Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a633030303a3a2f33342d3334203d3e20323734363437.roa
File: 323830343a393138383a633030303a3a2f33342d3334203d3e20323734363437.roa (raw, json)
Hash identifier: HkotqfIYsNq2XGB1fQE9TbptU7ehMp76SvfmNXP8el0=
Subject key identifier: 2B:31:89:C1:F5:E9:DA:FD:70:50:3E:27:68:DA:DB:A0:E0:EE:4D:51
Certificate issuer: /CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Certificate serial: 73DDFC139F1AB7B50B705E5C075C96A736D57B0A
Authority key identifier: FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a633030303a3a2f33342d3334203d3e20323734363437.roa
Signing time: Thu 20 Mar 2025 15:06:02 +0000
ROA not before: Thu 20 Mar 2025 15:01:02 +0000
ROA not after: Thu 19 Mar 2026 15:06:02 +0000
asID: 274647
IP address blocks: 2804:9188:c000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:dd:fc:13:9f:1a:b7:b5:0b:70:5e:5c:07:5c:96:a7:36:d5:7b:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FE39B00057FECCE0AC6B48381399AE27C177533F
Validity
Not Before: Mar 20 15:01:02 2025 GMT
Not After : Mar 19 15:06:02 2026 GMT
Subject: CN=2B3189C1F5E9DAFD70503E2768DADBA0E0EE4D51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a7:2f:45:04:9e:5a:75:6b:99:1a:06:5d:66:
7b:64:e8:ca:2a:fa:ff:7b:fe:84:3d:9a:00:9e:3c:
07:a0:fe:cc:88:a4:47:4d:87:09:6e:cd:d7:c9:9f:
ba:d0:0a:a1:67:32:62:d4:88:27:26:9a:7a:4f:70:
80:8d:e3:ee:36:e3:f6:3a:76:49:6a:d9:ac:fa:0f:
3c:b7:f3:d0:65:44:96:1d:43:0e:86:0c:32:2a:f5:
74:a2:c0:bf:62:0b:d6:8c:ae:c4:dd:20:51:1e:81:
ad:1f:b3:b2:09:06:53:9f:6d:8c:e7:44:66:02:c8:
b8:81:c5:35:c5:2f:a8:28:2f:33:d2:39:0f:2e:4a:
2a:9c:8e:55:5d:e5:ae:a4:50:6b:f5:35:e7:fd:65:
3c:ef:91:79:1f:b5:2c:41:b1:1b:88:fc:fe:20:07:
97:c5:ad:50:03:45:7f:3a:c4:4f:ea:3b:7a:d0:f3:
02:6d:d1:cf:f9:4d:a3:3b:f4:15:de:dc:e7:74:d4:
03:be:c3:86:59:35:a4:d7:d7:2e:29:f5:35:63:84:
e0:59:c6:db:61:a0:5b:d7:57:6f:09:65:85:2d:14:
05:fd:2d:72:c4:07:b9:16:da:b1:85:6d:ae:a9:6d:
1f:75:e7:4f:5e:94:5d:06:e5:42:5a:48:64:f5:d7:
5f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:31:89:C1:F5:E9:DA:FD:70:50:3E:27:68:DA:DB:A0:E0:EE:4D:51
X509v3 Authority Key Identifier:
keyid:FE:39:B0:00:57:FE:CC:E0:AC:6B:48:38:13:99:AE:27:C1:77:53:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/FE39B00057FECCE0AC6B48381399AE27C177533F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/FE39B00057FECCE0AC6B48381399AE27C177533F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HCGMrDJ5bFAYTL6nMkTtDc1JvfgwytZcwrMRn1krRzjG/0/323830343a393138383a633030303a3a2f33342d3334203d3e20323734363437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:9188:c000::/34
Signature Algorithm: sha256WithRSAEncryption
03:55:1f:22:ff:4e:fa:df:7c:c0:ea:ab:08:f4:7a:4a:b1:f2:
80:b2:e0:4a:8e:80:1c:b2:48:f7:b5:fe:7f:5e:4f:8e:cb:47:
17:54:65:d3:d6:f9:d7:a8:61:a1:3f:c0:41:db:76:32:f5:b9:
c9:5b:e9:28:28:7f:b7:db:e3:34:25:6c:8d:a8:39:7b:d5:2f:
2c:c9:28:a0:f3:ab:98:35:00:b6:eb:ba:62:dd:4b:4a:66:b0:
2f:9b:b2:36:31:13:9e:ce:de:e1:05:7f:1f:27:f4:f2:25:ad:
10:ac:0e:97:6f:32:74:95:04:d8:cc:c9:8a:a6:1d:1c:e2:78:
b3:73:d2:60:dd:ea:5c:4d:3c:ec:cf:ce:de:4d:37:a8:85:e3:
2a:e7:ea:2f:6b:55:f4:f6:e3:15:47:e1:7c:5c:51:02:a8:5a:
98:ac:fb:bd:eb:ae:35:73:59:97:cc:b8:98:19:c5:fa:d3:f6:
7d:a6:db:87:41:09:d8:72:36:2b:e0:6d:71:68:79:ed:de:89:
f0:94:a0:56:4e:6b:3d:aa:59:37:1c:76:0b:b6:ef:73:d1:30:
02:32:8a:de:28:d5:8d:72:df:9d:9a:45:0d:ea:c8:fa:56:e8:
36:d7:11:c5:f3:05:10:cc:35:fa:1b:23:c2:54:cd:5b:eb:4b:
e1:b8:ca:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 17:58:35 2025 by rpki-client