Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a333a3a2f34382d3438203d3e20323632363137.roa
File: 323830343a3930633a333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier: KKW8frmKnWhXFTQveHtcLiLEyUtlO27BjesMisQVDB4=
Subject key identifier: F7:89:86:5F:02:38:7A:16:7B:74:E1:D7:F2:0D:79:42:8A:74:2A:D1
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 1B62171AA83951684D1108D4A1B8A29E726C33D7
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a333a3a2f34382d3438203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:36:11 +0000
ROA not before: Wed 05 Mar 2025 20:31:11 +0000
ROA not after: Wed 04 Mar 2026 20:36:11 +0000
asID: 262617
IP address blocks: 2804:90c:3::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:62:17:1a:a8:39:51:68:4d:11:08:d4:a1:b8:a2:9e:72:6c:33:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:31:11 2025 GMT
Not After : Mar 4 20:36:11 2026 GMT
Subject: CN=F789865F02387A167B74E1D7F20D79428A742AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3a:27:f3:8b:f0:09:f7:e1:75:19:d1:ac:58:
ac:c0:14:1f:10:fb:10:de:13:4f:aa:fb:75:1c:7c:
29:8a:f9:5f:e8:4b:0a:9a:05:c8:59:a1:bf:f2:4e:
f9:51:6b:83:18:81:73:71:fa:19:18:d5:f2:af:14:
ca:68:2b:90:70:4b:bf:6c:b6:bf:d9:89:22:20:a9:
57:09:c1:f4:d7:89:8d:2b:d3:58:82:63:1c:d2:b8:
b1:d5:5c:f2:75:6b:d3:10:98:18:80:e7:1f:3d:22:
25:3e:4f:91:17:2b:95:bb:8c:31:df:f1:2b:30:7f:
68:74:54:7e:0b:a7:6d:90:be:b9:91:47:ac:a8:4f:
1e:da:0c:c1:60:08:40:87:07:65:da:4c:fa:83:d5:
d7:73:19:57:65:49:8e:a5:da:68:42:04:61:6c:a4:
fa:8f:25:80:6d:ab:5b:5e:a5:db:3b:87:aa:d1:87:
92:8b:db:0a:05:af:62:65:94:6b:26:bc:df:f3:b1:
36:84:d5:97:2f:c2:c8:1d:8a:db:0b:a8:24:a0:5a:
8e:1a:af:5e:c6:b6:b7:c4:c6:b9:27:fc:7c:c4:d1:
36:aa:dc:24:8d:74:07:02:36:30:9d:3e:81:1d:d7:
ed:9d:76:a4:47:2a:16:0d:18:d9:8b:95:3a:1d:03:
40:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:89:86:5F:02:38:7A:16:7B:74:E1:D7:F2:0D:79:42:8A:74:2A:D1
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a333a3a2f34382d3438203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:3::/48
Signature Algorithm: sha256WithRSAEncryption
a3:08:54:a4:ea:92:f4:e9:88:ed:76:61:3e:1e:41:2a:fe:99:
b9:c9:63:62:8c:ec:94:c6:c4:21:69:74:23:0d:ea:fb:f5:82:
20:97:d7:0f:85:e3:b0:9e:05:10:f6:00:93:8b:f0:f3:ad:44:
aa:e8:16:3d:f1:32:11:e7:6f:4f:fd:ba:76:d3:bc:77:97:35:
28:09:a3:9d:66:64:37:cb:dc:cc:e3:63:82:97:96:0f:18:a4:
de:3c:23:09:92:74:39:f7:7f:4c:08:12:6b:5b:c8:3c:05:06:
b8:fa:f2:55:f8:6e:2c:f7:0a:39:99:2e:da:63:f5:56:50:61:
d6:cb:ba:e7:cf:a5:5e:8d:1f:96:43:6e:95:3f:43:fa:d7:81:
a0:df:37:44:62:ca:1c:ab:d3:7c:50:a9:6b:cb:5d:24:3f:0e:
fb:6f:c4:8a:7f:e1:5c:3f:b2:05:9e:a1:e7:33:ef:95:9a:8c:
61:50:dd:a3:71:87:e2:4a:45:fc:ff:1e:42:8f:87:dd:57:3c:
b3:62:cb:cc:2a:70:7b:45:14:63:8e:98:ba:09:9c:1d:35:87:
84:dd:b8:4b:11:8c:52:43:7c:d4:c2:63:33:d1:6b:af:e3:15:
b7:1f:e9:76:c7:43:5a:5d:a1:60:6e:3d:88:66:c6:a0:8e:36:
3e:bb:af:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:09:47 2025 by rpki-client