Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa
File: 323830343a363763383a3a2f33322d3438203d3e20323639363530.roa (raw, json)
Hash identifier: uWe0YYPD2q9GFLIelzfAMf8yM5vAGF/0HnyGSpNcYQQ=
Subject key identifier: 57:F9:0E:1C:DC:5F:3A:8D:D9:34:D3:25:54:4E:C4:A1:49:81:05:DD
Certificate issuer: /CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
Certificate serial: 2101FE8DAC7101AB49928659F2EE6211E8EBBA42
Authority key identifier: 97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa
Signing time: Fri 07 Mar 2025 00:52:24 +0000
ROA not before: Fri 07 Mar 2025 00:47:24 +0000
ROA not after: Fri 06 Mar 2026 00:52:24 +0000
asID: 269650
IP address blocks: 2804:67c8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:01:fe:8d:ac:71:01:ab:49:92:86:59:f2:ee:62:11:e8:eb:ba:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97424470C7D54F881BCE937CD5129F6A6F1340E1
Validity
Not Before: Mar 7 00:47:24 2025 GMT
Not After : Mar 6 00:52:24 2026 GMT
Subject: CN=57F90E1CDC5F3A8DD934D325544EC4A1498105DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b6:00:65:16:36:6c:bc:ba:a4:9a:3b:6e:3c:
1b:06:25:17:c6:00:74:be:1f:82:db:91:66:5b:e1:
4a:a5:07:37:01:5d:67:db:d0:03:bf:b1:2c:d7:7f:
1b:6b:ed:9a:02:6b:46:ab:91:23:ea:4d:b9:92:31:
7d:56:8c:da:f8:78:b1:b0:ae:c1:ee:2b:15:5d:a7:
b1:73:a5:52:94:2d:5a:36:aa:05:63:60:b7:e8:08:
7f:a0:0c:79:89:fd:fa:d9:69:3e:6a:f3:2c:78:58:
fd:70:08:d8:19:2c:f6:bb:ac:74:b0:31:81:08:bc:
05:2b:65:ec:d5:9f:db:7d:b0:fc:b2:cc:1b:6e:03:
45:f9:91:8f:ad:ee:80:d0:40:97:ab:f1:75:40:e7:
71:4d:f3:f3:8a:2c:17:fe:49:a2:96:99:86:7f:75:
59:08:fb:89:c2:78:00:b1:00:85:32:4b:66:61:49:
ec:51:57:44:4e:8b:50:d6:93:c0:e1:1f:66:2d:6b:
2d:ee:c4:2b:c6:1b:6a:5e:61:12:2d:06:96:32:34:
11:34:7d:c8:49:33:c8:8b:8c:da:a7:7e:44:2b:06:
68:b1:c9:a8:26:b2:0c:52:f6:e8:2e:3f:cd:04:a4:
af:1a:d0:55:6e:28:11:16:e6:07:a2:16:e3:37:ed:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:F9:0E:1C:DC:5F:3A:8D:D9:34:D3:25:54:4E:C4:A1:49:81:05:DD
X509v3 Authority Key Identifier:
keyid:97:42:44:70:C7:D5:4F:88:1B:CE:93:7C:D5:12:9F:6A:6F:13:40:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/97424470C7D54F881BCE937CD5129F6A6F1340E1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/1/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:67c8::/32
Signature Algorithm: sha256WithRSAEncryption
bb:f7:fb:26:88:25:3e:af:7a:ae:ed:37:bc:9b:fd:93:39:b3:
fe:f5:72:60:c8:fd:78:3d:61:11:f7:d6:ee:fb:d4:4c:40:23:
0c:90:7a:90:f3:08:1e:a4:27:90:e7:5b:98:b0:a2:c1:17:a0:
03:03:9a:b5:9a:c6:a8:eb:74:63:97:25:61:f8:52:0d:de:85:
57:93:5f:02:e4:0b:2a:59:b8:54:18:72:78:4a:9d:76:87:4e:
41:6a:79:c9:ba:e5:80:c7:26:27:ed:4a:1d:dd:06:e8:60:aa:
3d:68:44:a8:9a:17:98:d0:13:30:8c:7f:f4:15:ad:56:f4:5e:
0d:1c:d5:22:4d:5d:b1:85:20:31:71:7f:11:05:1f:2c:90:c2:
a1:b2:db:97:42:fa:16:c7:8e:0a:9b:e0:6e:0e:c5:55:dc:5e:
03:87:da:3e:a6:d5:ab:fb:3c:bc:82:4f:32:1a:27:61:7d:2e:
f1:e3:aa:d9:d4:3c:e6:ba:e5:55:3e:e2:64:13:8b:c3:ef:8d:
45:d3:23:1c:3b:9e:6a:ab:1d:2b:c8:d3:62:b0:e6:65:bc:10:
62:c7:eb:fb:16:ad:07:d2:1e:f8:84:03:44:00:cd:7b:2c:a8:
d5:4f:3f:bc:11:da:d9:4f:8d:d7:78:fe:d1:95:77:a8:a8:7e:
0c:13:db:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:47:32 2025 by rpki-client