Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa
File: 323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa (raw, json)
Hash identifier: 8uzEAOFvresMWa+IcpJNIsRzTfxOJ+SwY7YtvmWUvxc=
Subject key identifier: F6:A9:75:D3:E1:B9:4E:35:38:32:26:6B:5D:9D:3C:80:0D:15:4E:B1
Certificate issuer: /CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Certificate serial: 3029647814C9A12A78BC0CA659FAA9FEB8CDB83E
Authority key identifier: D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa
Signing time: Thu 03 Nov 2022 18:43:30 +0000
ROA not before: Thu 03 Nov 2022 18:38:30 +0000
ROA not after: Thu 02 Nov 2023 18:43:30 +0000
asID: 269463
IP address blocks: 2804:6504:7000::/38 maxlen: 38
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:29:64:78:14:c9:a1:2a:78:bc:0c:a6:59:fa:a9:fe:b8:cd:b8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59
Validity
Not Before: Nov 3 18:38:30 2022 GMT
Not After : Nov 2 18:43:30 2023 GMT
Subject: CN=F6A975D3E1B94E353832266B5D9D3C800D154EB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:81:7c:1c:71:f6:fe:9e:9b:fd:a7:79:ad:f4:
ce:67:c3:85:58:6c:0b:0a:74:29:43:e1:88:fa:c4:
6a:5a:31:59:5c:fe:c5:2b:22:9d:ef:82:4d:8e:8a:
dd:de:d3:cd:7e:e8:2d:1b:db:87:9c:75:47:4d:57:
6f:0f:8f:74:4a:04:ec:65:02:5a:4d:cf:a6:b1:e4:
fc:a8:a4:5a:da:4e:d5:62:df:07:5f:2a:40:f7:60:
af:11:ab:67:31:b8:4b:d7:9f:91:d7:6c:93:15:cf:
ab:c6:8e:b3:94:82:3c:bb:a1:f6:c1:4b:70:5d:14:
97:7b:90:75:06:8e:c9:ef:da:25:4c:56:cb:62:f7:
8a:8d:9f:65:39:31:0e:de:16:41:06:63:9f:3a:a0:
c3:19:49:c2:8f:33:f4:7f:06:3f:50:c5:b9:cb:f7:
00:0f:ab:31:1a:48:9b:c2:33:dd:5b:a6:bc:9c:dc:
77:70:2c:2c:e6:b1:23:07:3c:23:d5:ae:fc:b0:77:
ad:7c:b3:f8:7e:8a:b0:17:0a:af:96:d6:e5:0f:66:
1f:3e:8c:31:5a:f1:ac:76:59:4b:4c:6c:5a:70:eb:
fe:05:88:a2:83:f5:f1:94:85:b7:59:e8:f7:0f:47:
92:f3:04:e9:c3:14:d6:ef:56:c4:4f:39:3c:64:71:
e4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:A9:75:D3:E1:B9:4E:35:38:32:26:6B:5D:9D:3C:80:0D:15:4E:B1
X509v3 Authority Key Identifier:
keyid:D8:5E:FC:A6:1F:F1:FB:FA:E9:C0:D1:C3:CB:39:B0:63:00:2C:3C:59
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D85EFCA61FF1FBFAE9C0D1C3CB39B063002C3C59.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GiCwbAS1Lng5LoTcqyDrJcqBnv7eWfquLjDj7X1NhM2M/0/323830343a363530343a373030303a3a2f33382d3338203d3e20323639343633.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:6504:7000::/38
Signature Algorithm: sha256WithRSAEncryption
9d:b4:1c:af:1a:1f:fb:8b:05:eb:07:a6:ec:08:e5:47:b8:43:
5b:ae:a9:88:44:5b:15:0f:87:76:3e:96:02:ea:59:d6:21:ac:
ba:3f:93:db:a1:f2:9c:ec:2f:10:86:f3:85:df:b0:c8:db:d8:
9a:93:69:5f:72:26:31:57:ec:af:1f:91:21:c2:1a:79:53:dd:
ce:84:d8:a9:b6:18:20:3f:d8:fd:9d:4f:af:74:8f:9c:d7:a2:
df:45:4a:22:cd:05:c9:e5:51:1f:47:50:57:e4:6f:cc:4e:b5:
c1:c7:7f:82:3b:23:b1:e7:8b:aa:25:11:e8:87:b4:78:60:82:
45:42:2a:41:9d:0f:ac:af:87:0e:89:3b:d1:09:82:ad:9f:b6:
d5:ff:8c:e1:a7:9c:12:1c:2d:9b:d0:1a:0d:ee:70:d8:f8:96:
90:28:5a:55:7c:a9:ff:5a:18:f5:2f:de:01:1c:d9:71:67:a0:
0a:08:89:1f:61:bd:6b:5e:9d:05:54:c1:0c:2d:31:b3:53:1b:
bc:1c:da:6d:f4:42:01:95:4e:8d:cc:51:c6:f8:b5:7f:b8:c7:
d9:31:8d:e4:74:bd:a9:0e:13:3c:16:53:8e:c9:77:3d:1f:64:
9f:c5:ed:71:a7:44:ad:c8:af:87:e3:d4:28:1a:1f:5f:ad:0e:
d6:48:b8:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:15 2025 by rpki-client