Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33322d3332203d3e20323632383735.roa
File: 323830343a3939303a3a2f33322d3332203d3e20323632383735.roa (raw, json)
Hash identifier: rq71srz7x8OhzTX6gHpVnQ+bOWJvZIwafTBmoUuKRGI=
Subject key identifier: D8:1F:21:79:38:17:54:92:E7:33:EA:B6:71:DE:FF:F3:AC:08:94:DD
Certificate issuer: /CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Certificate serial: 3DAD06560D61843816775712C69866C38B7AB82E
Authority key identifier: EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject info access: rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33322d3332203d3e20323632383735.roa
Signing time: Thu 02 Jan 2025 13:11:12 +0000
ROA not before: Thu 02 Jan 2025 13:06:12 +0000
ROA not after: Thu 01 Jan 2026 13:11:12 +0000
asID: 262875
IP address blocks: 2804:990::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:ad:06:56:0d:61:84:38:16:77:57:12:c6:98:66:c3:8b:7a:b8:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41
Validity
Not Before: Jan 2 13:06:12 2025 GMT
Not After : Jan 1 13:11:12 2026 GMT
Subject: CN=D81F217938175492E733EAB671DEFFF3AC0894DD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d6:21:71:d5:08:3a:5b:a2:20:86:c2:4d:5f:
50:78:36:62:97:fa:73:1f:ae:61:49:f5:23:9e:62:
ce:e3:a6:51:03:36:d9:ba:f0:e5:95:e1:84:88:43:
75:a9:db:b7:a2:82:66:8d:c8:cb:e5:71:59:44:d1:
9d:06:38:de:f0:8c:58:78:f0:25:bb:73:ab:15:f9:
93:20:52:03:90:eb:ca:35:e7:70:41:3c:9f:f7:f1:
30:41:8f:fb:80:96:9b:b0:bf:46:6c:85:fe:cf:51:
20:d3:f0:ed:9e:26:11:bb:1b:95:55:1a:64:9b:53:
35:b3:ad:73:84:d8:f5:bb:99:1f:0b:8e:04:4b:fe:
93:3a:6f:66:7a:ef:09:3f:02:42:2c:13:00:c0:25:
42:f9:e3:f1:7b:b4:a3:6c:84:a2:a9:90:e8:2f:aa:
7d:75:7f:57:b9:5b:bd:56:7c:c5:c4:20:4e:a2:90:
b5:50:ba:88:e5:06:c7:94:74:be:9a:1f:5d:67:2d:
a0:04:ba:6b:07:62:59:49:02:10:98:db:e0:5e:03:
49:f0:30:7e:1e:c7:0a:9d:69:93:ad:a7:1b:a6:84:
d2:a0:f7:b8:64:42:b9:7d:cf:6e:dc:c6:0b:e4:a2:
89:d9:c8:be:89:77:77:bf:6e:c3:0f:2f:9e:42:28:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:1F:21:79:38:17:54:92:E7:33:EA:B6:71:DE:FF:F3:AC:08:94:DD
X509v3 Authority Key Identifier:
keyid:EA:C1:26:E2:06:D0:84:30:A1:3E:DA:2D:FE:A9:B6:F9:C6:1B:BF:41
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/EAC126E206D08430A13EDA2DFEA9B6F9C61BBF41.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/H7Zct25mSfitRpBN2oXhLPG5njvZTQskH8L2nNHvhaZe/0/323830343a3939303a3a2f33322d3332203d3e20323632383735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:990::/32
Signature Algorithm: sha256WithRSAEncryption
2d:4f:88:f4:0a:0e:15:09:03:75:fa:dc:5e:52:2c:7a:3c:8f:
bd:34:22:70:af:f5:f5:33:7a:1a:c4:1c:4a:8e:a8:9f:05:fb:
fc:cc:e5:91:77:c7:01:06:24:b2:e8:f6:f6:ba:fa:09:b5:b2:
d4:85:2f:70:9f:db:ae:69:7f:93:f8:fd:88:60:a6:37:ae:47:
22:ba:3e:e5:ac:99:cb:24:c9:32:21:df:d2:9f:ff:49:a8:5e:
25:56:21:cc:35:da:6c:06:21:ad:d9:9e:23:3f:3b:cb:1e:c8:
6c:c8:4b:97:83:71:85:ad:ba:52:3e:6b:cf:24:34:93:c6:a8:
2e:0d:29:ab:a0:4e:b2:4a:0b:bb:8c:76:0c:74:16:26:56:01:
ca:d6:d3:6f:f9:bb:3d:e4:1b:5d:a6:86:a1:0a:0f:55:51:61:
ff:e7:91:16:4b:d1:e3:fe:4b:6e:3f:77:59:35:97:82:a1:39:
43:67:cb:8b:06:83:ec:b9:72:88:84:c9:73:0f:f8:dd:08:db:
e5:80:78:58:3a:4a:d3:29:f5:cb:24:47:e3:fc:bb:1f:e9:d6:
c2:92:06:89:94:6d:33:9c:2f:01:35:9b:3e:27:7a:9f:8b:94:
5f:64:a5:c0:30:8c:c4:07:08:01:b2:e3:8e:a5:10:95:d6:1d:
37:6c:70:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 16:45:28 2025 by rpki-client