Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa
File: 323830343a333565303a3a2f33362d3336203d3e20323636333132.roa (raw, json)
Hash identifier: UdmWjMeCSrwQpqWFpRLztSxTg70i1z4sYAlUkM0Fjxg=
Subject key identifier: 98:21:8C:34:F0:23:84:76:AE:37:45:FF:87:F5:73:2A:92:F4:77:2F
Certificate issuer: /CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Certificate serial: 4E6F95987027B2F1E14C563AA066434ADBE05837
Authority key identifier: 0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa
Signing time: Thu 06 Mar 2025 13:00:35 +0000
ROA not before: Thu 06 Mar 2025 12:55:35 +0000
ROA not after: Thu 05 Mar 2026 13:00:35 +0000
asID: 266312
IP address blocks: 2804:35e0::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6f:95:98:70:27:b2:f1:e1:4c:56:3a:a0:66:43:4a:db:e0:58:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A2DC9F591D32599C3AB0561CB8DEF59C396C055
Validity
Not Before: Mar 6 12:55:35 2025 GMT
Not After : Mar 5 13:00:35 2026 GMT
Subject: CN=98218C34F0238476AE3745FF87F5732A92F4772F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d8:1a:33:2d:9f:f1:8f:c7:13:2c:f2:be:ca:
9e:84:65:e7:fb:ef:de:fb:38:d5:91:b6:94:0b:0a:
a5:c7:16:c0:88:a0:04:e5:31:aa:e9:88:0a:f9:9e:
93:bd:14:1a:22:c8:9c:44:ba:a4:45:4d:15:e9:d3:
ba:b7:4d:a6:89:fa:02:19:55:f5:f8:2e:06:7f:d1:
84:f1:b3:4c:98:b4:e4:63:d7:c8:5c:54:95:e2:90:
c5:66:fe:45:58:23:c0:f3:3b:a0:51:01:65:9e:e8:
a3:9e:35:7a:a6:34:92:1c:e2:1c:5b:ba:04:33:03:
7e:d4:9f:b0:74:fe:52:37:39:83:5a:d6:d4:82:cd:
9c:9b:81:d7:8f:1e:0e:33:51:26:e5:99:df:8f:40:
d1:56:e6:d3:69:f5:df:88:1d:d5:81:90:6d:ce:59:
fb:57:75:01:de:58:82:eb:58:d1:5a:c5:74:63:10:
0b:49:da:0d:18:2e:8c:00:ab:12:05:e3:6f:ba:d0:
89:fc:f2:3a:32:e0:58:5b:66:50:2b:54:e1:d3:dc:
fc:83:84:d3:67:72:ba:df:c0:6e:f7:8c:9c:2d:08:
64:58:1e:29:b3:64:65:7c:4c:c7:76:36:85:6e:b5:
84:9b:a6:b4:93:8c:98:d7:c3:6b:f4:99:86:dc:e6:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:21:8C:34:F0:23:84:76:AE:37:45:FF:87:F5:73:2A:92:F4:77:2F
X509v3 Authority Key Identifier:
keyid:0A:2D:C9:F5:91:D3:25:99:C3:AB:05:61:CB:8D:EF:59:C3:96:C0:55
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2DC9F591D32599C3AB0561CB8DEF59C396C055.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DdPBJF5vS1itxFLQxz99XyuJVAZyaXPzsUE9bHw37a3n/1/323830343a333565303a3a2f33362d3336203d3e20323636333132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:35e0::/36
Signature Algorithm: sha256WithRSAEncryption
c3:7f:ec:40:85:42:7b:75:6f:12:ff:f6:3c:74:eb:c4:cc:4e:
58:69:21:23:5c:73:b8:3b:85:0a:43:45:cb:4e:1f:df:89:83:
da:d8:12:82:3c:b1:49:d7:1d:9d:62:0e:bb:7f:cb:54:71:73:
71:d2:bd:59:41:01:23:ab:9b:8f:d7:0a:b7:23:e2:88:7f:f0:
9c:16:bb:67:70:d9:6c:01:27:85:10:77:fb:31:01:4d:c5:69:
5b:42:1f:5c:fd:b5:5e:63:05:7d:f2:c9:89:37:8a:6e:ac:7a:
02:35:1f:56:76:ed:6d:f1:eb:8a:c8:f0:81:88:d0:eb:6a:fe:
14:4b:75:47:52:fb:39:73:ef:c8:04:a8:17:23:49:a7:d9:06:
f1:ba:68:82:54:0a:64:f2:20:29:c1:ca:86:70:f3:6e:cb:25:
14:c8:26:f7:e8:7b:13:86:8e:f3:66:ba:1e:64:5f:87:2b:e5:
ce:eb:15:a4:1d:3c:7b:20:f9:f2:4c:f8:77:38:53:ee:02:58:
05:6c:14:21:ee:a5:4a:e3:ae:85:f8:7b:82:99:f3:85:b8:c9:
49:da:92:7d:3f:1e:e8:cd:67:40:a6:08:4c:36:7e:fc:06:5a:
c5:8a:b5:d5:25:73:57:fc:a4:13:c3:35:b3:7c:94:70:5b:4c:
23:a3:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:27:59 2025 by rpki-client