Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
File: 323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa (raw, json)
Hash identifier: zPMPELz3viliGV7Mm3jtecbR+RVZtd0ijcahbgq24mA=
Subject key identifier: 39:EA:0B:45:D0:62:1F:90:7C:D7:17:DB:88:CE:B0:71:17:55:F8:AD
Certificate issuer: /CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Certificate serial: 628ECE187AE4F6601B1D3D19893F3E96C3473C0F
Authority key identifier: D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject info access: rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
Signing time: Wed 30 Apr 2025 17:17:50 +0000
ROA not before: Wed 30 Apr 2025 17:12:50 +0000
ROA not after: Wed 29 Apr 2026 17:17:50 +0000
asID: 265080
IP address blocks: 2804:3278:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:8e:ce:18:7a:e4:f6:60:1b:1d:3d:19:89:3f:3e:96:c3:47:3c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF
Validity
Not Before: Apr 30 17:12:50 2025 GMT
Not After : Apr 29 17:17:50 2026 GMT
Subject: CN=39EA0B45D0621F907CD717DB88CEB0711755F8AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:08:2d:0d:92:d1:9c:69:c9:36:58:51:55:24:
a2:44:58:33:60:f2:3a:9c:a5:3e:40:16:c4:1e:fa:
72:6c:fd:d5:d5:f2:4b:68:66:71:49:02:b8:9e:cb:
86:33:f6:d3:8e:45:f4:13:70:0f:3f:ab:5b:f5:26:
c0:96:a3:ba:10:57:b7:65:37:ef:79:aa:77:f4:cf:
4b:4f:ee:f9:fd:28:77:0e:3d:a6:cc:01:7c:0c:43:
a5:d9:d2:22:a4:25:67:a3:58:df:bd:de:1e:42:92:
53:9a:6a:98:fa:56:4f:1c:93:7c:a2:50:f1:7e:c0:
30:1d:c4:44:5f:15:be:db:df:60:93:d3:38:ae:7a:
6c:0f:1c:d0:0a:bf:d5:61:b7:61:a5:7e:6e:1f:8c:
84:1f:b0:0a:c8:2a:c0:28:95:92:46:99:5f:80:1f:
9c:a8:f9:2b:2a:89:60:df:10:f8:f4:6f:b4:5f:40:
50:a7:88:4d:69:c6:ad:02:e7:4d:77:7d:35:bf:0e:
e9:4d:83:27:11:e5:b0:fc:ca:c8:c0:57:68:78:d7:
cd:d3:49:fa:fc:13:a4:12:71:7e:f0:74:d4:39:43:
0a:93:12:5c:d5:52:9c:f1:ce:49:e6:dd:aa:79:6f:
36:d4:e9:89:d2:4e:ce:8e:89:c9:0b:85:9c:c5:0c:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EA:0B:45:D0:62:1F:90:7C:D7:17:DB:88:CE:B0:71:17:55:F8:AD
X509v3 Authority Key Identifier:
keyid:D5:41:B9:E1:C0:D6:AC:17:BF:11:5B:B1:B7:A8:7B:29:BE:DD:B0:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D541B9E1C0D6AC17BF115BB1B7A87B29BEDDB0DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/FFXkLkaKXHerXLpfUAso736rQEenqMpiv6QehFwmU1vW/0/323830343a333237383a383030303a3a2f33342d3334203d3e20323635303830.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3278:8000::/34
Signature Algorithm: sha256WithRSAEncryption
1b:66:42:d4:f4:90:e6:32:50:f3:df:ee:38:11:11:76:b8:de:
9d:84:01:2b:32:6f:6c:26:cf:eb:9e:03:d9:a2:8f:bf:39:dd:
c0:02:81:ba:71:33:93:9d:86:e5:e2:cc:33:49:54:b9:d1:63:
82:50:11:43:be:67:13:8a:37:9f:53:22:27:59:65:f2:af:24:
1f:74:b1:03:6b:1f:ff:96:a6:ed:8c:9a:53:a3:12:98:59:22:
db:b9:e1:ce:33:d7:af:c1:15:ec:99:4d:a9:c4:6b:93:b1:54:
11:69:c7:9d:b4:fc:c7:27:2e:ab:24:93:7e:4a:ec:a3:3f:ac:
06:72:7f:5b:d3:4e:96:30:93:28:41:6e:c0:2d:7d:20:2d:27:
5a:14:44:59:0e:88:ed:7a:32:bc:76:8b:a1:0a:b1:99:0a:dc:
b5:c5:11:c7:27:db:9f:d7:c8:76:52:21:e7:e9:16:d1:cb:dc:
27:ed:df:ee:87:5d:c8:a2:f3:ed:bf:bf:8b:90:d0:b8:59:14:
22:f0:07:6d:bb:c1:92:bd:3d:79:b2:ed:1e:6c:35:86:7e:de:
b8:3e:06:3a:8b:58:57:a1:50:c2:7e:39:84:5b:11:8d:af:e4:
19:e4:e6:1f:2c:3b:d9:a5:cf:70:84:bf:a3:3c:92:06:31:e9:
93:f4:29:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:32:38 2025 by rpki-client