Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
File: 323830343a3362303a3a2f33322d3438203d3e203533303632.roa (raw, json)
Hash identifier: wb+yMRRMoe3vqgvN8sGsZ3caKzLNZBIoS4PvNgt+nIQ=
Subject key identifier: EF:7A:D0:B5:B9:5B:8B:34:E4:83:D6:43:38:86:88:02:08:0D:B0:D5
Certificate issuer: /CN=174E7897062398E9506F0862FA46597DF937825D
Certificate serial: 26A8CBF01303FF90A2A9036022461E38D9F3121F
Authority key identifier: 17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
Signing time: Mon 10 Feb 2025 19:10:08 +0000
ROA not before: Mon 10 Feb 2025 19:05:08 +0000
ROA not after: Mon 09 Feb 2026 19:10:08 +0000
asID: 53062
IP address blocks: 2804:3b0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:a8:cb:f0:13:03:ff:90:a2:a9:03:60:22:46:1e:38:d9:f3:12:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174E7897062398E9506F0862FA46597DF937825D
Validity
Not Before: Feb 10 19:05:08 2025 GMT
Not After : Feb 9 19:10:08 2026 GMT
Subject: CN=EF7AD0B5B95B8B34E483D64338868802080DB0D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:45:b5:cc:85:7e:5f:46:65:e7:89:c2:23:56:
63:ad:a6:3b:95:c5:37:8f:2a:fe:dd:ce:07:8c:69:
c2:72:0d:55:5f:57:e5:e5:2e:43:0a:4b:38:ff:35:
56:d3:dd:f8:0d:c0:95:5d:56:5b:d7:82:56:0f:b2:
27:00:a0:f9:95:b7:fc:35:0e:99:75:eb:66:cf:9f:
c8:b0:3f:42:85:d4:93:6a:1b:17:c2:d1:7f:6b:5e:
a9:d6:9f:50:50:b8:90:bd:cf:df:59:42:74:07:5c:
19:a9:a2:63:32:ed:a3:5f:1e:31:6d:60:42:f4:38:
d3:7d:2f:da:de:dc:b0:78:42:4f:b0:43:63:7a:23:
1a:45:94:f1:87:b1:d5:84:e5:e5:c3:ce:9e:af:c9:
29:3b:13:02:46:6e:c8:61:4c:39:fd:bb:d8:8a:07:
03:b5:12:da:a1:a3:77:96:fe:39:5f:36:6c:3f:2f:
b3:bf:40:4b:ce:ae:e4:0e:f1:bc:1a:07:07:3d:99:
80:06:97:0d:55:96:d4:2e:e0:da:c0:26:85:88:8f:
ec:48:a8:90:4e:ca:3b:93:95:33:81:36:f6:ad:38:
29:39:22:0e:38:57:5d:ff:76:14:f8:48:8f:bc:d4:
e5:e3:bd:e5:f7:70:a9:0b:99:42:b5:72:f8:47:0a:
4e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:7A:D0:B5:B9:5B:8B:34:E4:83:D6:43:38:86:88:02:08:0D:B0:D5
X509v3 Authority Key Identifier:
keyid:17:4E:78:97:06:23:98:E9:50:6F:08:62:FA:46:59:7D:F9:37:82:5D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/174E7897062398E9506F0862FA46597DF937825D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/174E7897062398E9506F0862FA46597DF937825D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/1/323830343a3362303a3a2f33322d3438203d3e203533303632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3b0::/32
Signature Algorithm: sha256WithRSAEncryption
60:fc:f9:32:ef:5b:c0:47:43:cf:be:e1:45:09:2d:68:44:42:
bf:b3:54:f8:56:ee:a6:ab:0c:42:a8:d6:df:eb:62:18:8a:ed:
96:c0:0a:cf:60:ff:8e:c3:f1:22:22:20:4d:75:b2:b5:e9:d6:
75:b5:3f:ec:33:42:ea:74:1e:90:f6:06:6d:23:c0:3b:17:b8:
33:ab:aa:c8:c0:88:22:e9:63:c3:d0:e9:99:a9:2e:1b:f9:f8:
ac:07:e3:a8:69:cc:8b:43:b0:9b:66:50:70:b2:5a:93:1a:90:
cd:a6:45:e8:7c:ce:35:00:24:4c:2f:6f:f4:60:21:ac:be:0f:
77:f0:89:89:1a:64:91:4e:d2:c3:36:ee:98:94:ba:48:11:61:
c1:c5:e3:d9:1f:c2:e9:3c:42:11:d9:82:1e:69:2b:df:1c:00:
e5:e0:6e:40:3c:69:7a:6c:24:71:29:69:49:d6:f1:39:63:21:
ff:59:f7:4f:ba:c5:53:d7:e3:02:46:9d:c2:ce:da:0d:d5:03:
ff:5d:47:18:a1:a0:3f:4b:db:0a:38:fb:87:f5:4e:83:b1:8e:
c4:76:e9:b7:06:7b:c3:e4:bc:5d:25:01:51:e0:92:4d:84:c3:
31:39:c5:b8:d8:4c:d8:5f:0f:c7:46:2b:5d:3b:61:ec:23:53:
99:44:dd:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:12:20 2025 by rpki-client