Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3333203d3e20323633353037.roa
File: 323830343a313266383a3a2f33322d3333203d3e20323633353037.roa (raw, json)
Hash identifier: vwGgTlrrFyt5firMtrTQfALNMm92bVVZAG13ex2vb5Q=
Subject key identifier: 1C:A2:2A:63:86:13:C8:74:4F:D5:CE:7D:97:78:90:8A:92:10:C9:5F
Certificate issuer: /CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
Certificate serial: 168654D38395B1DCE9613646BDCE0307E183EC77
Authority key identifier: B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3333203d3e20323633353037.roa
Signing time: Mon 10 Mar 2025 19:15:25 +0000
ROA not before: Mon 10 Mar 2025 19:10:25 +0000
ROA not after: Mon 09 Mar 2026 19:15:25 +0000
asID: 263507
IP address blocks: 2804:12f8::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:86:54:d3:83:95:b1:dc:e9:61:36:46:bd:ce:03:07:e1:83:ec:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B8B20C736B5DAA6320C2EE3AB5844784B25934B1
Validity
Not Before: Mar 10 19:10:25 2025 GMT
Not After : Mar 9 19:15:25 2026 GMT
Subject: CN=1CA22A638613C8744FD5CE7D9778908A9210C95F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:09:ae:d5:03:07:04:51:00:fe:7d:5e:0b:
57:ae:29:9a:a3:1b:03:7d:fc:1c:77:c2:36:cd:43:
ce:eb:e0:4c:b6:69:8e:83:7c:49:b5:db:67:8d:dc:
cc:21:dc:b5:e2:cb:dd:f1:9a:54:e5:01:b5:f4:53:
50:28:32:2a:a4:9c:8a:26:64:a7:1e:ae:b7:c0:96:
36:8e:a7:ee:6e:61:a9:43:82:8b:1f:29:4e:4e:e7:
c1:75:d3:91:e9:6f:05:41:7b:f5:e5:c3:10:9f:c2:
87:5b:ac:22:aa:0a:bf:8d:ff:33:e9:2f:da:e3:90:
3b:f6:bc:f2:72:8c:7e:9d:54:86:71:96:4e:26:b5:
e6:29:a9:93:e8:c8:2d:38:c4:31:76:c4:97:08:34:
8d:90:55:7a:4b:04:cf:ac:19:7f:60:ee:21:de:b9:
5e:6d:f2:ea:89:4e:30:05:c6:e3:3c:0d:a8:f0:dd:
29:0f:62:b6:d6:e4:6d:67:ac:2e:e6:af:f3:37:73:
c1:d0:ef:f1:a0:66:76:e3:99:fb:a0:4d:1e:61:f7:
21:bc:58:a5:80:cf:3b:ae:8e:91:61:fe:82:80:2d:
fd:3d:22:66:80:26:69:39:3c:93:16:37:45:14:23:
1d:1a:82:2c:3a:00:1b:ed:76:02:3a:8f:74:37:14:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:2A:63:86:13:C8:74:4F:D5:CE:7D:97:78:90:8A:92:10:C9:5F
X509v3 Authority Key Identifier:
keyid:B8:B2:0C:73:6B:5D:AA:63:20:C2:EE:3A:B5:84:47:84:B2:59:34:B1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8B20C736B5DAA6320C2EE3AB5844784B25934B1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D82k3YbQfFjchn4QGix5CpaxxFgWfPtp1o5nZF9SH8Xp/0/323830343a313266383a3a2f33322d3333203d3e20323633353037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:12f8::/32
Signature Algorithm: sha256WithRSAEncryption
0e:14:15:aa:9c:68:7b:b6:a6:58:ee:86:08:1b:77:ac:95:0e:
85:fd:5c:e1:8e:31:7e:39:61:61:21:fc:68:55:7b:e7:f7:81:
43:5c:23:ea:59:cb:f7:7e:64:85:e5:74:4c:f9:6a:68:59:2c:
63:40:73:d8:2a:80:eb:24:2e:21:29:dc:34:83:46:2d:fe:fd:
09:37:18:f7:54:b1:00:24:70:63:dc:4b:68:1c:12:af:33:9b:
e0:fb:ac:17:ba:57:ee:f1:0e:7f:e5:f9:fd:25:1f:a9:19:58:
1b:d0:7f:c2:b0:a4:76:0f:24:ad:ed:11:86:34:57:e8:9e:89:
a0:4a:c2:f3:a3:43:97:9f:5e:72:b9:4e:36:08:f0:73:5d:6a:
8f:b4:0f:86:9c:ef:29:6c:89:f8:da:dd:fe:91:33:f6:c7:f4:
d2:68:42:57:78:82:d2:2d:cd:c7:de:80:b8:bd:54:a8:1f:c1:
f8:92:d9:3c:af:f5:4e:e1:5e:b6:98:c6:99:58:ac:bc:4d:38:
a6:d2:40:81:37:82:b7:07:7f:98:07:f7:5c:33:c0:1b:0e:be:
3a:56:27:45:97:01:e2:c7:c4:72:23:39:29:1c:5b:6b:71:7d:
5a:b4:1d:88:b6:53:10:98:ae:f0:c3:2e:71:eb:76:6a:2c:cf:
4b:d1:98:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 04:59:36 2025 by rpki-client