Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa
File: 323830343a366139633a3a2f33322d3438203d3e20323730333437.roa (raw, json)
Hash identifier: QiMold+Q6FfmxrIQyG0ui8zmS4zyXfJiTRphg42c1JU=
Subject key identifier: 68:F3:C8:A1:FB:FB:1F:32:1E:75:2C:BD:1F:48:BE:B7:E7:8E:30:6D
Certificate issuer: /CN=59176FF2F9921A875762F2166723B5CD48599A49
Certificate serial: 2A6E52E209C03D77E549A837B9010145DC308266
Authority key identifier: 59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa
Signing time: Thu 06 Mar 2025 23:46:08 +0000
ROA not before: Thu 06 Mar 2025 23:41:08 +0000
ROA not after: Thu 05 Mar 2026 23:46:08 +0000
asID: 270347
IP address blocks: 2804:6a9c::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6e:52:e2:09:c0:3d:77:e5:49:a8:37:b9:01:01:45:dc:30:82:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59176FF2F9921A875762F2166723B5CD48599A49
Validity
Not Before: Mar 6 23:41:08 2025 GMT
Not After : Mar 5 23:46:08 2026 GMT
Subject: CN=68F3C8A1FBFB1F321E752CBD1F48BEB7E78E306D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:95:08:95:d8:a5:55:02:36:ee:06:6a:9e:83:
4d:a3:81:2a:44:81:aa:97:97:d8:cc:46:43:ad:d0:
a4:f9:5b:72:5a:41:4d:7e:63:f4:5f:56:bc:bb:3b:
93:2a:24:b7:a8:91:79:62:29:d3:b3:92:89:1b:45:
bf:1e:d8:c8:36:87:35:23:7e:23:04:6e:48:e9:ef:
5a:76:73:b0:70:9c:7a:de:19:1a:0e:f3:21:a1:9a:
af:8e:9f:d9:cc:c8:6c:53:25:56:5d:06:79:76:cf:
4b:82:f1:89:9a:20:91:72:cd:bd:86:90:8a:bd:59:
5b:c3:41:68:91:27:7e:fc:9c:36:29:90:64:a9:98:
1f:a7:8d:3d:ff:1e:15:4b:59:21:e1:23:bc:a7:35:
73:c9:c0:3d:43:2f:81:4c:63:9a:a2:57:80:4d:46:
2a:86:52:f9:1a:8d:a6:70:fb:bd:2d:2c:30:36:bd:
9d:d2:9f:0f:b7:a4:68:07:21:48:cf:56:40:69:87:
a8:b7:32:9b:b6:30:40:f9:c2:21:83:4d:62:6b:20:
9f:cb:23:67:01:86:5c:09:99:05:ef:15:63:c3:4f:
60:a9:72:6e:b7:cc:f0:3e:d7:57:6c:e3:9f:8b:37:
47:1d:1f:5a:23:92:e8:e5:0c:25:57:0e:41:f1:2b:
e2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F3:C8:A1:FB:FB:1F:32:1E:75:2C:BD:1F:48:BE:B7:E7:8E:30:6D
X509v3 Authority Key Identifier:
keyid:59:17:6F:F2:F9:92:1A:87:57:62:F2:16:67:23:B5:CD:48:59:9A:49
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/59176FF2F9921A875762F2166723B5CD48599A49.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/59176FF2F9921A875762F2166723B5CD48599A49.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/1/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6a9c::/32
Signature Algorithm: sha256WithRSAEncryption
02:1c:1f:8b:49:8c:41:ce:64:76:28:bb:d0:8b:ce:56:50:b2:
c2:57:76:e0:e2:97:24:76:e7:52:43:94:0e:86:9f:0d:8d:22:
71:a2:e6:26:23:e8:cf:cd:04:ef:34:fa:ed:f1:e0:c4:22:b6:
2f:05:54:eb:fa:99:de:58:ec:bb:02:be:f9:02:e9:3b:bf:71:
4b:04:c2:05:a0:70:69:35:34:a9:93:0e:dc:dc:d3:21:8a:bd:
7f:70:f6:9c:b4:5c:e2:bd:34:44:8e:56:d4:35:f4:fa:48:b7:
e6:4e:70:ed:53:28:16:c7:53:04:4f:d6:59:8f:80:8b:ec:17:
48:20:02:e8:9b:d5:90:97:98:cd:e0:4c:ad:c9:f6:09:e8:1c:
8f:6c:51:16:1b:67:72:d9:2e:54:33:0c:55:92:5a:41:55:c8:
05:bc:00:4c:ff:09:be:94:82:42:e6:3e:89:f1:b9:af:ec:53:
76:45:84:0f:53:eb:28:ed:43:2b:36:8e:02:52:cd:e0:b5:92:
30:71:c4:6c:94:71:f2:37:d7:39:c9:91:32:53:30:6f:14:cf:
75:79:33:84:b9:7e:23:bd:e9:0c:32:a0:5e:e8:eb:d4:94:c6:
2c:a8:04:e4:44:ab:fe:2b:ed:13:f1:dd:dc:c1:45:60:93:74:
4e:16:84:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:36:48 2025 by rpki-client