Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
File: 323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier: KkIvxjTy/GQLr4AZMZ6rN3vUe6EpZ3GklHORLAhLmoU=
Subject key identifier: BC:68:92:44:76:32:9C:EE:50:38:94:ED:F4:DD:8A:CA:F9:98:D1:05
Certificate issuer: /CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Certificate serial: 452C781E14DCE23AC91D6CA55213BCE6B19501F1
Authority key identifier: 1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
Signing time: Fri 28 Feb 2025 14:55:06 +0000
ROA not before: Fri 28 Feb 2025 14:50:06 +0000
ROA not after: Fri 27 Feb 2026 14:55:06 +0000
asID: 265919
IP address blocks: 2804:3fd8:196::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:2c:78:1e:14:dc:e2:3a:c9:1d:6c:a5:52:13:bc:e6:b1:95:01:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1D4739886A145524D2F84E7F6704B0D6AFFC2AE9
Validity
Not Before: Feb 28 14:50:06 2025 GMT
Not After : Feb 27 14:55:06 2026 GMT
Subject: CN=BC68924476329CEE503894EDF4DD8ACAF998D105
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d8:ac:39:09:37:0d:6c:28:1e:73:d8:87:42:
b8:14:cb:4a:99:97:11:dc:e2:c7:e8:0e:02:a3:9f:
52:92:fc:81:06:d8:98:93:e0:6c:1b:a3:0e:18:23:
cb:91:36:7d:c6:ff:33:7f:67:ba:25:27:bc:2b:57:
99:4c:b4:af:62:9f:16:fb:59:16:60:a2:a0:82:0a:
2d:7e:c0:27:f6:2d:b2:0a:a9:e9:25:ba:16:19:a3:
eb:77:d2:71:56:65:92:32:f2:87:e8:dc:f2:40:93:
85:4e:f6:89:1b:68:30:09:18:2c:a7:3e:f7:ef:07:
89:a2:fc:20:3c:4a:3a:ea:2d:cf:a2:21:6e:45:27:
8a:34:07:e5:6d:46:fe:63:3a:c8:a4:67:b1:d8:72:
d2:72:21:25:a0:11:16:65:70:78:f4:fe:dc:df:f6:
b8:53:72:53:4b:6a:e4:39:ba:57:f1:81:61:69:bd:
91:b7:eb:0e:41:61:45:cf:21:ae:e9:0b:d7:27:e7:
d9:bc:ec:35:f8:73:d9:be:66:01:e9:76:fd:de:f2:
39:cd:53:e0:d7:ec:0a:0f:80:17:1f:86:e0:0b:3e:
1f:03:97:ca:58:ec:34:e6:29:f3:d6:ad:76:29:79:
5e:6a:26:de:b8:72:1f:a9:84:4d:76:3e:6f:e5:f5:
08:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:68:92:44:76:32:9C:EE:50:38:94:ED:F4:DD:8A:CA:F9:98:D1:05
X509v3 Authority Key Identifier:
keyid:1D:47:39:88:6A:14:55:24:D2:F8:4E:7F:67:04:B0:D6:AF:FC:2A:E9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D4739886A145524D2F84E7F6704B0D6AFFC2AE9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3fd8:196::/48
Signature Algorithm: sha256WithRSAEncryption
d1:ff:59:b0:46:63:89:cd:87:48:8b:75:9b:d3:26:76:70:98:
3b:ad:c2:31:16:89:0d:f3:7d:1b:81:4a:d2:18:48:4c:1a:23:
c1:19:02:17:73:b5:ca:df:5c:f8:dc:47:56:98:52:d0:f8:0e:
cd:65:15:b1:62:77:72:b2:ce:1f:b9:e0:dc:64:6f:08:52:32:
12:84:a2:08:40:37:20:7b:44:99:ed:41:e2:6f:17:9f:ea:3a:
5d:eb:05:3b:d3:70:0c:0a:ff:95:3c:0a:c6:91:8f:ce:4c:42:
c2:b5:b5:21:14:4f:6f:82:bc:f7:bc:9d:38:7c:8e:02:70:be:
33:6c:24:82:43:3a:80:d7:6d:f8:f5:05:6e:7f:22:4a:46:f5:
08:59:9b:be:ca:6c:a2:eb:f5:30:b9:8a:a3:47:d5:b8:b5:3d:
e6:da:78:68:43:2b:fc:70:40:e1:d6:bd:78:cc:6a:4a:19:fd:
b9:6b:d3:e9:1d:21:85:0d:9a:5c:d4:44:a1:4a:e5:33:b9:74:
46:84:5a:90:da:33:88:6f:91:9f:08:62:df:f7:19:94:0f:25:
ae:8a:8b:af:ca:75:f8:10:ac:8e:0d:35:36:66:cc:64:68:98:
ee:1b:34:bb:6f:46:25:cf:95:dd:cf:bb:5c:a1:4a:cb:fa:4e:
15:aa:fc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:49:56 2025 by rpki-client