Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa
File: 323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa (raw, json)
Hash identifier: /Pup/XoLS9e2luU7TjN/GNSetL61R0evbOTeWJ8B2cg=
Subject key identifier: 42:92:CF:E5:66:87:E7:52:44:FB:FF:13:02:A2:B5:DC:64:2D:6B:6C
Certificate issuer: /CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Certificate serial: 6A7ADE1BDEE054BCFFB233BE3CB8C2760C11FAC0
Authority key identifier: 99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa
Signing time: Fri 31 Jan 2025 18:37:52 +0000
ROA not before: Fri 31 Jan 2025 18:32:52 +0000
ROA not after: Fri 30 Jan 2026 18:37:52 +0000
asID: 272164
IP address blocks: 2804:82e8:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:7a:de:1b:de:e0:54:bc:ff:b2:33:be:3c:b8:c2:76:0c:11:fa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=999BAB4331AD91DD7B08643BF9CAB750C9C37E76
Validity
Not Before: Jan 31 18:32:52 2025 GMT
Not After : Jan 30 18:37:52 2026 GMT
Subject: CN=4292CFE56687E75244FBFF1302A2B5DC642D6B6C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7f:2f:2a:07:b5:75:1d:fa:ce:37:9c:1a:5a:
7f:8c:6d:a9:59:0d:16:b4:31:c1:7b:04:cf:28:63:
dd:55:f4:78:14:b9:e1:ff:04:26:04:c1:19:92:25:
8a:7e:3c:8e:d3:ab:31:ca:d1:3a:ab:b8:28:b8:67:
82:3f:f7:90:4b:8c:8a:87:ee:1d:b6:83:68:92:92:
8a:80:49:71:77:3c:66:41:e3:05:aa:50:b6:a2:10:
9f:c2:25:88:00:d4:e3:37:d9:0e:12:c0:a3:60:3f:
f1:f9:49:08:ee:24:3d:22:10:2d:7b:03:9a:ae:80:
cf:d8:71:b9:98:e7:1e:0c:57:df:7b:fc:0a:57:93:
d6:32:09:a7:89:f9:43:f1:46:49:63:25:b2:f2:78:
33:f0:73:0f:d7:32:4a:96:d0:48:9a:4d:56:18:b9:
10:02:b0:1e:44:36:6e:31:79:1d:0a:f9:66:31:5e:
65:94:a8:c0:98:f0:4c:c1:9e:f9:71:b2:39:28:be:
60:bc:a6:82:52:f4:7f:58:e9:7b:82:10:8a:20:4d:
ca:ee:93:16:a4:a2:14:64:71:49:f7:78:3e:22:29:
97:ed:51:83:4c:e9:65:e5:90:7e:bb:6f:85:7c:7c:
11:25:38:20:5d:19:51:fc:d0:33:6e:09:c1:dc:82:
7b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:CF:E5:66:87:E7:52:44:FB:FF:13:02:A2:B5:DC:64:2D:6B:6C
X509v3 Authority Key Identifier:
keyid:99:9B:AB:43:31:AD:91:DD:7B:08:64:3B:F9:CA:B7:50:C9:C3:7E:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/999BAB4331AD91DD7B08643BF9CAB750C9C37E76.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ENAsAeBvqssLvgXkM9jr3zTTCTysa5voNYz4bu4Vtmbj/0/323830343a383265383a633030303a3a2f33342d3334203d3e20323732313634.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:82e8:c000::/34
Signature Algorithm: sha256WithRSAEncryption
c5:15:b8:65:7d:65:78:bd:c5:da:49:b0:5f:12:2e:fb:76:3e:
11:cc:0a:c1:86:1e:db:49:fa:eb:7c:cc:68:7d:97:79:81:b7:
21:7d:b6:32:56:8e:01:94:3a:b4:c5:d6:67:89:e4:f4:e6:cd:
68:8a:2f:3f:8c:62:64:9e:2f:b1:e4:55:96:15:94:af:b3:5a:
e6:2c:9e:e3:ff:7d:c3:41:94:9e:13:9d:68:29:c8:9e:ab:33:
c3:65:44:36:02:e9:00:91:43:59:04:7c:e7:8a:bf:28:4b:14:
03:4b:f2:19:6e:f3:6b:0c:d9:a9:6c:14:71:4c:75:58:e0:a1:
eb:13:83:bb:ba:93:e7:10:53:0a:5a:1d:1d:e6:4b:4b:30:a0:
87:b9:cd:15:0a:b4:c0:cb:0e:d9:9a:e7:5f:58:cb:d3:84:94:
41:10:e5:3c:bf:21:ff:21:54:47:2c:01:97:33:90:1a:97:d8:
47:4e:64:ba:a9:c3:5d:9d:cb:21:f9:12:97:33:2f:08:19:d9:
25:27:e5:5f:39:32:a4:32:f9:27:b6:c0:5b:70:f9:e6:e0:0c:
56:8c:40:32:77:d2:9c:9f:e5:5e:c3:64:fe:8f:40:2d:cc:ac:
26:90:c6:e3:01:13:b1:f3:7d:fe:9c:84:b7:d5:bb:77:0c:ba:
fa:f7:5d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:32:46 2025 by rpki-client