Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3334203d3e20323633363033.roa
File: 323830343a6663383a3a2f33322d3334203d3e20323633363033.roa (raw, json)
Hash identifier: GuZoBqryxpJqEbxaYHkQu4+GCs6Eaf7BGlCa9S8vh8I=
Subject key identifier: 70:D2:91:B7:0D:84:36:30:E5:F0:31:30:35:39:58:54:02:E1:3F:F4
Certificate issuer: /CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Certificate serial: 15B73B00A3B1889BCA18967B24A6F9F4BAF00FB9
Authority key identifier: 39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3334203d3e20323633363033.roa
Signing time: Fri 17 Jan 2025 14:07:00 +0000
ROA not before: Fri 17 Jan 2025 14:02:00 +0000
ROA not after: Fri 16 Jan 2026 14:07:00 +0000
asID: 263603
IP address blocks: 2804:fc8::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:b7:3b:00:a3:b1:88:9b:ca:18:96:7b:24:a6:f9:f4:ba:f0:0f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3925EED4443902E12DF7A9A139E25CB34974D01A
Validity
Not Before: Jan 17 14:02:00 2025 GMT
Not After : Jan 16 14:07:00 2026 GMT
Subject: CN=70D291B70D843630E5F031303539585402E13FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8e:f1:9f:40:4e:ca:41:bb:3c:12:68:14:0d:
40:da:05:b3:e5:05:f2:7a:b2:47:36:0c:a3:22:b4:
cb:23:99:ea:c7:57:98:7e:b7:36:91:a5:b5:38:69:
7c:94:63:a9:f8:24:af:7e:ec:17:07:0f:6c:eb:1e:
94:6c:a8:b4:3d:3c:09:98:f5:8d:82:56:94:4a:3f:
44:2a:85:f0:32:91:b3:70:f3:83:88:48:bb:2a:37:
a4:2f:15:6f:9b:b1:8a:e3:f0:e5:fa:78:40:79:c7:
1c:ae:81:ae:a8:68:ce:78:ba:62:4e:c2:37:96:97:
26:79:71:ab:ea:b7:02:1f:0e:77:a7:dd:15:67:9c:
4e:26:ae:15:dd:a6:98:27:a5:f0:49:d0:24:67:68:
06:af:95:f3:16:eb:0b:82:fe:80:f4:ca:30:4c:68:
f5:11:b4:04:1c:c6:03:6c:e2:08:84:e0:0d:ca:4f:
5a:63:e3:38:4e:b8:cd:ca:a6:ce:4d:35:81:3b:3e:
73:00:d1:e8:56:8f:2b:e8:16:84:62:b6:18:1e:be:
05:fc:f5:4c:a2:53:39:8a:a5:71:cb:43:70:56:43:
d4:e9:19:62:0c:c3:f1:da:58:3b:e6:ce:87:bf:01:
f1:fb:f7:6c:5b:85:89:24:5e:55:1e:63:0b:dd:6f:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:D2:91:B7:0D:84:36:30:E5:F0:31:30:35:39:58:54:02:E1:3F:F4
X509v3 Authority Key Identifier:
keyid:39:25:EE:D4:44:39:02:E1:2D:F7:A9:A1:39:E2:5C:B3:49:74:D0:1A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/3925EED4443902E12DF7A9A139E25CB34974D01A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3925EED4443902E12DF7A9A139E25CB34974D01A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4PinTCP9o5DEDV9WUWYuKHRR6Yo4fT6YqpmCnZv1sWR/0/323830343a6663383a3a2f33322d3334203d3e20323633363033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:fc8::/32
Signature Algorithm: sha256WithRSAEncryption
b3:37:23:a8:86:c5:be:bb:8c:28:c4:44:0a:d3:32:92:b7:e3:
51:5d:fa:6a:7e:36:84:8a:65:0b:24:0b:ec:20:a5:92:1a:eb:
13:93:14:b9:d1:6d:73:cd:46:10:74:b4:b8:38:eb:53:bf:80:
87:c7:67:d3:fa:35:39:39:e0:5a:6a:99:bd:4e:1f:63:3e:c7:
2e:39:f7:c4:f0:d6:ec:6d:ba:47:0a:67:66:95:12:ca:09:93:
70:90:9c:13:8e:73:4b:41:b3:c7:b5:67:ea:26:64:e7:c3:bb:
4f:53:5b:e4:20:94:b4:61:c8:4b:db:63:a4:a3:1f:52:16:06:
bd:8f:18:dc:b1:c4:69:fe:70:3f:f1:15:31:3b:ba:31:c3:b2:
29:40:59:7d:6e:e1:10:f8:74:6a:07:01:46:e6:52:27:98:d3:
6f:67:f1:93:be:3c:25:fd:18:b4:c4:fe:d5:d8:04:ca:19:ac:
31:b8:78:f5:b2:0f:74:53:72:fe:33:91:65:87:3b:72:2f:10:
76:df:08:c5:e8:74:af:f7:5a:15:6a:6f:d0:e7:ce:0c:a5:39:
f0:6d:c2:f5:81:a2:36:e7:ff:7a:91:c6:4e:8d:d7:f9:ae:22:
d3:f0:59:93:e8:94:d3:c8:1a:55:d7:ed:3d:96:96:b4:1a:00:
aa:1e:3d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:52 2025 by rpki-client