Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
File: 323830343a336435633a3a2f33322d3336203d3e20323636353236.roa (raw, json)
Hash identifier: hG9C5493PGDbutLPKxkFc3n6WKuxTqsTbH82yybndLw=
Subject key identifier: C7:A0:4A:C7:EA:30:E9:18:7A:2A:34:84:34:B2:78:FB:2D:0F:08:C1
Certificate issuer: /CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Certificate serial: 7C37899B1DA9076CD08F432A69449B93216776D8
Authority key identifier: 32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
Signing time: Thu 06 Mar 2025 10:25:04 +0000
ROA not before: Thu 06 Mar 2025 10:20:04 +0000
ROA not after: Thu 05 Mar 2026 10:25:04 +0000
asID: 266526
IP address blocks: 2804:3d5c::/32 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:37:89:9b:1d:a9:07:6c:d0:8f:43:2a:69:44:9b:93:21:67:76:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32068CEB1B931618FB29A0ECD52F9D22FB0304DA
Validity
Not Before: Mar 6 10:20:04 2025 GMT
Not After : Mar 5 10:25:04 2026 GMT
Subject: CN=C7A04AC7EA30E9187A2A348434B278FB2D0F08C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:aa:8b:ea:01:55:a3:17:d4:65:22:a6:82:cd:
8e:e1:dc:ac:0f:fe:63:ae:99:f4:0d:99:3f:c6:76:
bd:08:a6:73:3f:37:3a:1d:ca:d1:03:2e:51:ab:20:
e2:48:87:ae:b4:76:b9:02:bc:85:28:df:4e:df:ec:
07:1c:4c:de:dd:1c:3b:35:50:5a:f3:c9:3d:c7:ba:
0f:95:ba:a8:4d:6c:18:e0:ee:4b:dd:bf:4b:8f:66:
6f:ab:0b:d4:92:3d:64:0e:8d:09:18:7a:76:82:d5:
63:43:1a:e3:c9:fc:88:88:5f:49:d2:1d:bf:70:6f:
2f:11:a9:8c:f5:78:60:34:d3:fc:07:20:b0:ec:62:
ae:c0:f8:16:54:ed:b5:a3:f1:38:dc:fa:d4:f2:ba:
87:d4:0b:90:a2:da:a1:3a:5b:68:f5:f4:10:ca:79:
4e:25:56:f5:94:a9:87:e5:be:d0:33:af:a4:8d:8e:
20:d4:f4:cf:a2:e4:a9:36:1c:3b:f2:9a:ff:f0:1f:
c6:95:78:65:33:f9:13:1b:d9:6c:ae:6f:ec:da:12:
0e:8f:b7:3b:4a:fe:8e:87:46:5b:aa:37:be:cb:59:
d4:ea:d2:c7:7d:6f:82:48:09:36:c7:92:e1:62:be:
07:e2:6c:01:60:5c:a7:7b:ea:61:77:fb:23:02:8e:
28:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A0:4A:C7:EA:30:E9:18:7A:2A:34:84:34:B2:78:FB:2D:0F:08:C1
X509v3 Authority Key Identifier:
keyid:32:06:8C:EB:1B:93:16:18:FB:29:A0:EC:D5:2F:9D:22:FB:03:04:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/32068CEB1B931618FB29A0ECD52F9D22FB0304DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dth3d2pUk8rr7czc8k3uE2erNAtRisqpE2jhvqYchFtR/1/323830343a336435633a3a2f33322d3336203d3e20323636353236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3d5c::/32
Signature Algorithm: sha256WithRSAEncryption
6e:23:92:6b:b9:ce:df:69:ee:84:b5:4a:5c:91:05:a2:0c:8a:
cb:88:c8:a2:6e:2e:a9:41:75:1a:46:9b:c7:ad:5e:72:ab:6b:
7d:55:d8:25:3e:09:7a:2c:e3:70:84:3b:fd:bb:9e:fe:89:cc:
c1:7d:a7:8e:03:14:1d:13:b3:e3:a9:e2:45:60:21:9a:f8:ea:
bc:47:a1:68:62:e3:9c:1f:fa:8d:33:21:63:27:0e:98:9a:9d:
b4:96:0b:96:b4:e4:4c:05:d2:dc:28:84:e3:1d:3e:4e:07:13:
52:65:ae:35:bd:a4:ac:6f:fa:27:bb:28:b7:80:9c:35:ca:d7:
5b:6f:95:cf:35:f8:e3:93:1d:9d:0d:e4:99:34:b5:f0:6f:ef:
2a:ef:9b:70:2a:2c:e7:78:85:4f:68:b9:e9:a5:10:6d:b5:12:
d8:28:97:7c:47:6e:88:a9:6d:60:50:51:48:76:ab:74:d2:30:
97:a8:8f:2e:81:2c:b1:26:71:6a:89:0c:2d:d1:79:1b:3e:e6:
4a:8d:b1:50:a7:1b:a3:c3:c5:6a:6e:27:a6:f9:0e:41:53:80:
90:81:7e:4b:bf:73:25:07:a9:ab:a7:2f:9b:1f:0d:5d:89:78:
03:ea:42:f5:90:63:8b:16:64:19:09:43:64:b0:c1:c6:7c:30:
b9:fd:30:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:15:54 2025 by rpki-client