Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
File: 323830343a313263303a3a2f33322d3438203d3e20323633343936.roa (raw, json)
Hash identifier: yCRnKe7Cfo4f5weE5YMpi/ZO3/1Psrg+aJlLbswl12Y=
Subject key identifier: C0:A9:F9:09:5A:D5:95:E7:8C:17:69:9C:DC:98:75:F2:E9:5C:01:F1
Certificate issuer: /CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Certificate serial: 747738FAABDC85AC0740E018E415A33B407D00EB
Authority key identifier: 89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject info access: rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
Signing time: Thu 06 Mar 2025 13:33:18 +0000
ROA not before: Thu 06 Mar 2025 13:28:18 +0000
ROA not after: Thu 05 Mar 2026 13:33:18 +0000
asID: 263496
IP address blocks: 2804:12c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:77:38:fa:ab:dc:85:ac:07:40:e0:18:e4:15:a3:3b:40:7d:00:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89F33609E2B118C8ED9A105548D2D01FD6E38729
Validity
Not Before: Mar 6 13:28:18 2025 GMT
Not After : Mar 5 13:33:18 2026 GMT
Subject: CN=C0A9F9095AD595E78C17699CDC9875F2E95C01F1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:0d:84:b3:d7:13:06:a7:2c:3b:32:b5:1a:04:
f3:b2:45:54:34:32:9b:b9:a5:6f:f8:8a:29:af:ab:
5f:68:e2:4f:ec:1a:89:6f:df:76:52:7c:e1:a1:aa:
52:08:bd:7c:85:b5:6b:6a:0f:44:08:9a:e0:8f:34:
3e:92:e9:65:08:e2:4a:98:d3:20:40:3c:46:b7:74:
97:cf:fd:71:2f:fe:47:25:2d:66:b8:b5:2e:c0:06:
b4:13:9b:17:e3:1c:c4:47:3b:28:bc:98:7a:81:8e:
1c:fb:7d:ab:81:77:bf:66:8b:04:db:fe:51:6a:f3:
02:c6:c3:54:2d:43:cb:e5:6d:c2:86:e6:72:98:b8:
d4:ba:1e:24:dd:10:c3:01:8c:36:f2:29:5f:b0:03:
86:b8:6a:a8:b1:92:b7:66:15:2e:fb:16:25:83:51:
95:0a:1e:5f:35:85:70:ee:80:b3:d2:61:8c:65:19:
ba:58:67:ef:7f:d4:dd:7e:e2:bb:3f:bc:86:d1:71:
da:b3:d9:f7:c6:cd:92:75:04:d9:97:04:56:25:1c:
07:81:3e:b6:ce:a9:1c:83:cf:1d:4a:40:0e:c5:2b:
c0:05:2b:33:8f:8e:9a:ec:7e:49:7b:ec:a6:b6:d5:
c0:10:df:1f:ff:ba:9a:fe:b6:95:3c:33:77:52:c0:
38:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A9:F9:09:5A:D5:95:E7:8C:17:69:9C:DC:98:75:F2:E9:5C:01:F1
X509v3 Authority Key Identifier:
keyid:89:F3:36:09:E2:B1:18:C8:ED:9A:10:55:48:D2:D0:1F:D6:E3:87:29
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/89F33609E2B118C8ED9A105548D2D01FD6E38729.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/EpecbeqCJP5RQahhZkz6MYFhk5QBCHALWJCKLL97V8zE/1/323830343a313263303a3a2f33322d3438203d3e20323633343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:12c0::/32
Signature Algorithm: sha256WithRSAEncryption
63:50:2f:51:fb:73:85:21:da:93:57:1b:2f:b9:35:57:a4:09:
25:93:c8:4b:17:74:c3:3f:97:d6:01:83:6c:05:39:9f:fa:a6:
d5:a5:c5:86:8d:a8:b3:43:65:2b:68:bd:ad:66:a6:c3:34:a5:
78:a3:97:8b:b8:2c:4d:f3:5e:d8:65:bb:9e:97:7f:b5:8c:b7:
7c:00:d8:6b:88:b9:c3:53:1a:9a:0c:0b:1f:49:d0:3f:95:c2:
14:24:6d:34:b4:63:8c:55:87:61:d8:eb:8b:2d:2d:05:4d:c9:
6b:ef:24:9c:ce:1c:32:97:83:72:cd:ed:be:15:55:2f:fa:b6:
59:39:00:d8:ad:06:05:f6:16:aa:df:2c:4a:2a:f6:87:16:1d:
70:aa:50:9b:ee:da:0e:0a:7b:f9:70:e0:48:54:a8:44:ec:9b:
c4:9c:ce:f7:76:e1:d5:5a:ac:83:a0:57:06:46:62:50:96:6d:
8d:9e:81:17:91:f8:1b:80:cb:56:16:69:96:9a:9b:f7:39:dc:
42:59:1e:f6:b9:5d:40:30:b0:33:74:f7:cd:2f:d5:36:28:11:
ad:1d:53:35:8f:3e:b2:d6:76:26:ea:1e:3d:c5:19:9d:94:bc:
48:b4:11:11:4c:c8:af:41:89:61:a5:2e:87:20:8f:d0:b7:f5:
99:c0:77:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:15:03 2025 by rpki-client