Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3634203d3e20323632333436.roa
File: 323830343a3831633a3a2f33322d3634203d3e20323632333436.roa (raw, json)
Hash identifier: huKEgQX1Ek7OJPiVvxwRrG3BAw+37vnTSN1R+U1o+f0=
Subject key identifier: 42:D0:04:B0:8B:36:81:CC:F7:26:3C:BC:B9:6C:52:59:16:30:20:65
Certificate issuer: /CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Certificate serial: 320C51F9FF050B6690B3BC4F79162B01B3E5CCC0
Authority key identifier: 17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3634203d3e20323632333436.roa
Signing time: Thu 27 Mar 2025 18:15:38 +0000
ROA not before: Thu 27 Mar 2025 18:10:38 +0000
ROA not after: Thu 26 Mar 2026 18:15:38 +0000
asID: 262346
IP address blocks: 2804:81c::/32 maxlen: 64
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:0c:51:f9:ff:05:0b:66:90:b3:bc:4f:79:16:2b:01:b3:e5:cc:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173B09B782839FC1F053BA3B0D3570BF8FCBF577
Validity
Not Before: Mar 27 18:10:38 2025 GMT
Not After : Mar 26 18:15:38 2026 GMT
Subject: CN=42D004B08B3681CCF7263CBCB96C525916302065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:be:f8:46:bb:71:6e:55:1c:07:d5:2c:e5:21:
d6:f2:28:29:ed:54:4c:dc:db:3f:2b:6c:4f:87:83:
83:d0:fa:31:38:c0:88:0f:20:db:62:cf:03:68:56:
a4:a6:58:5f:88:92:f2:e0:6e:0e:87:79:10:c9:59:
63:77:81:a3:ec:2a:5c:54:87:74:80:18:ac:8b:a1:
ff:6a:4b:dc:d0:b1:11:f7:4c:52:97:91:b3:f2:37:
19:dd:4c:bc:c0:6a:13:40:40:47:6d:3c:71:7f:c2:
76:5f:bb:55:08:1b:93:ac:d6:ce:91:38:f3:10:1f:
00:33:95:3b:cb:27:04:34:8a:7a:96:ab:c8:ee:1e:
c2:1a:d3:89:dd:4c:47:e7:41:86:89:b6:bd:64:33:
36:ae:ca:da:15:8e:01:91:ef:7e:e0:85:c6:9d:01:
db:b9:a3:9e:d1:6b:f5:03:8f:81:a1:6a:b5:60:01:
5f:a2:29:4f:12:ea:05:46:4c:11:e5:51:6f:a7:f1:
45:9f:bd:79:ad:f5:df:3a:51:16:61:69:39:f9:45:
c7:8f:36:e0:c2:4d:64:4b:81:dd:70:38:24:f8:ce:
9a:85:b8:59:84:4e:b5:77:98:c9:25:cf:5b:dc:fe:
ec:8a:4d:fc:f5:59:00:35:c4:ba:73:1d:eb:ea:fc:
80:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D0:04:B0:8B:36:81:CC:F7:26:3C:BC:B9:6C:52:59:16:30:20:65
X509v3 Authority Key Identifier:
keyid:17:3B:09:B7:82:83:9F:C1:F0:53:BA:3B:0D:35:70:BF:8F:CB:F5:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/173B09B782839FC1F053BA3B0D3570BF8FCBF577.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/173B09B782839FC1F053BA3B0D3570BF8FCBF577.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FE6A4NBbkVWHnfGcJ1QRUacz8Nhe92bq7Bf1GshtcqZP/0/323830343a3831633a3a2f33322d3634203d3e20323632333436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:81c::/32
Signature Algorithm: sha256WithRSAEncryption
09:30:63:bd:cd:c1:35:5f:ee:e0:aa:72:bd:8c:4b:04:1d:27:
9c:24:0b:ca:bc:c8:c9:47:cd:4c:e1:0d:fc:91:a7:05:dd:74:
94:3a:aa:f3:cb:f2:78:1e:6e:4c:9d:29:18:96:2a:0d:51:bb:
22:6f:41:2b:a3:aa:7e:55:79:5f:e9:48:c1:fb:66:b8:88:e2:
11:8a:25:49:ed:75:73:17:f6:92:da:42:18:d3:90:03:38:df:
1c:19:06:84:69:43:69:24:8b:dc:2f:76:f5:6e:9b:7a:20:a2:
b2:32:64:98:ae:a2:eb:d4:a2:e4:8f:36:ef:b1:63:35:66:29:
18:88:61:54:34:90:a6:0e:1f:36:c0:bc:d8:10:38:2b:d1:f1:
26:41:27:62:de:0a:cb:f0:6b:80:ae:66:7f:37:15:60:49:a8:
68:44:9f:41:6e:28:fd:a2:a3:bd:f2:82:6c:6d:67:e8:0a:95:
02:ef:f8:91:2e:6a:46:4b:c4:3f:53:95:1a:35:3f:a5:3e:39:
4a:84:a1:b4:ff:c7:33:b4:3c:0d:52:70:c8:dc:98:a1:27:f6:
19:22:49:e2:fc:53:34:62:c5:f9:35:16:ce:85:6f:95:79:8e:
e7:70:9e:d9:bb:e6:ff:1a:54:59:16:2e:1e:68:40:38:9f:3c:
51:b9:fc:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:35:52 2025 by rpki-client