Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa
File: 323830343a323964303a3a2f33332d3333203d3e20323634303336.roa (raw, json)
Hash identifier: Dt+Ka8wWfkBtvWr4zzOGLk734KUFUE5zZba8pqW2fAw=
Subject key identifier: 61:A0:F5:6D:BB:38:1D:10:A5:F1:F2:99:1C:DC:FE:DD:72:08:68:05
Certificate issuer: /CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Certificate serial: 5C63BB090B3BA12B8B06E7EC0BC123076DCA49FF
Authority key identifier: 8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa
Signing time: Mon 03 Mar 2025 12:19:53 +0000
ROA not before: Mon 03 Mar 2025 12:14:53 +0000
ROA not after: Mon 02 Mar 2026 12:19:53 +0000
asID: 264036
IP address blocks: 2804:29d0::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:63:bb:09:0b:3b:a1:2b:8b:06:e7:ec:0b:c1:23:07:6d:ca:49:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8BCC3BCD747996DEA6D7F16098CF132148801B30
Validity
Not Before: Mar 3 12:14:53 2025 GMT
Not After : Mar 2 12:19:53 2026 GMT
Subject: CN=61A0F56DBB381D10A5F1F2991CDCFEDD72086805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5e:aa:f3:07:d8:33:e5:e0:fa:71:05:69:75:
95:ef:8b:56:67:63:69:a2:a5:89:a5:f0:c9:ea:53:
da:87:e2:e6:4d:c0:c0:99:6d:12:bf:57:4a:db:25:
58:39:cb:91:d0:b9:63:97:ed:99:8f:0d:8f:98:78:
cd:50:5d:67:c8:02:ee:4f:24:42:ca:9b:ef:df:d8:
f9:98:96:bf:47:c5:c3:b0:76:9a:f7:2f:c7:ef:3f:
e2:0e:36:a8:c5:72:7f:17:9e:ba:72:2e:77:c2:af:
c6:2f:14:37:f8:2a:a1:7b:be:60:d9:b0:1b:42:81:
c5:10:3b:bc:92:d1:85:a7:45:f4:47:24:f3:65:3c:
68:2f:b2:85:cf:02:9b:2d:fb:e7:5d:45:b9:fb:4f:
bb:17:87:d9:7c:9c:19:a9:3d:0f:a6:c9:d1:9c:88:
95:0d:dd:39:f3:ce:d0:c3:b2:b0:7c:f2:db:69:b5:
64:f4:4b:fb:2c:ab:e1:f7:36:c2:43:2b:f7:e2:d0:
49:b0:40:9a:85:ed:59:fe:b8:b7:de:41:2c:e8:25:
9d:24:7e:6b:5c:48:74:be:01:58:44:87:56:4c:27:
b0:da:7a:e2:7c:1e:70:d4:38:7b:eb:71:c2:18:19:
2a:5a:7a:dc:f4:6b:8d:57:61:25:21:0f:be:0e:c8:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A0:F5:6D:BB:38:1D:10:A5:F1:F2:99:1C:DC:FE:DD:72:08:68:05
X509v3 Authority Key Identifier:
keyid:8B:CC:3B:CD:74:79:96:DE:A6:D7:F1:60:98:CF:13:21:48:80:1B:30
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BCC3BCD747996DEA6D7F16098CF132148801B30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GBfThanibP9be45pXqsrzTMJbDmBf1ymN45CBDQrmnxb/1/323830343a323964303a3a2f33332d3333203d3e20323634303336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:29d0::/33
Signature Algorithm: sha256WithRSAEncryption
1a:0c:7e:a5:e5:d5:f1:20:a4:d4:6c:86:48:97:cb:38:56:e8:
e0:38:4a:2c:79:27:40:47:9b:df:1c:fa:d0:24:e5:48:98:f5:
c8:61:fd:6a:ab:50:41:3e:64:a4:ea:85:ec:7e:f3:c7:f2:99:
ca:54:14:3b:b3:52:53:70:d2:ff:f8:fa:67:81:dd:db:e3:b1:
24:28:dc:23:b6:13:e6:0a:09:18:49:26:8e:86:52:6c:82:73:
60:2b:b7:d1:54:3b:25:b6:e0:0a:5b:0c:89:46:d9:7b:7b:92:
0b:f8:a6:11:80:8c:84:8f:3f:33:ca:cf:6d:42:58:f6:e5:49:
61:cf:0c:72:4f:4e:1b:6d:e4:9e:ae:25:4f:cb:fc:aa:b4:16:
ee:b2:fd:57:e4:b3:c4:52:ce:2c:c9:de:82:7a:a6:5c:eb:84:
b6:10:c9:fc:7c:31:6c:85:6e:47:62:2e:77:fd:69:84:cc:c6:
69:6d:02:66:0e:a3:48:21:60:7a:aa:c9:5e:c3:c1:9d:9e:1c:
62:ae:91:f1:eb:1d:ab:97:d3:67:34:c3:e9:e7:b5:fd:fb:3b:
05:2c:5c:7e:70:be:18:ce:3a:a7:16:5e:e0:eb:ce:fe:a6:0f:
52:4a:e0:e2:d7:6f:b0:6c:12:7d:eb:f8:84:5d:6b:90:9b:17:
94:24:f9:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:49:50 2025 by rpki-client