Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: 15wye0kXmRONaDdav9qEb237nBy5CrzPJ7vZq8g8KNs=
Subject key identifier: B6:A8:C3:DD:32:6B:2D:B2:A2:CC:A4:8E:0F:36:4D:08:BB:C5:E2:38
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 55E733ED29820F1C6E405D9CBF3227FB71D3FC8D
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:36:01 +0000
ROA not before: Wed 05 Mar 2025 20:31:01 +0000
ROA not after: Wed 04 Mar 2026 20:36:01 +0000
asID: 262617
IP address blocks: 2804:90c:205::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:e7:33:ed:29:82:0f:1c:6e:40:5d:9c:bf:32:27:fb:71:d3:fc:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:31:01 2025 GMT
Not After : Mar 4 20:36:01 2026 GMT
Subject: CN=B6A8C3DD326B2DB2A2CCA48E0F364D08BBC5E238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:56:7a:84:7f:3b:9c:bf:fb:34:1b:b9:32:50:
92:ea:15:d9:53:89:40:c4:c8:e7:8d:e4:46:4d:f8:
26:4f:fe:4c:d3:6b:4c:40:c1:13:fd:0e:86:bf:e1:
d3:6d:90:18:65:51:8d:2a:d3:1f:85:a8:f1:b7:03:
57:8b:0c:75:bf:0b:cc:19:21:cd:17:aa:3e:24:89:
eb:62:dd:56:25:f8:b8:cc:c1:2b:5f:05:d5:1f:a1:
c3:bd:56:82:67:59:0a:26:49:ea:2d:8e:c6:03:e5:
a2:b8:5d:2e:9e:f4:41:66:6d:59:1c:99:e0:f7:9c:
47:c6:8c:6c:64:1e:65:95:ac:2c:1e:dd:88:72:89:
8b:bb:7a:46:fc:04:08:53:2c:2d:df:3e:6f:70:de:
c5:fc:1f:5e:5d:dc:c3:b0:5c:6c:66:09:c9:cf:30:
eb:ab:6e:05:4c:06:52:5f:05:3e:95:07:e4:49:5f:
29:cc:6d:fc:21:b2:86:83:37:5f:69:30:21:8f:8e:
d6:e0:8a:f8:e3:a6:f6:2b:d5:18:6e:ca:44:cb:9b:
3b:a5:fa:2d:19:c6:ee:cc:7e:28:70:99:8a:6c:c3:
bd:19:9b:63:15:d6:a4:c1:e6:b9:65:09:8b:44:40:
dd:f5:db:7f:f5:80:c0:25:1b:0e:fc:90:2f:26:88:
7f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:C3:DD:32:6B:2D:B2:A2:CC:A4:8E:0F:36:4D:08:BB:C5:E2:38
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a3230353a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:205::/48
Signature Algorithm: sha256WithRSAEncryption
5e:c8:72:24:43:91:74:6f:bd:37:87:37:c4:cd:e7:78:c9:5d:
93:18:17:dd:cb:36:ba:e2:d9:a7:e3:f1:70:fe:20:62:45:d3:
75:f6:7f:ca:4f:9f:28:a1:c5:a8:ac:47:8c:71:83:73:78:42:
e4:70:fb:ef:3b:fe:c5:07:e2:58:be:53:05:3f:51:16:f2:6b:
d6:fc:8c:8d:60:f8:d0:07:9e:d0:eb:f9:52:fa:96:b9:42:55:
67:ba:dc:f1:2d:ea:14:a0:e5:51:60:bd:12:de:ee:e0:14:e7:
62:11:0b:97:43:e2:8e:b0:e3:34:bb:ed:14:e7:4b:84:a1:74:
cd:99:ce:f1:73:77:46:61:18:f3:bd:a5:09:15:dd:4c:b7:f3:
d3:8a:a8:56:a7:98:b2:85:9a:07:39:5d:34:d9:08:a5:ce:44:
81:2d:b7:31:cb:c8:26:57:83:4c:27:1c:f7:3b:f3:ba:a1:57:
da:95:65:dd:33:ec:77:a5:6e:b1:55:f7:b1:52:c7:48:95:c6:
49:0e:df:c2:17:9f:f2:31:3d:3d:e0:29:ef:6e:8a:5d:90:4d:
16:f0:ab:09:d8:2b:b3:e0:50:1e:3c:43:2f:7f:c5:34:9f:0b:
69:25:6e:40:08:ae:0b:78:74:8a:dc:11:f9:28:34:14:46:6f:
aa:e8:28:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:15 2025 by rpki-client