Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
File: 323830343a3632383a3a2f33322d313238203d3e203533303239.roa (raw, json)
Hash identifier: wXzHyexM8HZC0ahdh68QW2mTL8oWKucBoRBb4ywNBSU=
Subject key identifier: 70:52:CF:A1:A3:26:3C:AC:19:16:ED:CF:70:4F:9E:E2:7D:4A:D6:4A
Certificate issuer: /CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Certificate serial: 73E818CF9BC94C759ED955BBE6ECF8943957B7AC
Authority key identifier: CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
Signing time: Thu 06 Mar 2025 14:53:30 +0000
ROA not before: Thu 06 Mar 2025 14:48:30 +0000
ROA not after: Thu 05 Mar 2026 14:53:30 +0000
asID: 53029
IP address blocks: 2804:628::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:e8:18:cf:9b:c9:4c:75:9e:d9:55:bb:e6:ec:f8:94:39:57:b7:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CD119443A2689BA4FC616BCD6929E636B5032FC0
Validity
Not Before: Mar 6 14:48:30 2025 GMT
Not After : Mar 5 14:53:30 2026 GMT
Subject: CN=7052CFA1A3263CAC1916EDCF704F9EE27D4AD64A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0d:d3:8b:45:f9:25:6e:15:4e:1f:58:37:35:
ad:4d:47:e5:48:6f:09:18:6b:a8:f6:fa:ba:82:fc:
38:a5:14:72:41:9b:97:a6:84:17:e6:91:cd:f8:12:
ea:c4:ab:62:05:06:ad:a5:28:e2:ff:dd:b1:d1:d3:
49:33:ed:75:d2:99:ad:03:1e:87:d2:af:ab:88:4c:
55:a6:f6:eb:99:38:b9:a4:fe:6d:f3:86:9d:8a:70:
cc:93:ea:23:d5:33:7e:2e:5b:81:04:11:b0:0a:f5:
28:4e:e5:47:3a:21:fe:44:e2:ae:01:8f:88:a5:7a:
76:1f:92:bf:d5:b5:dc:7d:bd:f4:b4:87:b8:78:82:
81:7e:2c:17:fb:38:df:8f:fc:4b:9f:25:c2:93:59:
5f:f8:8d:9a:73:62:76:50:37:0d:55:e8:80:cd:57:
af:62:e0:5d:1a:be:4c:9d:53:c9:e6:e3:f9:cb:18:
5f:b3:b1:73:69:84:0c:10:d3:a3:6a:fb:34:92:62:
8c:7a:49:25:9e:07:dc:fa:6a:9f:79:b8:b6:8e:78:
4e:65:f8:1d:6b:78:05:15:5b:e6:95:b7:7b:e2:28:
22:a9:ec:39:ad:cb:c1:76:d8:de:94:f4:09:e5:ba:
2c:2f:9f:93:ac:af:92:84:80:36:e2:16:93:d3:44:
e5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:CF:A1:A3:26:3C:AC:19:16:ED:CF:70:4F:9E:E2:7D:4A:D6:4A
X509v3 Authority Key Identifier:
keyid:CD:11:94:43:A2:68:9B:A4:FC:61:6B:CD:69:29:E6:36:B5:03:2F:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/CD119443A2689BA4FC616BCD6929E636B5032FC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H3ZqEMzC9pm2FhV6Zq2XrNzJ1BuBf5NC8Fj4X6KBGVFE/1/323830343a3632383a3a2f33322d313238203d3e203533303239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:628::/32
Signature Algorithm: sha256WithRSAEncryption
65:1f:63:69:9b:91:9d:ab:16:78:ee:bd:2b:fd:1a:de:b0:27:
f4:6c:a0:c8:da:97:c9:cb:f4:6d:8a:2e:45:67:70:e5:34:e1:
7d:9b:40:a0:84:f9:85:45:99:bf:72:03:80:5c:db:76:60:e9:
c0:5f:f8:d2:38:93:f8:ae:01:80:79:2a:21:e9:9b:98:76:7e:
a2:a5:40:9a:0e:26:21:5f:10:54:5a:cd:06:13:e5:4f:f9:0a:
41:74:e2:93:5f:ea:bb:66:90:fd:8c:f0:e4:7f:e1:bb:c6:66:
d6:23:90:5c:aa:39:c8:14:e2:c5:d2:f3:55:05:c0:b6:06:ad:
f8:e3:6f:a7:14:ac:ad:4d:51:e8:b9:3e:fd:f9:9b:a3:39:3c:
5a:f0:aa:b4:19:54:cb:0e:b7:e8:49:1e:bb:75:e9:db:75:26:
05:bc:c8:57:41:12:45:66:17:c3:31:f2:1e:19:dc:9b:13:9d:
8c:4a:f7:0e:3f:2e:39:f3:62:b4:c0:89:62:a1:ab:0c:72:e2:
11:68:b2:03:1e:8a:4c:bd:94:8f:46:a1:f9:88:a4:02:81:b1:
d0:ac:8c:7b:cc:50:ca:74:84:2e:51:92:70:26:7b:6b:f1:d3:
39:a5:c4:99:c1:67:84:d6:fb:37:d2:a7:97:ba:1c:ac:b5:da:
40:ec:b6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:04:54 2025 by rpki-client