Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: 5vHOMLUhnODDkd9CcvgazXhQwtcDjbkYak2GaKuX+Gs=
Subject key identifier: BB:70:17:F3:6A:A4:41:E3:28:6A:E4:77:E6:D1:C2:84:08:D5:8A:B1
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 2AAED04F0B7C4DF6C9CB508156B4DBCE82961AF8
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:35:54 +0000
ROA not before: Wed 05 Mar 2025 20:30:54 +0000
ROA not after: Wed 04 Mar 2026 20:35:54 +0000
asID: 262617
IP address blocks: 2804:90c:100::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:ae:d0:4f:0b:7c:4d:f6:c9:cb:50:81:56:b4:db:ce:82:96:1a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:30:54 2025 GMT
Not After : Mar 4 20:35:54 2026 GMT
Subject: CN=BB7017F36AA441E3286AE477E6D1C28408D58AB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:3c:81:c8:61:38:fa:e3:76:bb:06:b0:2f:11:
4f:b1:29:57:b0:86:90:10:a4:6d:38:68:97:b1:64:
ed:5b:21:be:6a:7c:a4:5b:bd:35:cc:d7:72:90:26:
d0:74:3d:46:35:d5:44:b2:8e:d6:b1:e2:53:6d:8c:
02:d7:60:4d:b8:f6:1d:8d:c2:d0:cd:60:fd:4b:e4:
d6:9d:20:91:f1:e6:42:de:6b:d4:c6:3b:b3:2c:90:
af:14:14:db:e6:b6:09:0b:d9:75:78:6c:9e:a7:71:
db:8d:f3:80:c2:0c:28:c1:48:39:cd:1a:ec:83:76:
0b:dd:a3:fc:64:23:8e:e2:2d:0c:10:82:96:5b:c0:
7e:26:4c:7c:ae:b3:09:a6:04:8a:f8:27:f5:f3:be:
88:64:01:06:5a:9f:9d:da:4c:3e:2b:b2:6f:90:94:
02:b2:73:07:fd:dc:01:87:3e:e2:f6:83:3b:d9:9a:
84:ca:a9:f1:7b:1e:3a:90:06:21:ac:80:6d:65:76:
16:cb:67:51:72:f8:05:9d:7e:05:08:20:18:18:46:
fb:8f:a7:55:f9:43:b6:7f:a5:6c:db:04:13:84:c9:
6e:0b:99:3c:e8:f5:88:f5:94:85:17:cd:60:14:95:
a7:d4:e1:59:91:85:0e:56:9b:52:e9:b7:f4:e3:6c:
ac:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:70:17:F3:6A:A4:41:E3:28:6A:E4:77:E6:D1:C2:84:08:D5:8A:B1
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:100::/48
Signature Algorithm: sha256WithRSAEncryption
0c:73:86:c5:1b:3c:8d:97:60:46:76:de:b2:1e:b8:6a:68:d4:
3c:42:75:48:1d:98:5a:d4:e2:0f:9d:e2:a7:73:d7:29:dc:8c:
d6:d7:43:b5:50:01:87:5b:18:3c:4c:35:da:96:ac:50:74:c0:
38:7b:56:d3:2e:7e:e7:28:b8:79:98:c7:95:e4:e1:63:f4:4a:
0b:27:f7:8a:41:a9:fb:ac:d1:82:98:6f:fb:20:d2:14:85:e4:
38:d4:0f:3a:f1:f5:17:bf:f8:f8:bf:92:2b:42:ea:5c:df:24:
0e:f3:78:d4:56:01:01:6f:e5:f0:34:63:c9:65:08:5b:45:b2:
1e:f9:d2:33:b5:40:a8:2c:93:b0:3b:54:9d:69:c5:95:25:d0:
77:69:11:d8:f2:b3:0c:30:dd:67:d8:ac:78:aa:b7:15:73:61:
e8:ac:08:80:05:d8:87:e3:02:cc:b8:48:3a:b7:51:e3:78:81:
08:32:75:99:64:9d:53:f6:d4:60:b0:3c:63:8e:41:8d:96:cf:
3e:78:48:bf:82:b4:82:4e:f6:6e:ae:d9:ad:cc:0b:11:6d:b6:
a2:8c:1d:b5:89:26:95:f2:85:91:53:44:c7:32:97:af:d9:3b:
f3:a4:2d:91:4a:fd:52:b9:23:b2:ce:72:77:54:e9:7a:ff:c7:
ba:92:85:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:26:34 2025 by rpki-client