Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
File: 323830343a3538303a3a2f33322d3332203d3e20323632353138.roa (raw, json)
Hash identifier: SYeHxjxfOdEI34hyHW+S6PMo0bD9KvC0wGVlwtcWKlg=
Subject key identifier: 75:7C:DA:67:B4:57:E9:98:68:ED:FE:2A:C4:71:AD:A6:8C:1F:EE:5F
Certificate issuer: /CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Certificate serial: 147AB08564A73034A918FFEDF59927405F13539D
Authority key identifier: DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
Signing time: Thu 06 Mar 2025 05:07:23 +0000
ROA not before: Thu 06 Mar 2025 05:02:23 +0000
ROA not after: Thu 05 Mar 2026 05:07:23 +0000
asID: 262518
IP address blocks: 2804:580::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:7a:b0:85:64:a7:30:34:a9:18:ff:ed:f5:99:27:40:5f:13:53:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36
Validity
Not Before: Mar 6 05:02:23 2025 GMT
Not After : Mar 5 05:07:23 2026 GMT
Subject: CN=757CDA67B457E99868EDFE2AC471ADA68C1FEE5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:16:8f:ea:f6:07:b7:27:5a:00:a4:20:2b:2e:
d1:fc:58:31:16:11:9b:4e:60:ee:3a:ab:79:51:c5:
85:04:21:f8:bc:cd:87:4c:6b:77:2b:60:93:b7:95:
ff:ae:12:94:44:34:c4:f8:19:1b:1f:8d:5f:b5:a7:
97:d4:95:0b:bc:81:a1:15:78:de:07:70:2c:60:fd:
05:fb:b1:b1:67:7f:42:2e:f5:00:98:bc:62:60:b1:
ec:b9:07:c0:50:ac:a7:55:42:a1:70:13:93:42:a4:
e2:7e:fc:b4:d0:9a:a3:4d:03:88:70:b8:5b:4c:f1:
1f:cd:a9:6b:24:a4:ba:f9:08:03:cd:58:b8:6d:3d:
ae:e7:01:61:da:09:b4:f5:44:e4:be:3c:83:65:48:
37:c4:28:af:05:f0:ad:fd:ea:10:5a:1b:85:66:cf:
38:79:54:1a:e8:59:ce:21:45:0b:a7:c1:0b:8d:e3:
40:62:ad:85:32:ef:32:5f:f6:01:d5:f6:3d:4e:eb:
4d:9c:32:65:07:6c:cb:a6:e1:9d:a1:d2:b8:2c:58:
94:4d:ed:c7:d6:42:f2:fc:1b:47:4f:80:c6:6e:fe:
55:46:7d:51:7f:e5:0e:3a:d1:f2:ac:7d:2f:2b:f2:
0d:72:91:72:a2:1b:83:03:41:81:27:58:a9:31:94:
23:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7C:DA:67:B4:57:E9:98:68:ED:FE:2A:C4:71:AD:A6:8C:1F:EE:5F
X509v3 Authority Key Identifier:
keyid:DE:E8:0E:50:E0:3D:F0:1C:15:4B:D2:A4:D1:D2:F3:BD:67:F7:1F:36
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DEE80E50E03DF01C154BD2A4D1D2F3BD67F71F36.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dh7mwJLJBB4Az4fjzW2tWQkwvXk5sNp4jwDyNTYrH3Sr/1/323830343a3538303a3a2f33322d3332203d3e20323632353138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:580::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ca:cb:1d:db:af:f9:21:81:d0:be:7c:ea:a1:ee:60:c4:66:
0e:42:a4:7c:54:ca:62:92:a0:f8:0e:27:c4:30:f1:5e:37:b4:
4d:d6:0d:a9:c5:0b:7f:b1:13:fa:dd:3b:8a:47:96:bf:af:a2:
34:9c:09:79:dc:b5:0f:8b:f8:f8:fa:6e:04:70:f1:5f:ee:44:
6f:9b:c0:6c:91:11:8d:01:7f:68:65:d6:df:22:5d:7a:e0:21:
11:dc:af:88:e5:9e:2a:d9:4d:7c:0e:f8:e2:40:6a:24:bf:c6:
e9:89:3a:40:02:4d:c3:51:39:6c:69:80:23:cc:ca:80:24:1f:
a2:d8:5e:f2:cd:c4:8c:6b:e1:44:a8:57:86:7f:a7:f9:bc:03:
e7:81:ce:85:5a:8c:f9:a1:af:a5:60:ed:08:3e:cc:c4:50:99:
ed:54:96:9d:c3:10:19:ac:85:c2:8c:b7:d2:56:53:1b:f2:a0:
90:90:2d:4d:e6:3a:c5:8b:1c:bc:31:d9:87:55:a5:63:13:a8:
c7:99:5a:21:56:db:f0:70:03:84:c4:69:fd:e6:38:a1:ec:6e:
71:39:38:78:59:35:2b:a6:f8:b9:8b:b7:4c:ee:f8:32:fd:79:
77:37:36:5d:a6:c1:e1:2b:0b:a5:a0:70:fe:10:51:b9:ef:3c:
02:2e:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:49:03 2025 by rpki-client