Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/323830343a376263633a3a2f33322d3438203d3e20323731343535.roa
File: 323830343a376263633a3a2f33322d3438203d3e20323731343535.roa (raw, json)
Hash identifier: XOwtVM5LyoozAIAy6kZOX07UdARTT+Ta3OmCSyAiYcM=
Subject key identifier: 0A:7B:EA:69:D9:ED:85:E0:18:F6:15:D1:34:E5:86:01:51:5A:A7:E2
Certificate issuer: /CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Certificate serial: 0D3C07ABE5B3449B66A341908E7948E508F820D5
Authority key identifier: D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/323830343a376263633a3a2f33322d3438203d3e20323731343535.roa
Signing time: Wed 05 Mar 2025 22:45:30 +0000
ROA not before: Wed 05 Mar 2025 22:40:30 +0000
ROA not after: Wed 04 Mar 2026 22:45:30 +0000
asID: 271455
IP address blocks: 2804:7bcc::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:3c:07:ab:e5:b3:44:9b:66:a3:41:90:8e:79:48:e5:08:f8:20:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3F7108700F69AB3C460E0170E99E7051ECB31EC
Validity
Not Before: Mar 5 22:40:30 2025 GMT
Not After : Mar 4 22:45:30 2026 GMT
Subject: CN=0A7BEA69D9ED85E018F615D134E58601515AA7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:75:62:78:88:71:a5:d9:d3:eb:cf:d9:63:96:
69:89:d7:7b:46:db:96:e5:ba:ab:b5:0b:81:cf:34:
ba:29:49:e5:af:5f:50:c0:52:5f:f0:10:e9:8f:c7:
22:6b:f8:44:a4:11:d8:2e:f7:0f:14:33:3f:0b:17:
94:2a:55:c3:df:f5:53:58:29:d7:d1:af:55:b1:fb:
d9:c3:8b:63:c4:3b:2a:ef:16:9c:4d:76:21:14:3c:
4e:e7:df:4d:ad:6c:0c:dd:6d:90:2c:57:26:f2:29:
5b:fa:0f:0a:1e:19:29:f7:32:ba:db:6f:f6:1b:bf:
7c:4c:70:4e:be:22:ea:99:0a:7d:af:d6:28:b2:bd:
e9:5d:8f:ca:eb:e3:47:48:a5:76:03:c4:72:f1:c5:
ce:6b:98:28:1e:5e:f2:dd:5e:fb:24:cd:7b:30:61:
41:9b:bd:ff:1b:a1:6d:69:c1:a0:22:62:7e:eb:4f:
08:e5:5a:b2:92:7d:12:20:f3:45:b0:b7:35:a0:c6:
77:64:32:82:91:af:9b:b4:64:44:a5:76:b0:89:b5:
34:79:82:d7:36:dd:29:09:67:62:0a:8d:ff:3a:40:
91:df:26:63:79:76:a4:00:d9:0c:e0:cd:6e:ce:f8:
6a:d8:0b:d8:ee:bc:9d:27:bd:95:f1:36:77:b4:04:
6b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:7B:EA:69:D9:ED:85:E0:18:F6:15:D1:34:E5:86:01:51:5A:A7:E2
X509v3 Authority Key Identifier:
keyid:D3:F7:10:87:00:F6:9A:B3:C4:60:E0:17:0E:99:E7:05:1E:CB:31:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3F7108700F69AB3C460E0170E99E7051ECB31EC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dzhw3RXfdZ5Tvy6rWfSrQS7EdUKsczBKk6xDYX7euK33/1/323830343a376263633a3a2f33322d3438203d3e20323731343535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7bcc::/32
Signature Algorithm: sha256WithRSAEncryption
a9:aa:8f:3d:82:f9:08:74:b4:1c:36:64:dd:1e:c7:df:3e:99:
fe:84:94:fe:8a:2e:6a:f8:42:6f:cb:0f:d7:ae:64:16:aa:6c:
e6:72:6b:bc:49:26:04:fd:22:25:ed:56:e8:8c:f3:b3:31:49:
f3:e7:aa:38:69:6a:1b:fe:a8:31:72:4b:4d:c9:36:6c:99:c7:
28:33:de:ec:b1:5e:4e:23:c4:9c:87:b7:07:1e:60:32:2b:3e:
df:ee:52:91:4f:d1:6c:e4:c8:31:3b:0b:da:01:d4:f5:9a:6a:
79:00:0f:58:c6:15:73:fe:96:2b:97:19:54:2a:1d:05:68:d4:
f9:56:b6:03:63:93:23:b3:7c:12:2a:d0:6e:6c:00:ca:53:e2:
85:33:be:0f:bf:09:70:9a:14:16:f7:1e:03:d8:b0:ff:72:cf:
03:e5:8f:37:86:a2:f9:ea:d2:6f:6a:64:ce:e1:cf:dd:c5:b4:
50:8c:e7:17:2f:b2:ab:26:11:dd:eb:c1:b8:7b:38:df:71:1b:
06:45:1e:fd:a3:c4:a8:88:d5:bb:13:9d:ff:99:d0:d1:2f:ff:
43:7f:b3:6e:2a:5b:dc:a1:e2:4e:1c:40:d4:b6:dd:fd:58:41:
c1:d9:3c:f3:37:df:93:70:db:34:7f:7c:39:0f:18:fb:9e:e2:
6a:eb:f5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:01:00 2025 by rpki-client