Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
File: 323830343a356661633a3a2f33322d3332203d3e20323639313136.roa (raw, json)
Hash identifier: o5hZkt5FndFSWjPK/jGcL17HOQcrS8LF9bjCI24szLs=
Subject key identifier: 47:4B:08:C7:08:9A:B5:66:75:68:49:0B:91:F6:81:28:00:47:CD:11
Certificate issuer: /CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Certificate serial: 6B1404938467A487D101F2CED158A249C398274B
Authority key identifier: 24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
Signing time: Thu 06 Mar 2025 16:13:51 +0000
ROA not before: Thu 06 Mar 2025 16:08:51 +0000
ROA not after: Thu 05 Mar 2026 16:13:51 +0000
asID: 269116
IP address blocks: 2804:5fac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:14:04:93:84:67:a4:87:d1:01:f2:ce:d1:58:a2:49:c3:98:27:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2407042234E050BF2C96DAE987B75BCDB9E2BAC0
Validity
Not Before: Mar 6 16:08:51 2025 GMT
Not After : Mar 5 16:13:51 2026 GMT
Subject: CN=474B08C7089AB5667568490B91F681280047CD11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e2:63:49:b9:14:d6:c7:90:7b:a0:20:05:2b:
15:7c:59:32:31:0b:1f:a4:fe:25:b5:b2:4d:73:a7:
7f:8c:af:01:a3:43:78:f0:67:6a:85:a2:3e:26:42:
8d:e2:37:68:b8:fb:27:a8:70:ec:65:e0:68:9a:fc:
10:8f:79:6c:4b:f6:b6:6a:22:fb:99:1e:38:c8:6e:
0c:5c:cc:e4:61:79:3f:48:3c:3b:04:1d:9e:e5:54:
3e:8c:6a:03:a1:2c:d4:43:5c:54:54:e2:73:94:00:
af:b4:2f:fb:52:2e:8e:4a:4c:11:64:da:ff:6a:4e:
b8:90:b0:8c:20:26:cb:2c:d9:fa:fc:96:7b:c8:47:
b3:00:e0:eb:cc:22:4b:60:59:2a:4d:e2:cb:ab:1d:
5b:19:1b:1a:84:be:40:22:d6:c3:67:d8:33:b3:a5:
cd:f5:2e:0d:e7:77:a8:1b:36:f9:de:25:0a:7a:4e:
5c:c9:dc:73:72:d5:5c:25:ca:6d:4b:52:56:d4:f7:
3b:1f:51:a4:8c:47:e3:fb:b0:69:31:a4:b0:03:77:
59:e6:44:d9:33:8f:db:0a:df:2c:e0:46:e6:da:f6:
b1:38:13:24:a9:7e:1c:35:13:e0:80:53:05:a4:9b:
92:8f:1c:bd:c4:87:15:62:03:dd:05:2e:50:c8:47:
06:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:08:C7:08:9A:B5:66:75:68:49:0B:91:F6:81:28:00:47:CD:11
X509v3 Authority Key Identifier:
keyid:24:07:04:22:34:E0:50:BF:2C:96:DA:E9:87:B7:5B:CD:B9:E2:BA:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2407042234E050BF2C96DAE987B75BCDB9E2BAC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKmVCxGAZPYTzSZkJc26jJXy1Eeb4vnmv2Tbnx2g6TEb/1/323830343a356661633a3a2f33322d3332203d3e20323639313136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5fac::/32
Signature Algorithm: sha256WithRSAEncryption
2d:7a:7b:f8:41:38:06:2e:8f:da:71:5f:78:e2:b2:a6:1e:a4:
f4:f7:a6:34:77:f4:b6:17:86:2c:79:20:39:5d:6b:29:52:8b:
66:8b:ed:a8:37:3a:8f:f3:d5:63:a7:77:45:9a:13:d1:d2:5d:
97:ff:3f:34:79:32:30:ef:68:1c:81:a7:0a:31:23:cf:34:7f:
47:4d:26:3f:81:7e:d9:96:d6:b7:7b:e0:94:4c:f8:87:42:7f:
e2:80:e5:25:d3:82:ba:aa:64:c9:4c:79:8f:04:11:39:74:40:
1e:e1:c6:cb:c4:d8:ad:d8:6a:83:cb:3e:b3:6a:46:2a:53:51:
c9:02:58:04:72:55:86:b8:0f:98:0a:c8:58:ee:a8:1e:91:e2:
d5:fa:02:07:bc:04:18:cf:1e:02:d8:ed:81:fe:50:22:36:c4:
d6:62:60:d7:b5:aa:66:7e:a8:94:7e:8b:c7:dc:2b:a1:eb:35:
1b:ef:7a:c2:62:17:53:81:c1:0e:e6:21:43:0b:04:4e:70:24:
f4:00:63:11:98:00:76:12:de:59:d7:f2:33:1c:bb:a8:6c:1b:
3f:d9:1f:9a:10:0b:97:14:ef:6b:2b:cc:f4:c1:52:a8:a2:28:
e8:04:5b:88:c0:4c:53:3e:93:7d:41:9d:e9:26:6b:05:a0:47:
a9:d9:d4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:30 2025 by rpki-client