Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa
File: 323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier: xnvO9lM9zTbqNZEw9Z+RC5mux/9xr75iNvMYylJJTp0=
Subject key identifier: 1A:A1:60:92:78:46:37:C5:D0:C2:0D:FE:71:E1:F2:04:CA:F9:6A:55
Certificate issuer: /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial: 08D85BAE69BF2C3BE355A23D6E45659A3226BD1B
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa
Signing time: Thu 06 Mar 2025 11:17:53 +0000
ROA not before: Thu 06 Mar 2025 11:12:53 +0000
ROA not after: Thu 05 Mar 2026 11:17:53 +0000
asID: 264001
IP address blocks: 2804:2948:4000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:d8:5b:ae:69:bf:2c:3b:e3:55:a2:3d:6e:45:65:9a:32:26:bd:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Validity
Not Before: Mar 6 11:12:53 2025 GMT
Not After : Mar 5 11:17:53 2026 GMT
Subject: CN=1AA16092784637C5D0C20DFE71E1F204CAF96A55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fb:87:f9:0e:6d:83:0e:66:88:59:8f:2d:10:
69:77:2e:9d:94:c2:b1:4a:53:94:51:a2:d8:fc:be:
cc:10:da:0b:9b:bf:58:62:8e:05:29:59:15:51:23:
4e:ef:d5:1b:e2:3f:e8:bc:19:c1:fa:a7:de:c8:db:
02:b7:c1:9c:ef:07:ef:ad:e3:95:fe:b8:8f:e6:35:
54:4e:71:d7:4b:38:9f:6d:92:57:5d:76:7c:39:8e:
a7:54:dc:b3:8a:8c:95:10:04:39:f7:98:1e:af:92:
59:f0:44:75:7c:4f:7e:ec:b9:87:5e:68:b8:ae:fd:
c5:e4:ba:8b:06:40:fe:59:9e:ad:46:55:b2:15:5f:
02:36:2b:53:f7:f4:3f:ba:1a:79:7c:b2:78:01:ee:
91:be:38:df:c9:aa:cd:d6:c5:2f:24:4a:82:74:8e:
40:f1:9a:4e:c2:54:2e:9f:b7:21:ab:c5:d6:5e:c3:
16:96:33:dd:26:fe:b7:71:79:6c:3e:4a:c6:20:ce:
a5:97:4b:23:9e:61:53:e2:d3:82:cd:bc:12:04:1e:
b4:be:bd:82:62:1c:37:3b:6d:d4:60:f8:16:3c:24:
7d:70:86:64:94:c6:a1:6e:08:0e:00:bd:d5:73:9a:
c1:5c:4d:c9:4e:73:40:72:7f:a5:d0:36:c4:e8:ef:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A1:60:92:78:46:37:C5:D0:C2:0D:FE:71:E1:F2:04:CA:F9:6A:55
X509v3 Authority Key Identifier:
keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a343030303a3a2f33362d3336203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2948:4000::/36
Signature Algorithm: sha256WithRSAEncryption
8a:01:b3:24:b3:0b:9c:a6:4b:a3:c2:27:c3:7c:aa:3f:d0:ed:
3a:23:b8:37:a8:71:d3:b3:11:06:d2:55:a5:48:fa:c6:5c:2a:
dc:c9:8c:f2:56:1c:9d:38:be:7a:9e:18:b3:36:90:cb:f6:e6:
fe:38:48:16:a2:a1:e4:c7:da:06:81:be:a4:25:35:eb:c5:b1:
5b:1d:ad:8b:1d:c0:29:11:5f:e3:b2:36:2f:71:50:57:bb:d1:
f6:7c:4e:6f:78:91:4d:de:59:28:06:11:26:92:7f:de:52:c3:
63:76:d3:bd:a2:18:77:0b:5a:d8:e4:71:a8:70:98:3d:48:04:
6b:c3:85:83:d2:3c:f8:b6:72:6c:3f:06:52:ec:29:17:c9:cc:
32:58:41:1f:e9:fc:05:d0:d8:2f:50:e5:f2:04:1b:65:1f:70:
73:43:02:b7:5b:87:08:ed:c5:9c:f1:95:b9:4c:86:d8:6f:4f:
15:f6:af:90:99:22:a9:37:3d:54:c5:cd:a3:83:46:bb:95:45:
1b:bf:51:26:3a:d5:4f:f0:c3:41:52:c2:4f:46:3c:89:2d:0b:
fb:59:1f:2c:54:a5:cb:6b:56:22:02:f0:32:bb:ec:0f:2a:cb:
35:60:f9:62:c1:9b:6d:a1:38:77:83:4f:14:34:98:6f:92:42:
c6:d8:c6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:04 2025 by rpki-client