Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa
File: 323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier: B233liqE0g/YegnJjH5uvwq/M+Dvaii2X2z/ad+K28E=
Subject key identifier: E1:E6:F8:76:3A:83:3A:C5:AB:3E:C2:2D:EE:ED:1E:D9:76:02:25:92
Certificate issuer: /CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Certificate serial: 0C99D1FEA487794B00E4D12F4429728F115C0DF4
Authority key identifier: 00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject info access: rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa
Signing time: Wed 05 Mar 2025 20:36:07 +0000
ROA not before: Wed 05 Mar 2025 20:31:07 +0000
ROA not after: Wed 04 Mar 2026 20:36:07 +0000
asID: 262617
IP address blocks: 2804:90c:fa00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:99:d1:fe:a4:87:79:4b:00:e4:d1:2f:44:29:72:8f:11:5c:0d:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00078D2B578982663EFE91FC4B5397C48403E2E4
Validity
Not Before: Mar 5 20:31:07 2025 GMT
Not After : Mar 4 20:36:07 2026 GMT
Subject: CN=E1E6F8763A833AC5AB3EC22DEEED1ED976022592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a4:1d:f6:92:a6:20:9a:51:53:f1:66:ab:dd:
18:20:63:c2:07:f5:77:b1:65:8d:b4:86:b3:b3:bc:
ad:aa:be:4f:51:94:40:b9:18:29:6b:5f:1e:3e:48:
80:32:98:af:2b:64:81:6f:1a:0b:e4:43:1c:84:c9:
5a:ff:fb:e7:c7:56:38:02:66:ca:6b:8c:b1:65:72:
5b:81:b1:04:14:0b:c2:b4:70:28:27:15:c8:b3:d4:
c3:ad:3e:aa:37:01:c9:d7:96:76:e3:33:cc:fa:ee:
f3:8d:8a:40:df:26:85:dd:08:ed:20:03:f1:36:57:
92:58:82:45:82:d7:55:96:ed:92:21:60:e2:e7:da:
06:2b:d1:e7:cd:84:eb:e8:97:e5:51:be:c9:c8:45:
b5:07:b3:6f:5f:a1:d0:5e:ac:19:c3:af:48:f9:2b:
a3:5c:93:a3:4c:e0:ce:84:29:22:c4:ff:6d:8f:8c:
40:e8:4a:b2:7e:f5:d5:59:ad:8b:e1:94:b4:7f:e7:
b7:84:36:fc:4b:78:37:87:6c:c6:68:5a:61:dd:c7:
55:6f:65:5f:a2:7d:d0:d7:ef:d4:e8:01:cd:6d:33:
f2:c3:e4:4b:7f:e0:77:a9:e0:e6:48:57:30:25:36:
2d:4a:6d:ef:05:84:15:41:f5:b0:f7:ff:30:66:c3:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E6:F8:76:3A:83:3A:C5:AB:3E:C2:2D:EE:ED:1E:D9:76:02:25:92
X509v3 Authority Key Identifier:
keyid:00:07:8D:2B:57:89:82:66:3E:FE:91:FC:4B:53:97:C4:84:03:E2:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/00078D2B578982663EFE91FC4B5397C48403E2E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/00078D2B578982663EFE91FC4B5397C48403E2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/1/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:90c:fa00::/40
Signature Algorithm: sha256WithRSAEncryption
31:d4:31:1c:a1:01:96:0a:7d:ba:8e:5b:21:93:08:5b:16:4c:
36:0b:cd:9e:89:cc:fb:69:81:d3:b1:ae:82:c5:d0:15:a7:74:
95:ae:29:b2:3a:f6:54:6b:94:ee:c0:af:d7:f2:60:a4:dd:1d:
05:e5:2e:2d:6b:33:6e:fc:7b:ec:72:59:3b:aa:0a:0b:0c:f2:
b8:26:36:72:5e:b8:5f:50:c6:d2:73:03:b3:24:d4:94:30:f7:
da:56:9c:13:a2:c5:d9:20:34:3d:1a:06:8a:7d:af:e3:93:b3:
c2:24:61:54:b2:c2:bd:76:aa:36:94:d2:a9:5b:12:09:fe:d1:
91:4d:83:58:d6:c7:5d:d5:43:a3:18:9f:0f:f5:98:ed:b3:f4:
71:e4:a3:93:9c:01:29:07:61:3b:8b:5b:6f:85:7c:42:24:76:
12:5f:96:15:2a:27:93:5c:8f:d6:50:98:ee:4a:48:de:0a:8f:
58:a5:e2:a5:b2:1a:a4:5b:7b:0c:24:f7:9e:65:a4:30:cf:5b:
6a:ab:6d:de:39:88:d3:dd:70:d5:71:b1:2b:7e:13:16:80:a3:
aa:6f:ee:48:df:e2:cd:51:11:31:7e:5b:80:48:7c:1d:dc:65:
fa:60:8a:35:99:88:a2:52:80:ce:80:ca:c2:43:1a:5c:28:f4:
09:b4:6f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:24:46 2025 by rpki-client