Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: VgPtln4shFpNR3djNc75/PdBoMVUPBLNc2TG0VeVMGE=
Subject key identifier: C7:19:4A:35:01:A9:76:79:CA:D8:2C:E2:D1:4B:4B:03:58:EC:A8:7D
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 265058EDDCE3A0F184A8A0AD1FEFB2CAE867938A
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:09 +0000
ROA not before: Mon 24 Mar 2025 20:40:09 +0000
ROA not after: Mon 23 Mar 2026 20:45:09 +0000
asID: 267991
IP address blocks: 2804:5654:9000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:50:58:ed:dc:e3:a0:f1:84:a8:a0:ad:1f:ef:b2:ca:e8:67:93:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:09 2025 GMT
Not After : Mar 23 20:45:09 2026 GMT
Subject: CN=C7194A3501A97679CAD82CE2D14B4B0358ECA87D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:bc:08:54:f8:5d:0c:a5:07:fc:17:fb:ea:
e9:33:d9:10:d1:10:9c:d1:fe:57:49:ed:23:8a:5b:
c6:29:58:af:e8:81:ac:3b:2d:cc:5f:81:c0:5b:fb:
2b:77:40:86:0d:d2:3c:6f:67:87:74:58:98:18:09:
3f:8c:d6:2e:87:df:34:6b:34:a2:77:97:6a:64:78:
91:20:13:43:f4:52:80:04:86:d2:f5:05:69:de:30:
27:50:57:8e:71:b4:42:c4:30:18:bf:f4:35:25:32:
7d:bb:37:cd:27:75:b9:63:7f:bb:1d:f0:e7:5c:f1:
9d:9c:e3:82:b1:82:b7:bb:cb:f9:12:c4:d0:99:99:
82:6e:24:06:75:8b:42:b2:ac:13:5b:c6:8a:56:ef:
9f:35:28:33:c0:4d:5d:e8:bd:16:8b:5b:81:87:2d:
de:da:b2:9d:81:35:3a:08:28:28:1c:65:e5:08:af:
c4:dd:05:d8:52:38:65:30:ba:3a:ab:7f:b1:08:6c:
41:c6:dd:cd:87:fb:66:eb:3e:35:f4:73:f2:f0:1c:
27:bd:63:94:86:d8:94:e7:c2:4c:8b:b4:88:74:5d:
2f:89:eb:55:13:31:c6:68:45:ac:ae:8f:61:ad:4a:
5f:8b:01:8f:88:9f:45:8b:95:80:af:7e:58:7d:fc:
66:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:4A:35:01:A9:76:79:CA:D8:2C:E2:D1:4B:4B:03:58:EC:A8:7D
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a393030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:9000::/36
Signature Algorithm: sha256WithRSAEncryption
44:3e:65:c2:48:a5:dc:89:4c:20:e6:b1:99:be:64:d7:6a:31:
aa:95:20:81:23:32:4f:75:83:eb:c4:82:c1:98:e2:cf:38:50:
32:4f:eb:fd:30:bf:b3:38:39:70:4e:a3:18:1f:37:54:65:2f:
bb:b4:ef:c7:1b:11:42:e4:79:a9:04:39:81:48:09:b9:12:1a:
d7:f9:0e:12:03:7a:b5:49:d8:e8:32:fd:27:87:fd:0b:54:89:
91:b3:88:9f:7e:df:c9:dc:04:94:6d:8c:c2:89:79:a2:04:2e:
a8:25:71:47:73:e6:69:d4:0b:d7:18:ee:f8:2b:26:04:b9:b4:
d9:df:75:67:22:67:62:d8:fb:9f:ec:11:85:b4:f4:13:17:38:
77:b6:d6:c3:00:d6:0a:dc:ec:05:4e:96:90:fd:21:0a:0c:e4:
49:31:af:38:72:14:1c:df:04:0e:67:96:63:46:e0:48:5d:5c:
ee:61:c6:48:22:6e:c9:2f:f4:30:f8:23:0b:64:b8:53:d7:d8:
cc:ea:59:12:99:96:e7:95:a6:c1:1a:9a:37:ec:d7:a6:fa:7a:
0d:be:91:8c:1f:5f:1c:93:8f:32:ef:b2:b2:e6:0c:ed:26:8d:
23:ed:f7:63:f5:50:4a:71:e6:79:18:67:ff:fc:c8:a9:43:ac:
8d:15:cf:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:47 2025 by rpki-client