Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: D3vV2jenfHT3EBHg1YDY+UuRhd8JOLN3SfvWEQtGzso=
Subject key identifier: F7:38:23:8D:76:C0:7E:F4:5A:97:4B:C3:9F:4B:BC:52:86:C1:2F:79
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 7899DCE6615841B3919D1958191501B69DC851CF
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:02 +0000
ROA not before: Mon 24 Mar 2025 20:40:02 +0000
ROA not after: Mon 23 Mar 2026 20:45:02 +0000
asID: 267991
IP address blocks: 2804:5654:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:99:dc:e6:61:58:41:b3:91:9d:19:58:19:15:01:b6:9d:c8:51:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:02 2025 GMT
Not After : Mar 23 20:45:02 2026 GMT
Subject: CN=F738238D76C07EF45A974BC39F4BBC5286C12F79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:52:d3:db:e4:51:cd:14:e6:1d:7e:32:ee:
fb:a3:11:29:e4:f1:50:68:ce:8d:c9:a4:f7:1c:6d:
79:ac:79:b8:42:aa:1b:66:fd:ac:b1:7f:42:11:22:
1b:a8:bd:d1:65:17:f6:8f:f8:f4:b3:92:27:71:8a:
f2:8b:92:e3:36:06:7b:e3:d5:1a:d0:3a:cd:55:e6:
44:9f:77:89:60:a6:ba:52:f1:a3:42:eb:17:03:54:
63:62:7a:b0:ec:48:f3:89:30:05:3a:f9:6f:21:b6:
41:4e:4e:41:04:9a:02:96:75:be:88:0e:57:eb:d5:
b5:7e:af:ad:7b:8b:cc:52:d5:55:ed:95:71:79:ec:
f9:af:fa:73:8d:d2:81:9e:b3:98:37:f4:4e:ec:c8:
19:68:0a:cf:34:25:31:5e:72:ae:30:ae:c0:bc:e9:
73:21:60:ab:ef:29:69:17:e8:48:ff:a8:dc:8f:55:
79:3b:e7:41:ac:2d:b7:bb:2e:ba:13:a6:c7:f1:95:
75:17:87:b7:d0:e7:d3:31:56:61:0f:70:90:83:3b:
2c:2f:72:27:b3:ad:c4:a7:e6:ea:f4:22:8b:c8:9c:
43:d9:cb:46:c5:a5:27:cb:91:cd:6e:26:19:4e:cd:
1c:da:81:c3:78:b5:4f:90:6a:ff:91:32:ec:02:fe:
24:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:38:23:8D:76:C0:7E:F4:5A:97:4B:C3:9F:4B:BC:52:86:C1:2F:79
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a343030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:4000::/36
Signature Algorithm: sha256WithRSAEncryption
7b:83:39:f7:c8:72:f9:14:4d:a4:1f:7c:de:c0:7f:9e:3e:a0:
83:f3:75:06:b6:87:b1:ed:2a:89:a3:1b:a9:da:95:f4:a8:0e:
e2:a0:75:d1:22:a8:85:8a:00:ae:c0:f2:a2:e6:77:99:be:aa:
de:1d:2f:e7:5a:a1:00:86:0c:ce:7c:c0:7a:b9:40:82:4b:b1:
ad:97:ce:d7:ec:af:30:6f:f1:9d:1f:83:19:49:ee:4c:8a:ee:
03:a2:bb:d2:9e:55:4f:43:d1:3a:02:cd:f6:5e:50:60:47:58:
f0:34:06:00:4d:38:91:93:a5:08:ca:d1:88:73:20:e4:eb:24:
be:da:d2:d2:59:50:2c:cf:94:b7:03:95:b4:da:e8:86:cf:62:
12:ac:fd:35:06:91:1e:c8:50:8e:ad:b6:c3:46:d6:76:f7:a3:
03:74:ad:2b:70:a9:06:11:60:f1:8d:fe:0e:a5:a3:22:ed:fb:
11:a3:82:0b:54:cd:88:61:4a:31:24:bd:18:6c:e6:5e:1c:47:
f1:65:7e:65:0c:df:e2:d6:9d:57:e8:b6:f2:a2:83:e5:66:38:
91:25:00:8f:13:1e:8a:de:c1:03:51:ea:c9:a1:8e:49:05:9d:
d7:60:84:4a:84:c9:66:c4:72:a8:23:b0:7d:33:31:e9:ba:c7:
01:42:7e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:48 2025 by rpki-client