Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: T+xZ5fiw6D348SQ8vN8I7I9aZrG1kV9SXH5KYdl9Cek=
Subject key identifier: 40:D2:1E:5E:07:7F:6F:DA:B1:CD:E7:4A:D9:CB:FA:77:78:D1:CE:CC
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 0C1EA9C5B850DEA9C4BEFF3FC4FAB209B750CD56
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:35:58 +0000
ROA not before: Wed 05 Mar 2025 20:30:58 +0000
ROA not after: Wed 04 Mar 2026 20:35:58 +0000
asID: 262617
IP address blocks: 2804:90c:202::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:1e:a9:c5:b8:50:de:a9:c4:be:ff:3f:c4:fa:b2:09:b7:50:cd:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:30:58 2025 GMT
Not After : Mar 4 20:35:58 2026 GMT
Subject: CN=40D21E5E077F6FDAB1CDE74AD9CBFA7778D1CECC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:be:86:e2:03:cc:ee:7e:50:59:56:90:07:5e:
e6:28:26:0c:fa:9c:95:26:8c:06:26:c6:35:6f:21:
7e:50:6d:29:de:a5:03:2f:8a:fd:09:f9:0f:9d:da:
51:ef:ec:25:a9:95:fc:db:dc:db:f2:a3:09:9d:b9:
29:21:7c:74:a0:36:0f:66:da:b3:41:ae:33:44:93:
78:43:67:5e:28:a1:68:18:8d:d2:e8:e9:67:8d:54:
6e:07:a9:7d:42:8e:84:a1:b0:13:9a:49:48:9b:21:
19:5f:59:06:bc:e6:88:b6:32:d6:e1:3f:25:ef:f5:
1c:2e:c4:95:3a:c9:13:13:18:dc:99:7e:c0:4c:6b:
1d:c2:bd:80:0f:9d:26:cc:47:b0:c8:a5:fb:8d:30:
c8:3c:00:d5:0e:83:dc:4a:36:68:31:54:bd:9a:ba:
62:aa:2c:18:1d:7b:a5:9c:05:c3:3d:93:a7:5b:46:
cd:9c:0f:d1:b1:7c:78:4c:af:03:ab:2e:99:18:d2:
88:9f:30:ad:62:c8:9c:33:b8:d4:89:a4:c6:23:38:
1e:4c:bd:00:41:81:d5:22:cd:b9:9a:55:6a:e8:26:
7c:9b:8d:c6:4c:e9:33:91:75:39:43:37:05:b6:e4:
b8:cd:c4:e1:a3:aa:0d:03:07:79:7f:ae:e2:40:75:
c6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D2:1E:5E:07:7F:6F:DA:B1:CD:E7:4A:D9:CB:FA:77:78:D1:CE:CC
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230323a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:202::/48
Signature Algorithm: sha256WithRSAEncryption
77:46:5a:13:12:16:ac:55:d1:53:11:04:22:bc:85:de:98:2e:
85:71:b1:7b:09:e4:7a:92:33:ce:c0:af:dc:aa:bf:05:31:5d:
ad:50:07:b1:90:94:65:99:9c:4b:8b:75:90:11:81:ee:e5:6e:
12:29:38:4f:02:d0:5a:25:60:6a:6e:bc:24:e5:93:cb:e0:da:
7e:c7:e3:e9:a1:1e:52:70:ab:1f:f3:48:22:ef:c2:d5:ff:0d:
99:21:9d:98:b8:b1:59:2c:19:fe:e3:fc:05:c9:78:d6:47:5e:
bb:62:5e:a0:35:28:f6:6e:25:70:7b:42:b5:84:7e:91:df:e4:
70:75:d3:a1:ba:ab:5b:e8:48:54:49:1e:3b:c2:85:0d:09:3a:
d7:6f:02:1e:14:e3:42:d5:d9:17:06:b8:d9:a7:7c:69:4d:e7:
67:be:73:0b:8b:94:e9:18:9d:ac:99:58:ff:cd:85:ad:fc:59:
dd:b3:e1:38:15:e3:f2:f1:dd:3b:3a:2b:57:a1:51:54:8d:a5:
09:39:f1:be:b1:b0:19:ee:e9:35:79:19:87:2d:f0:a8:e5:11:
88:7c:7f:3b:41:c0:b6:ff:cf:36:6b:aa:5f:42:2c:a9:ce:d9:
20:8f:d4:b6:ec:5a:f4:a7:3d:bc:c8:ff:61:b5:b5:19:71:59:
e8:53:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:18:19 2025 by rpki-client