Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
File: 323830343a326231303a3a2f33372d3337203d3e203532393136.roa (raw, json)
Hash identifier: 1mW3dsqyO/hcXXBeqlmzpAYUE5tzDPXuu2FKIM6d4p0=
Subject key identifier: C1:DE:90:5C:7F:69:ED:44:B8:30:95:0E:57:65:27:2E:B3:7F:4A:C0
Certificate issuer: /CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Certificate serial: 79EFA1F98278AE99E927F4921F9276FC33E54418
Authority key identifier: EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject info access: rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
Signing time: Wed 05 Mar 2025 21:16:09 +0000
ROA not before: Wed 05 Mar 2025 21:11:09 +0000
ROA not after: Wed 04 Mar 2026 21:16:09 +0000
asID: 52916
IP address blocks: 2804:2b10::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ef:a1:f9:82:78:ae:99:e9:27:f4:92:1f:92:76:fc:33:e5:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EF908A177FAF3EDEEAF39EF1BC3B208225302E77
Validity
Not Before: Mar 5 21:11:09 2025 GMT
Not After : Mar 4 21:16:09 2026 GMT
Subject: CN=C1DE905C7F69ED44B830950E5765272EB37F4AC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:01:26:d5:78:cc:30:e2:55:07:b1:88:e7:01:
98:e0:3c:15:c5:63:c0:33:15:1c:a1:52:ec:95:17:
ce:1b:5c:71:12:db:00:fa:7b:d7:8f:19:5a:73:b3:
3a:a6:de:01:ac:08:40:43:24:92:13:7b:b8:82:8f:
13:a5:52:73:62:bf:52:72:e2:32:0c:2a:fe:d9:1d:
73:be:c8:7b:6a:32:5a:3b:33:91:07:de:7c:65:65:
09:e1:62:f6:19:1e:68:f6:b9:7a:95:f5:3a:50:0f:
f5:2c:76:bd:67:30:85:ce:0c:94:0e:a3:93:4c:36:
59:64:ff:ba:93:2c:3c:5e:36:e2:54:7b:63:5f:ac:
a1:1e:44:cd:8f:69:e2:61:de:a7:80:45:83:11:28:
69:9d:90:ff:10:60:a2:b0:c2:1b:c4:b1:d6:8c:d0:
12:52:a1:fe:66:47:f3:33:b7:82:0e:4b:67:92:18:
05:71:00:38:d0:aa:97:74:5d:9c:cd:e4:08:66:1b:
9e:a3:b5:d6:e8:59:a1:e3:3f:c1:36:84:42:d9:46:
dd:50:42:13:cd:7d:9b:f0:f0:91:e9:41:3a:c3:0b:
62:2a:f0:30:29:f7:76:f2:62:39:d6:e6:4d:36:f5:
94:ec:15:f6:84:00:a8:6a:10:35:39:a4:1b:27:99:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DE:90:5C:7F:69:ED:44:B8:30:95:0E:57:65:27:2E:B3:7F:4A:C0
X509v3 Authority Key Identifier:
keyid:EF:90:8A:17:7F:AF:3E:DE:EA:F3:9E:F1:BC:3B:20:82:25:30:2E:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EF908A177FAF3EDEEAF39EF1BC3B208225302E77.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/E1V9e8PK8acFphkv2rxJJVoaTR4r3aVyCfHVzrq3uh4j/1/323830343a326231303a3a2f33372d3337203d3e203532393136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b10::/37
Signature Algorithm: sha256WithRSAEncryption
56:dc:17:2e:c1:72:72:ca:ba:95:cd:55:4f:44:47:b1:24:0d:
df:ae:bb:be:3a:9a:b3:42:a7:b4:6e:5e:8f:c9:13:a4:3b:e6:
ed:8a:8f:b0:ed:2a:f5:1c:67:32:26:b2:d4:3e:a9:24:37:d5:
83:50:2f:9d:e0:f1:43:1a:4b:c4:c1:8a:53:f7:b1:dd:7d:3b:
8c:d6:fa:9b:85:65:db:a7:48:45:e5:38:dc:31:0a:00:09:ab:
ba:82:6a:ba:46:73:e6:27:33:fe:b9:30:42:46:a4:83:50:cf:
cc:2c:ba:89:42:04:2b:3f:d9:2a:1e:32:a8:8b:06:83:49:2a:
ea:89:27:25:c4:dc:00:2f:50:d4:9c:6c:ba:95:c5:2a:2d:68:
88:30:08:96:46:44:45:ac:45:c0:8c:aa:2e:96:4a:57:96:87:
35:4c:87:9a:f3:00:44:9f:91:57:ef:c7:78:d0:97:e0:7f:7c:
26:cd:39:9f:01:55:de:5d:5c:5b:8a:39:e3:ee:80:c3:71:45:
92:8e:9b:7e:7f:06:70:45:c8:50:99:c2:23:2b:ec:02:5b:8f:
25:6c:2b:b4:9b:83:9b:1b:8e:2c:1b:2d:39:92:ce:bb:51:1f:
e7:af:0a:95:c5:ac:a3:03:4f:2d:1c:b8:0f:c0:d1:2b:93:98:
bb:29:ce:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:59 2025 by rpki-client