Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/323830343a383362343a3a2f33322d3332203d3e20323732323133.roa
File: 323830343a383362343a3a2f33322d3332203d3e20323732323133.roa (raw, json)
Hash identifier: RIThnlzjGlJSb+dPp0OaBdubDY7DZVUutWWJRJ7gipk=
Subject key identifier: 86:EB:1D:0D:72:6B:06:42:39:B1:63:F2:94:EA:14:89:35:22:3E:EF
Certificate issuer: /CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Certificate serial: 0EE378DEC3BF54387ECD3AA1506C8BEAED8183AA
Authority key identifier: A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject info access: rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/323830343a383362343a3a2f33322d3332203d3e20323732323133.roa
Signing time: Fri 21 Feb 2025 13:17:13 +0000
ROA not before: Fri 21 Feb 2025 13:12:13 +0000
ROA not after: Fri 20 Feb 2026 13:17:13 +0000
asID: 272213
IP address blocks: 2804:83b4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:e3:78:de:c3:bf:54:38:7e:cd:3a:a1:50:6c:8b:ea:ed:81:83:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A76E71BAF221AF061FEA4F46F0FEC224EFFBE576
Validity
Not Before: Feb 21 13:12:13 2025 GMT
Not After : Feb 20 13:17:13 2026 GMT
Subject: CN=86EB1D0D726B064239B163F294EA148935223EEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ad:ec:ad:9b:30:94:91:72:36:d3:5a:48:cb:
6b:5d:6f:93:d2:46:a6:2e:fa:d1:50:18:a7:a8:3d:
c1:28:a2:8b:6e:a8:9e:47:7b:7e:67:ae:d1:5b:da:
a0:05:f1:92:de:6c:a2:42:67:a5:0c:ca:9d:24:52:
81:6f:ee:5f:63:51:9f:55:09:68:eb:81:e6:e7:83:
55:7a:1a:d6:04:1a:42:16:9f:e2:e7:91:38:c0:85:
92:f6:c4:6f:56:98:54:75:b7:1e:28:a1:db:35:8b:
ff:d0:22:c1:3e:e9:1e:3b:a8:77:d4:18:da:16:cd:
fc:90:ea:3b:21:3d:d1:d3:a6:5f:11:37:96:b2:31:
8d:3d:6c:d9:99:ad:70:69:e9:92:a9:5f:d2:84:ce:
51:79:19:f9:9a:c9:65:2a:ff:0c:1b:79:eb:42:63:
15:d1:fe:f3:e7:52:5f:58:7e:83:07:35:c9:9f:f3:
ac:c8:3d:f4:a2:be:3b:29:0c:9f:7a:4f:a0:07:68:
33:ae:b8:f8:3f:71:63:2e:61:0f:cb:99:46:8f:4b:
85:b6:46:82:43:c9:ad:27:36:71:5a:44:25:b6:6d:
17:81:97:64:fc:c2:31:52:eb:30:64:c0:ab:fd:96:
11:92:ff:6c:61:13:bd:bc:c3:6e:9c:56:d6:f7:64:
08:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:EB:1D:0D:72:6B:06:42:39:B1:63:F2:94:EA:14:89:35:22:3E:EF
X509v3 Authority Key Identifier:
keyid:A7:6E:71:BA:F2:21:AF:06:1F:EA:4F:46:F0:FE:C2:24:EF:FB:E5:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A76E71BAF221AF061FEA4F46F0FEC224EFFBE576.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/ExfTQ1DWWJYPFL6hqcuuG2RuWUc9S3xKXTDDx8ik6eif/0/323830343a383362343a3a2f33322d3332203d3e20323732323133.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:83b4::/32
Signature Algorithm: sha256WithRSAEncryption
9c:87:03:19:47:4f:1d:d0:e2:cc:1a:33:01:20:b7:1e:06:9a:
15:25:8c:41:fa:c2:13:46:6f:fe:2a:b6:76:a0:4c:85:84:73:
00:24:9a:d3:40:eb:f7:9d:f2:77:9c:20:37:de:5d:26:8a:51:
8b:47:21:16:d9:02:13:c6:5e:54:6b:a0:b3:5f:3c:07:62:c9:
1f:4c:c1:7d:95:58:05:3a:e3:00:55:36:63:2a:24:ff:49:34:
d9:70:d1:d0:80:e9:51:4f:33:61:45:61:0d:87:41:21:dd:76:
d0:18:ed:b8:e8:66:59:48:1f:21:68:17:cb:b7:e2:2b:c4:25:
f8:3a:dc:a0:6f:bb:25:04:0f:ca:80:af:be:4e:9b:ba:75:0e:
3b:7e:b6:a5:63:3b:f9:45:81:85:ff:d5:03:3d:1f:d8:e8:93:
15:21:ea:b8:9c:79:10:4a:1c:59:52:da:29:29:fe:f0:50:3a:
94:00:51:0d:08:dc:61:a2:df:ed:25:02:4e:24:d7:a5:6a:6e:
a0:0a:7b:c6:4a:05:cf:7c:d7:20:13:4e:04:ce:a0:60:a1:c0:
80:5e:0b:56:0a:8f:a6:85:08:3a:df:bd:21:ac:b0:3e:66:55:
1a:3e:45:21:07:f9:c0:73:92:48:51:31:ea:c1:5c:d1:62:38:
e3:72:bd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:52:17 2025 by rpki-client