Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
File: 323830343a363063633a3a2f33322d3332203d3e20323639313932.roa (raw, json)
Hash identifier: c80jzCef/Uhq3OV1PPKNrWErfWWq31+M2pplihZp2gY=
Subject key identifier: 41:C0:2E:B6:01:D9:8E:AB:82:46:F5:BF:B7:42:B7:55:C5:98:C6:63
Certificate issuer: /CN=19DB591368FFC9C033D175BED1136000D4C84821
Certificate serial: 67AFFAC08CC6D4E2DC18A518BCDC5EF8479898A8
Authority key identifier: 19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
Signing time: Wed 05 Mar 2025 19:00:09 +0000
ROA not before: Wed 05 Mar 2025 18:55:09 +0000
ROA not after: Wed 04 Mar 2026 19:00:09 +0000
asID: 269192
IP address blocks: 2804:60cc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:af:fa:c0:8c:c6:d4:e2:dc:18:a5:18:bc:dc:5e:f8:47:98:98:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19DB591368FFC9C033D175BED1136000D4C84821
Validity
Not Before: Mar 5 18:55:09 2025 GMT
Not After : Mar 4 19:00:09 2026 GMT
Subject: CN=41C02EB601D98EAB8246F5BFB742B755C598C663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:c4:23:37:af:3a:c2:68:af:95:01:30:eb:
c7:8e:5b:13:b6:7a:8b:53:8c:25:ab:5b:62:02:9c:
88:a3:06:94:d6:5f:40:e1:ee:70:12:3b:33:d6:db:
79:3a:79:6a:cf:4f:b3:d8:6f:f6:95:95:19:8a:40:
98:03:e3:22:f5:fa:bb:28:69:8c:c2:a3:b1:09:ed:
38:cc:ae:03:31:10:3e:9c:8f:a5:98:66:80:24:d6:
a6:a4:51:04:2c:32:e1:52:3d:25:d1:72:91:33:ea:
cc:d7:ee:cb:4f:3b:01:c2:17:22:5e:61:c2:da:84:
1a:be:ce:55:6a:bb:ad:e8:77:d0:a8:7a:de:05:aa:
81:5b:ce:64:0a:48:8b:b8:e8:e2:1d:c5:40:30:41:
0c:94:32:07:b9:b6:b3:f0:8d:36:74:c3:a9:86:89:
ba:9d:1e:b4:7c:4a:4d:02:7a:68:12:2d:44:d3:41:
2e:bc:08:4d:8f:1e:01:00:78:08:05:1c:18:9e:d7:
fb:9d:68:03:bc:80:0d:99:5d:9c:12:fb:30:3a:21:
b0:0b:3d:b6:b4:8e:15:0d:79:f5:40:f3:66:66:a9:
2d:d8:61:6b:5b:a0:a0:1b:52:c5:d9:88:7e:2b:2e:
86:ab:69:f0:db:4c:6a:e2:5e:bd:26:cc:bb:4f:ae:
b8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C0:2E:B6:01:D9:8E:AB:82:46:F5:BF:B7:42:B7:55:C5:98:C6:63
X509v3 Authority Key Identifier:
keyid:19:DB:59:13:68:FF:C9:C0:33:D1:75:BE:D1:13:60:00:D4:C8:48:21
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/19DB591368FFC9C033D175BED1136000D4C84821.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19DB591368FFC9C033D175BED1136000D4C84821.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DjYrq8ran1bRDEoPc9ivUfS96vqodwZzh2cFJNJxJmks/1/323830343a363063633a3a2f33322d3332203d3e20323639313932.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:60cc::/32
Signature Algorithm: sha256WithRSAEncryption
75:d7:7b:ff:fc:ba:e0:c3:06:24:be:e5:1f:a0:99:dd:9c:ea:
b2:8c:7e:d1:c4:eb:d2:38:66:b9:d0:e9:5e:51:fd:dd:18:76:
d2:ae:f7:d5:03:ae:b5:2d:a4:05:db:79:75:5e:09:d1:3c:23:
95:56:e6:f6:56:a6:e6:af:40:09:78:4e:4d:0a:41:23:44:51:
50:86:9c:60:43:bb:4b:2d:5a:c1:e1:c5:99:38:d4:09:0b:ea:
8f:8c:8c:cd:77:33:7f:06:ec:21:6e:f0:90:df:33:2c:62:58:
42:d6:3c:78:b2:66:44:e5:f8:d0:5d:17:56:b2:27:b1:39:0b:
b0:fc:c8:c4:fe:64:5b:8e:4c:0d:33:f5:32:4f:39:e9:32:71:
f9:a0:78:62:b2:d1:0d:0c:94:d1:e8:bf:ed:c5:31:1f:cf:5e:
8a:72:57:66:79:10:34:a0:53:f9:8e:1f:c4:f5:67:2f:e0:e2:
bc:03:cc:11:5b:6b:b6:00:5f:e4:b6:7e:ce:dc:b5:a3:e5:8b:
a7:5d:1b:de:10:c6:2b:50:36:69:dc:72:6d:b5:f7:84:9c:e0:
5a:fa:29:e5:28:3b:ff:c4:7e:4f:eb:9c:70:b4:88:ea:94:9a:
34:60:74:78:5f:51:9b:88:8e:5e:b9:a7:ee:1c:ef:9e:5e:f8:
e4:f4:be:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 00:31:57 2025 by rpki-client