Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33322d313238203d3e20323637323930.roa
File: 323830343a346233343a3a2f33322d313238203d3e20323637323930.roa (raw, json)
Hash identifier: hIwChKiAdKBylSixJAqhumU3GR24C7ygZdBDAW2jqZc=
Subject key identifier: 75:00:3F:54:5A:7A:ED:D5:33:96:55:3C:AE:DB:6D:9C:15:D6:69:5E
Certificate issuer: /CN=980C1C961523F08075AB59E8C017D8E90E5EF19B
Certificate serial: 2B864AB7C8C61BDE2448E38AB55202C18DE61B0A
Authority key identifier: 98:0C:1C:96:15:23:F0:80:75:AB:59:E8:C0:17:D8:E9:0E:5E:F1:9B
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/980C1C961523F08075AB59E8C017D8E90E5EF19B.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33322d313238203d3e20323637323930.roa
Signing time: Thu 20 Mar 2025 14:26:46 +0000
ROA not before: Thu 20 Mar 2025 14:21:46 +0000
ROA not after: Thu 19 Mar 2026 14:26:46 +0000
asID: 267290
IP address blocks: 2804:4b34::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:86:4a:b7:c8:c6:1b:de:24:48:e3:8a:b5:52:02:c1:8d:e6:1b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=980C1C961523F08075AB59E8C017D8E90E5EF19B
Validity
Not Before: Mar 20 14:21:46 2025 GMT
Not After : Mar 19 14:26:46 2026 GMT
Subject: CN=75003F545A7AEDD53396553CAEDB6D9C15D6695E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:8e:f7:cd:f0:ec:91:bb:94:01:44:b1:83:bc:
a1:34:18:55:5f:19:88:95:ac:de:a1:0e:e6:8c:2f:
9d:92:7b:64:74:0a:c4:a7:43:23:aa:c4:45:c5:73:
d8:55:28:c1:cc:54:ac:62:c3:82:3e:f2:c4:10:fe:
a0:a0:2e:57:15:54:83:8c:ab:cf:3c:d4:d3:ce:19:
fe:ed:58:d0:67:8a:03:4c:b4:24:f9:78:fa:48:f3:
de:1a:7c:7d:6e:51:70:fe:7a:0e:91:43:4d:dc:78:
d5:6d:01:c3:5d:e7:ef:9b:79:ba:d5:2f:3a:74:36:
30:71:34:3a:bd:60:92:f7:89:43:e3:db:05:b7:2f:
ea:3d:84:02:b3:d0:e8:9f:c3:49:22:62:60:b9:d0:
40:99:a4:68:55:ef:c7:54:31:85:53:d2:7e:84:01:
76:0b:73:eb:c5:12:aa:03:87:eb:d6:cf:e4:c3:75:
b7:3e:46:c1:c1:81:a8:b5:b4:e9:85:03:ff:08:6a:
bf:b2:19:28:99:a3:18:c4:ca:77:e7:b8:2c:3e:32:
0c:54:18:03:86:1e:ae:6b:8f:27:4a:3c:e0:30:ef:
79:04:d3:fe:89:78:79:fd:ba:0a:e5:78:92:38:ad:
bf:db:e9:41:08:a3:e9:84:4b:61:d2:6e:7d:a1:90:
1b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:3F:54:5A:7A:ED:D5:33:96:55:3C:AE:DB:6D:9C:15:D6:69:5E
X509v3 Authority Key Identifier:
keyid:98:0C:1C:96:15:23:F0:80:75:AB:59:E8:C0:17:D8:E9:0E:5E:F1:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/980C1C961523F08075AB59E8C017D8E90E5EF19B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/980C1C961523F08075AB59E8C017D8E90E5EF19B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM7tBRANa9a9ZKJt2B3DTwxgx962hF9ftUJwukg29XRY/0/323830343a346233343a3a2f33322d313238203d3e20323637323930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4b34::/32
Signature Algorithm: sha256WithRSAEncryption
6e:26:1a:6e:fe:8e:2d:a2:b7:fb:aa:53:18:7a:df:b9:8f:ba:
0c:e5:6f:69:61:11:58:1b:83:60:42:31:bc:7a:c9:35:17:ea:
39:49:a9:4d:11:8f:68:74:a0:ba:8f:b0:96:0b:6a:f8:6c:50:
f4:33:9d:ac:b9:63:f6:0e:2b:fe:b2:3b:ab:d5:11:c0:4c:77:
66:63:40:ae:06:ce:64:a3:cd:60:fe:91:fc:0d:83:49:dd:d9:
1e:24:af:97:06:6e:76:7d:90:96:8e:08:45:97:2a:96:f8:d8:
48:00:82:8a:78:54:36:36:3a:96:7f:3f:a8:99:9c:6d:7b:e9:
50:9d:f1:51:59:d7:85:e6:c7:ab:2b:53:b6:3d:e3:6a:4d:84:
da:5f:61:94:aa:4f:fa:26:72:b8:31:4e:67:7f:bf:b5:5d:1c:
e8:34:ae:46:ac:3a:63:65:14:4e:10:f8:59:ff:68:23:9f:73:
e1:37:0b:5f:da:d3:9e:68:9c:e7:d8:b4:69:b1:4c:11:b7:1f:
bb:de:d2:a2:e2:3c:5c:14:6e:b5:cd:d2:84:eb:5d:b6:d6:a7:
90:fd:68:38:28:27:d1:9f:68:73:e2:27:f4:57:41:69:ba:43:
42:cb:88:19:9e:fa:60:2a:6e:a0:10:a5:4a:6f:09:80:76:00:
92:21:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:42:37 2025 by rpki-client