Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/323830343a333931343a3a2f33322d313238203d3e20323636353233.roa
File: 323830343a333931343a3a2f33322d313238203d3e20323636353233.roa (raw, json)
Hash identifier: P5DChidOiU+1ZsTzxp7CworopmJXdNXIK0mKyIIS538=
Subject key identifier: 13:B7:31:2D:B6:42:AE:C2:DC:62:C3:05:06:DE:B5:CE:E0:44:2D:44
Certificate issuer: /CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625
Certificate serial: 24A27BA8F13396CFECCA2C9623FE4BCD5BA9E1DE
Authority key identifier: D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer
Subject info access: rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/323830343a333931343a3a2f33322d313238203d3e20323636353233.roa
Signing time: Tue 11 Mar 2025 00:03:38 +0000
ROA not before: Mon 10 Mar 2025 23:58:38 +0000
ROA not after: Tue 10 Mar 2026 00:03:38 +0000
asID: 266523
IP address blocks: 2804:3914::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:a2:7b:a8:f1:33:96:cf:ec:ca:2c:96:23:fe:4b:cd:5b:a9:e1:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625
Validity
Not Before: Mar 10 23:58:38 2025 GMT
Not After : Mar 10 00:03:38 2026 GMT
Subject: CN=13B7312DB642AEC2DC62C30506DEB5CEE0442D44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bf:75:15:14:28:40:d8:a7:be:32:8f:b3:06:
16:c2:1a:47:5e:8a:b0:8d:fd:c1:b9:0d:87:34:a1:
90:20:5b:65:06:f6:7b:2e:7f:fd:cf:bc:15:1c:08:
0e:34:2d:77:51:bd:01:f1:77:d1:95:04:c7:da:08:
32:2d:4c:64:47:94:bc:01:89:a8:a2:5d:4d:a2:66:
8f:74:ea:8f:66:45:e9:e6:54:ac:66:e5:53:80:cd:
2d:bf:2a:93:52:0b:11:65:45:31:09:33:eb:81:47:
5f:79:c4:d8:b7:f3:63:0b:12:ca:ee:63:19:7c:f7:
29:d0:d4:cd:01:9b:a1:f3:7e:0a:03:f7:35:6f:1d:
77:12:87:9c:3d:87:9d:62:e4:f6:8f:a2:93:67:50:
4d:cd:d4:c3:0d:fb:d5:a6:ff:d7:2b:0f:d4:0e:9c:
cf:ea:ce:12:5c:2c:1d:aa:7d:07:a4:91:b7:d9:a7:
80:db:bb:4a:11:5c:cb:27:34:54:a2:30:1c:d1:20:
68:97:7b:5f:9d:4e:16:55:0b:48:b9:78:ee:27:17:
79:d7:07:91:0b:53:de:40:42:fa:4a:5a:f2:05:77:
28:b4:53:a9:45:0b:3f:08:78:0b:c7:52:ab:dc:0e:
88:41:9f:4f:58:1c:9f:26:2d:ec:0e:7a:0f:f6:ad:
d3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B7:31:2D:B6:42:AE:C2:DC:62:C3:05:06:DE:B5:CE:E0:44:2D:44
X509v3 Authority Key Identifier:
keyid:D3:E0:F3:C6:14:B2:22:0C:8F:77:C1:52:E1:A6:7F:4B:0B:FB:16:25
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D3E0F3C614B2220C8F77C152E1A67F4B0BFB1625.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnwgmtgFXnyazSMVhX71Lz61u3xtQcR5GMu6icaLNNNK/1/323830343a333931343a3a2f33322d313238203d3e20323636353233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:3914::/32
Signature Algorithm: sha256WithRSAEncryption
14:7c:e4:da:39:da:cf:81:54:ca:37:5d:06:12:99:c9:d9:4f:
00:00:95:99:eb:05:d8:63:58:e1:0e:cd:0c:00:67:53:10:4c:
86:4f:b5:82:94:00:65:53:8d:ee:c7:cf:f4:75:c4:8b:ad:c9:
41:be:cf:e2:99:43:b3:c4:3a:43:d8:2b:2b:4f:ad:33:d4:af:
ce:35:67:1b:bf:f1:7b:2c:85:bb:2d:14:bd:cf:3c:a8:26:7a:
5a:2b:b4:7d:7d:4d:33:48:d6:39:60:13:96:de:ea:2d:97:5b:
51:01:a6:3f:77:d7:59:dc:fd:da:5b:be:75:f1:10:20:74:4b:
b2:a9:38:47:5a:c5:a0:e6:7d:c8:84:33:5b:ba:76:01:d8:99:
ca:4a:6e:4f:51:94:3d:b7:82:7a:7b:90:92:db:82:fb:d5:0e:
62:5e:36:00:ca:32:69:51:1b:90:d3:72:09:8b:0d:44:78:ef:
c4:16:13:92:f5:dc:fd:e2:90:2a:90:0c:13:4b:88:37:8d:9d:
99:ea:63:2f:74:bb:ae:5d:3f:87:9d:f3:7c:c4:91:0b:ef:ed:
c0:8b:4e:50:b3:83:87:48:0f:1e:34:f8:20:51:85:b2:29:ba:
ae:20:24:21:e1:73:1e:05:6a:c0:52:3b:4c:31:29:78:77:ab:
3e:d3:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:09:48 2025 by rpki-client