Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
File: 323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa (raw, json)
Hash identifier: DDjkQD/1vGMgsC1kJuMnf1lnnWlDqTG95r5yIYufT7Q=
Subject key identifier: 3F:58:D4:05:7D:28:EE:12:59:C3:A2:6A:7D:2E:8F:5D:47:FE:76:3F
Certificate issuer: /CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Certificate serial: 7381959ED63C8F414691343A40CD90A4E604425A
Authority key identifier: CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
Signing time: Mon 24 Mar 2025 20:45:13 +0000
ROA not before: Mon 24 Mar 2025 20:40:13 +0000
ROA not after: Mon 23 Mar 2026 20:45:13 +0000
asID: 267991
IP address blocks: 2804:5654:b000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:81:95:9e:d6:3c:8f:41:46:91:34:3a:40:cd:90:a4:e6:04:42:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA
Validity
Not Before: Mar 24 20:40:13 2025 GMT
Not After : Mar 23 20:45:13 2026 GMT
Subject: CN=3F58D4057D28EE1259C3A26A7D2E8F5D47FE763F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:85:e5:e4:c6:e3:af:83:34:82:58:7a:6f:05:
32:4f:f7:e7:c7:99:30:a3:e4:c3:83:f2:8a:e8:84:
f0:6e:9b:47:72:8d:c9:fc:08:37:37:be:2f:d2:8e:
cc:63:18:f1:a8:f7:1d:78:e6:89:49:37:f2:0b:bc:
45:ca:a7:30:a5:7c:06:c4:37:41:21:61:b0:24:4f:
7a:68:b0:24:91:3c:a4:2f:d7:01:16:2a:81:9f:43:
d0:e8:da:1d:fe:bc:d0:5b:75:a7:ff:db:d5:67:55:
76:35:86:0f:ad:00:bb:49:c3:f3:9f:9c:1e:fd:14:
27:d7:22:96:6e:b8:20:0d:db:22:7f:93:07:32:d5:
a2:9a:2c:ff:ff:1e:7d:d6:d6:69:04:69:3d:39:f3:
7e:17:b1:d8:f7:53:c3:54:90:f3:3d:ef:43:00:41:
e6:98:66:80:ac:7a:2e:fe:ef:b1:88:67:91:61:d1:
7c:76:44:ff:30:0e:d8:79:f4:29:67:c4:6e:73:35:
42:c9:c7:b2:d9:11:a7:f9:f2:95:fc:5a:ec:4b:b5:
f6:68:4d:41:a9:4a:4a:14:13:53:65:9d:f8:ae:a2:
4f:2f:cd:53:73:75:ef:95:12:5b:03:d4:70:17:8c:
d1:71:32:f3:49:44:3d:2a:b5:6d:b9:11:ee:d4:3a:
78:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:58:D4:05:7D:28:EE:12:59:C3:A2:6A:7D:2E:8F:5D:47:FE:76:3F
X509v3 Authority Key Identifier:
keyid:CF:24:DC:2A:16:F6:FD:D5:A1:F0:B7:B3:8B:F7:C7:70:7A:E3:BA:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CF24DC2A16F6FDD5A1F0B7B38BF7C7707AE3BAAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/D8TUSc2LTpHgLtaBao19YTQR7KE3fkH4aDYTC2i11y2N/0/323830343a353635343a623030303a3a2f33362d3336203d3e20323637393931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5654:b000::/36
Signature Algorithm: sha256WithRSAEncryption
23:90:e3:2e:02:8e:d9:29:d6:0b:da:f2:00:7a:f1:db:1c:6e:
af:dc:c6:5d:c8:29:e1:ce:a2:23:ab:1e:14:de:da:df:a8:67:
39:df:fd:21:36:b7:49:f1:28:d4:8d:0e:d5:7c:fc:78:2f:d8:
4f:f9:2d:3d:8a:02:7d:90:ef:60:62:88:01:3f:31:f9:ba:d4:
2e:c0:41:44:06:09:71:55:63:ef:bc:d4:2e:e6:5b:52:a4:af:
28:f6:7b:02:d4:7d:2e:a0:55:da:14:18:10:a3:ab:26:af:1f:
9c:e7:d6:97:1b:88:92:5a:5d:05:68:e8:27:3d:61:ea:1b:5a:
3c:de:fe:a7:6a:8c:c8:87:85:19:0a:8e:29:a7:1e:ec:79:a7:
b9:64:cf:48:36:bb:0d:6d:2e:91:dd:73:ca:f3:ed:2d:e4:24:
80:9c:88:57:3e:fb:8b:78:66:b9:11:a1:3d:2b:97:e4:b3:7f:
1c:7e:72:7a:b2:48:27:31:e7:53:66:e3:4f:ab:aa:51:f0:e9:
8e:a1:28:cf:77:ad:21:eb:6c:87:fe:13:7e:bf:49:ba:28:f5:
02:31:d3:4a:75:48:3e:af:92:e5:9c:4a:ed:35:2a:96:b6:d2:
6a:d4:eb:f0:31:7c:06:a7:6c:38:bd:47:b2:95:2d:55:6c:77:
84:49:7e:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:55:46 2025 by rpki-client