Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa
File: 323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa (raw, json)
Hash identifier: BlVOX60wTvyRg1oddojp9KupMKAQZeYFpo9IVBgxD90=
Subject key identifier: 20:E4:6C:66:AA:18:09:F7:36:E9:2A:52:71:CB:CB:EA:A5:89:6E:F4
Certificate issuer: /CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Certificate serial: 2FB6D6461E769B9BD1F8648A8CE144818BB35D94
Authority key identifier: E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa
Signing time: Thu 06 Mar 2025 11:17:53 +0000
ROA not before: Thu 06 Mar 2025 11:12:53 +0000
ROA not after: Thu 05 Mar 2026 11:17:53 +0000
asID: 264001
IP address blocks: 2804:2948:a000::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:b6:d6:46:1e:76:9b:9b:d1:f8:64:8a:8c:e1:44:81:8b:b3:5d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E4E679E110DA011F952FB409E81E8EC81BAE43EF
Validity
Not Before: Mar 6 11:12:53 2025 GMT
Not After : Mar 5 11:17:53 2026 GMT
Subject: CN=20E46C66AA1809F736E92A5271CBCBEAA5896EF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:38:a0:98:80:3b:a4:2b:4d:02:14:a4:f8:
3c:d0:b2:ae:6e:29:13:b8:fd:b9:93:bc:b9:50:4e:
77:a0:fc:76:d5:7b:31:5f:64:33:55:93:b4:e4:f9:
c5:b0:62:0d:67:67:a6:a6:63:54:cb:d2:ca:b5:48:
7e:f6:44:b0:e2:a0:1c:87:37:3e:f0:5b:14:8c:fb:
01:d7:39:bf:72:ba:4c:ba:34:38:4c:00:e6:56:85:
d0:fe:56:46:3b:15:d3:8a:5e:ea:e3:58:fd:60:75:
45:9c:2f:19:3d:1c:58:d4:78:32:73:61:2a:35:8f:
12:9d:d1:fa:9e:04:f2:7c:48:b3:68:30:e9:6f:b4:
1e:03:78:2a:ac:46:26:e1:92:91:ad:11:46:ab:26:
14:4c:c4:2c:b4:94:cc:a5:9f:e5:e8:80:85:42:19:
66:be:4a:bc:5e:a1:37:92:83:1a:cb:9c:0f:d9:24:
31:9d:af:b4:67:88:0e:d3:de:b5:be:67:e8:c5:83:
70:77:84:7d:aa:96:f1:e5:2e:9f:ea:81:ce:e1:cc:
65:0c:ed:10:09:19:34:cb:41:51:06:6b:d6:a4:d2:
e6:36:8e:7b:f2:68:ad:85:67:2f:d4:0e:1e:4c:3d:
ab:7b:21:50:4f:5c:43:76:56:2a:9a:07:7c:ef:f9:
f4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E4:6C:66:AA:18:09:F7:36:E9:2A:52:71:CB:CB:EA:A5:89:6E:F4
X509v3 Authority Key Identifier:
keyid:E4:E6:79:E1:10:DA:01:1F:95:2F:B4:09:E8:1E:8E:C8:1B:AE:43:EF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4E679E110DA011F952FB409E81E8EC81BAE43EF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DG9qDAdvPnBq2rMxT84ENPnuYNQG6yD9rKSXx3k6iB8j/1/323830343a323934383a613030303a3a2f33362d3336203d3e20323634303031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2948:a000::/36
Signature Algorithm: sha256WithRSAEncryption
5f:8c:a8:68:56:3b:8b:d0:8a:29:b1:0b:b4:ed:07:fc:da:b9:
8b:01:33:d3:d8:17:59:63:f7:d9:58:2c:0e:89:b2:37:29:ca:
7c:25:26:b4:ca:ea:c4:ea:8e:2f:8d:85:24:23:ca:9b:16:36:
7b:6c:6a:c7:a0:5b:c2:a5:ef:cc:0a:b3:b6:81:1b:e2:54:ef:
b8:8b:3d:a9:ab:28:74:12:34:59:8f:42:c5:72:13:ff:fa:88:
98:f1:8d:5c:6c:86:4e:1a:70:a4:90:55:09:fc:d3:da:96:35:
fc:8e:d8:a8:3f:2c:f7:93:9b:c9:86:ad:c4:f5:df:ee:ae:4b:
0f:24:e1:9a:ca:70:b0:f9:3a:b8:b9:c5:41:55:c7:fd:12:7c:
1b:30:67:11:a2:d8:04:3f:33:38:fb:ca:93:21:1a:56:d1:24:
4e:38:b2:13:54:b8:a0:35:63:0a:42:13:c4:b5:8d:60:15:6b:
a0:a0:a7:1f:6b:37:6f:a5:5a:9c:6a:bf:ba:34:fc:b5:46:c8:
c5:b0:3b:cb:6c:fa:7f:8f:d1:e5:13:25:f5:28:07:45:94:d8:
53:cd:c0:ae:16:e3:db:a0:f3:ec:e2:c9:e0:49:26:b7:c7:7e:
d5:bb:e3:d9:ad:55:ed:71:ad:34:f0:65:9f:5a:02:77:5e:b2:
74:d6:46:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:30:52 2025 by rpki-client