Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3333203d3e20323638333037.roa
File: 323830343a346632343a3a2f33322d3333203d3e20323638333037.roa (raw, json)
Hash identifier: ubGj2knvC79GrBqZqQz29hodaDNZaCe/tfEMF91T3zY=
Subject key identifier: 7D:20:C5:E1:8E:A4:25:FA:73:42:B3:7B:C9:6C:55:54:60:55:9F:11
Certificate issuer: /CN=69823D7679590091792F5A82532AAFFF1FBDB871
Certificate serial: 7F3E9E8AD517934C38BDE1BCECB49821956C0246
Authority key identifier: 69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69823D7679590091792F5A82532AAFFF1FBDB871.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3333203d3e20323638333037.roa
Signing time: Tue 21 Jan 2025 21:15:23 +0000
ROA not before: Tue 21 Jan 2025 21:10:23 +0000
ROA not after: Tue 20 Jan 2026 21:15:23 +0000
asID: 268307
IP address blocks: 2804:4f24::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:3e:9e:8a:d5:17:93:4c:38:bd:e1:bc:ec:b4:98:21:95:6c:02:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69823D7679590091792F5A82532AAFFF1FBDB871
Validity
Not Before: Jan 21 21:10:23 2025 GMT
Not After : Jan 20 21:15:23 2026 GMT
Subject: CN=7D20C5E18EA425FA7342B37BC96C555460559F11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ef:f8:0b:11:00:18:26:da:33:2a:19:d9:69:
02:b4:c4:87:28:ff:7b:92:c8:c0:a4:0f:ef:97:24:
71:b7:29:ec:0b:3f:9d:30:04:79:a6:82:93:40:93:
ba:15:80:ed:f6:19:20:4a:6c:71:e1:fa:cf:d8:1b:
14:75:18:79:87:87:ef:be:c1:b0:96:a7:92:b2:b8:
1c:88:36:63:be:80:db:ba:b0:bd:f4:5e:e1:fe:ca:
4f:a2:06:c1:b8:69:73:4a:04:5c:5a:74:63:4a:d8:
65:a2:b0:8d:ce:f6:4c:2d:4a:26:90:9f:47:89:81:
48:57:91:bb:bf:77:99:af:47:94:6a:0d:ce:6e:79:
8e:1d:bb:4d:66:22:4b:4f:0d:a4:4f:ec:c8:54:6f:
57:cb:0a:fd:60:69:a5:d4:20:ef:ac:ed:d3:20:5b:
c0:cb:ac:bf:eb:72:7c:8c:d0:ed:dc:2f:db:1d:69:
58:da:d0:b2:e6:67:ca:63:e4:47:34:8e:0e:7c:92:
b9:5b:33:73:dd:c1:a5:c8:11:30:8a:62:db:9a:ad:
02:50:8e:32:d9:ef:6c:da:98:4f:f1:7a:6c:aa:9e:
32:92:3f:fb:90:20:d9:58:ca:b7:ba:2c:af:ec:0d:
9b:31:d5:21:44:83:d3:a1:96:2c:d7:98:17:53:51:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:20:C5:E1:8E:A4:25:FA:73:42:B3:7B:C9:6C:55:54:60:55:9F:11
X509v3 Authority Key Identifier:
keyid:69:82:3D:76:79:59:00:91:79:2F:5A:82:53:2A:AF:FF:1F:BD:B8:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/69823D7679590091792F5A82532AAFFF1FBDB871.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/69823D7679590091792F5A82532AAFFF1FBDB871.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpWTeD74K3j671LU6turCxYFZhHi6qPzKLHK9g2E1za/0/323830343a346632343a3a2f33322d3333203d3e20323638333037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4f24::/32
Signature Algorithm: sha256WithRSAEncryption
11:cc:a8:bd:2b:02:0d:1f:bf:4c:1f:4e:08:6d:cb:94:26:38:
80:89:7c:18:6e:66:ec:07:e6:19:1b:ab:20:a6:88:82:48:22:
c7:63:09:1c:bd:9b:d3:fa:6e:86:28:00:bd:e8:a5:01:03:29:
de:bb:18:de:0a:16:be:52:a5:c7:47:30:23:cb:20:ef:5c:da:
c6:5d:a0:f1:d3:fa:e0:85:92:61:87:6b:ab:c5:d5:ec:3a:41:
0c:13:9e:11:60:a2:28:02:7b:f1:f0:ea:ca:e9:56:74:94:68:
1d:98:a3:00:9a:a0:5c:93:1c:9c:16:ce:7f:d6:83:b0:10:46:
81:db:33:3f:40:a8:dd:83:93:60:44:0c:96:5a:f0:95:c5:1f:
35:d2:77:83:53:42:1d:66:be:3f:cc:20:f8:09:45:5e:eb:84:
05:ee:6c:e0:81:07:9a:8d:a8:9e:8f:ac:af:3c:a0:cf:63:40:
90:68:82:92:92:2c:bd:b7:3e:f2:5d:dc:8b:35:df:13:de:c5:
25:29:a0:7d:bb:05:c6:dd:ee:c7:71:59:6f:d5:2b:88:25:99:
62:b3:7e:ce:8a:19:79:e5:e7:3f:8a:50:1b:ab:21:25:58:7e:
88:a8:0d:98:ad:30:50:ba:ad:9f:40:ab:e4:81:11:f0:07:cc:
d3:9d:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:58:45 2025 by rpki-client