Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3332203d3e20323633363033.roa
File: 323830343a6663383a3a2f33322d3332203d3e20323633363033.roa (raw, json)
Hash identifier: rLlEOMsR2T2zMbNFl6qda1tkbQGU4VvJ7fM0YMXX3Sk=
Subject key identifier: 0B:5E:05:8B:51:A4:35:D8:C6:BD:5C:87:7E:DB:A5:A4:1D:A4:02:90
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 5776B22BA6C92D0B6F0D930E7C5EF7FB3B47F2F8
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3332203d3e20323633363033.roa
Signing time: Thu 20 Feb 2025 17:53:27 +0000
ROA not before: Thu 20 Feb 2025 17:48:27 +0000
ROA not after: Thu 19 Feb 2026 17:53:27 +0000
asID: 263603
IP address blocks: 2804:fc8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:76:b2:2b:a6:c9:2d:0b:6f:0d:93:0e:7c:5e:f7:fb:3b:47:f2:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Feb 20 17:48:27 2025 GMT
Not After : Feb 19 17:53:27 2026 GMT
Subject: CN=0B5E058B51A435D8C6BD5C877EDBA5A41DA40290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:cf:7e:c9:58:80:6d:c0:2a:fa:a8:e2:c6:bb:
8a:00:cd:19:73:e2:80:fe:97:74:c4:2b:55:b4:28:
9a:a1:78:65:f7:3e:6f:b1:89:dc:3a:08:2b:29:05:
c6:c6:0a:48:1d:91:7d:4d:ec:8f:6d:3d:71:be:ef:
53:83:ae:07:23:03:b7:76:aa:97:85:4c:4e:32:4b:
e3:08:1b:ef:3f:4c:02:a8:4c:6d:5d:ec:e4:81:af:
9f:c0:f3:ae:20:4c:40:0b:51:e3:f9:bf:6d:18:ad:
df:6d:38:44:69:05:27:84:35:13:71:99:04:d9:3d:
be:48:ab:0a:3e:d4:e5:ce:22:97:24:78:9c:a6:dc:
e5:3f:13:92:23:49:b1:83:cb:88:c6:f5:91:5f:5c:
98:8b:07:ad:f1:92:65:60:81:0a:63:81:cb:cf:2d:
56:45:38:e0:38:b9:fc:29:ea:62:80:48:f8:7f:1a:
ed:32:74:a8:a4:2f:67:5e:28:af:2a:ad:ce:68:9b:
8f:db:8b:07:8c:81:4b:1b:20:94:ae:4e:aa:d5:15:
1d:1c:43:fa:ff:31:4e:d9:dc:4f:5b:10:a2:1c:f8:
b0:13:79:a8:38:6d:25:8b:9c:40:08:20:e2:e6:7b:
be:7c:60:e8:23:4c:47:2b:a5:13:fd:af:3a:7a:fb:
f8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5E:05:8B:51:A4:35:D8:C6:BD:5C:87:7E:DB:A5:A4:1D:A4:02:90
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3332203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:fc8::/32
Signature Algorithm: sha256WithRSAEncryption
79:d4:16:38:2a:12:44:ac:ca:2f:70:4c:d5:52:7c:cb:7a:f6:
dd:de:a3:ce:eb:93:0f:33:19:a6:e8:1b:0b:61:09:02:19:a2:
64:39:43:ef:a2:87:08:f5:92:3c:3e:15:7d:a7:8c:6d:2f:78:
34:25:cf:d6:2f:0e:91:cd:fe:a1:05:21:9e:31:8f:da:56:f1:
68:de:d3:cf:1c:64:c5:f6:4d:89:cc:98:99:d1:85:16:78:f0:
67:9d:19:c0:02:25:e9:9f:da:bc:6c:2a:a8:56:02:48:ce:55:
51:04:10:ea:47:a0:ac:90:bb:e9:05:8e:05:59:75:1d:8a:aa:
79:05:b8:2e:a5:9c:ed:60:d3:91:7c:d1:0a:9d:94:ab:82:08:
76:ef:86:7a:56:ad:57:f0:7e:4b:17:3a:95:7f:c6:81:70:0b:
da:cd:25:fd:31:77:29:26:bd:94:4b:97:20:ae:ab:24:76:b3:
26:ef:a2:ae:7d:1b:45:db:04:34:5d:07:a1:f4:d3:f6:a5:9e:
44:18:c9:d3:cd:76:b1:49:4c:41:ae:e7:72:b7:5c:11:c1:d9:
de:33:4a:75:ba:f8:8b:34:b9:cd:e2:c5:c3:6d:5c:66:50:8a:
9e:91:11:ce:2b:9e:39:89:0b:b2:25:ed:e2:92:e9:71:58:3e:
3a:2f:8d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 01:00:20 2025 by rpki-client