63:f6:c1:1b:f7:eb:2f:c8:
fd:18:61:c0:b5:a5:52:49:f4:ab:50:c4:4f:f0:9b:
00:b4:54:39:94:66:26:4d:56:dc:a7:72:7d:11:5e:
17:0d:01:d3:d3:34:d8:7d:e3:cf:16:6a:38:96:06:
35:2a:e4:0d:9a:35:74:e7:4e:a0:f9:56:57:e4:16:
b7:49:89:c1:26:d8:ee:9e:25:84:57:d5:f9:08:69:
b5:92:df:c0:db:7f:77:6a:22:41:57:84:db:fa:ba:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:DA:AF:F0:A0:D9:C0:C4:8C:EF:83:8C:1A:41:B7:FF:4A:E3:BE
X509v3 Authority Key Identifier:
keyid:67:B5:31:12:5B:42:B4:89:8E:01:8F:1D:5F:28:37:CC:A8:74:EB:8B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/67B531125B42B4898E018F1D5F2837CCA874EB8B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/C4aRnUSb6Yv6ixquofCiW5zvEfWVj49bEUnEo8LKexsC/1/323830343a373232383a3a2f33332d3333203d3e20323730383336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7228::/33
Signature Algorithm: sha256WithRSAEncryption
36:eb:1f:c3:65:7d:79:45:a3:68:18:10:09:15:08:9d:59:7d:
dd:9d:9c:66:8d:2c:38:02:19:a6:e8:32:e1:1b:2b:35:00:69:
2b:e1:d5:20:9a:ed:48:19:40:52:5e:fb:03:51:6f:e5:66:1e:
b5:3c:fd:d2:b6:cd:6d:82:9e:13:ef:f4:db:c0:c4:34:aa:67:
db:b1:4a:17:94:c6:93:9c:ae:ac:39:30:57:4f:30:a0:d0:70:
a9:1a:db:09:7c:24:76:5b:b5:71:24:a9:6d:f0:f8:b4:ba:01:
a2:9e:ca:2d:0b:0a:10:c7:f4:d5:c6:80:48:03:91:a8:ab:f2:
f8:62:93:14:0c:18:9f:8a:6a:74:51:44:4b:e1:b8:ed:51:2e:
cd:d4:d5:d2:e6:bb:83:09:89:ca:66:9a:7d:dc:d5:c4:61:be:
bd:2c:8a:a7:c0:3f:1f:51:98:c7:0e:f4:dd:e7:71:5a:6d:e1:
8c:6c:60:ac:08:9b:32:9c:73:b3:da:01:6f:65:2f:1a:8b:e2:
35:9a:06:9d:06:65:58:90:84:93:07:d2:c0:40:bd:9a:e3:23:
12:fe:56:6f:e7:6c:4d:7d:49:7b:61:6d:46:6a:1b:19:e7:51:
c6:e4:d4:af:2e:dd:96:5e:b4:0a:f9:26:75:d4:73:22:68:2a:
71:54:93:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:16:11 2025 by rpki-client