Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a383030303a3a2f33332d3333203d3e20323638393430.roa
File: 323830343a356366303a383030303a3a2f33332d3333203d3e20323638393430.roa (raw, json)
Hash identifier: 9kVh6+kdPsm8c9eBgrO1NvbJ5G8t3+AZEQjaAPzGFlc=
Subject key identifier: 75:FE:CF:E0:05:A7:1B:9F:72:AB:13:B8:C9:CE:35:4A:DD:AC:E6:21
Certificate issuer: /CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Certificate serial: 630D4B0138F09838320935C985C63F3F7ED983F2
Authority key identifier: D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a383030303a3a2f33332d3333203d3e20323638393430.roa
Signing time: Wed 19 Feb 2025 12:59:48 +0000
ROA not before: Wed 19 Feb 2025 12:54:48 +0000
ROA not after: Wed 18 Feb 2026 12:59:48 +0000
asID: 268940
IP address blocks: 2804:5cf0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:0d:4b:01:38:f0:98:38:32:09:35:c9:85:c6:3f:3f:7e:d9:83:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D8021573B8FDDCB1523C006FA800A7BAC5BA4240
Validity
Not Before: Feb 19 12:54:48 2025 GMT
Not After : Feb 18 12:59:48 2026 GMT
Subject: CN=75FECFE005A71B9F72AB13B8C9CE354ADDACE621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fb:e0:26:87:83:cc:8e:ad:59:42:a5:a8:e4:
b6:49:b0:a6:b7:19:17:1d:a3:05:27:8a:eb:7a:09:
57:20:56:e3:29:e4:6d:57:51:52:85:85:88:f5:5a:
39:8b:e0:6b:d6:e0:fc:bb:f1:63:f2:5f:fe:7a:f1:
b4:4c:fe:69:7e:ff:03:2c:71:8b:11:ce:11:cd:2e:
04:a1:b9:a2:fc:9a:1c:12:97:6c:f6:81:87:38:c1:
b1:f7:0a:fa:2c:78:5d:11:a7:ea:75:88:28:20:df:
75:ef:8d:27:e5:60:0a:6b:11:41:49:75:a8:85:79:
6c:a4:b7:6d:26:e1:d2:38:43:e9:c9:b1:29:cc:e7:
18:02:51:2b:55:8f:a5:a1:9e:3d:01:92:82:04:54:
f0:15:5d:84:3f:ae:d3:7a:89:09:32:f8:51:d2:7c:
21:7b:f1:c2:31:48:b1:6e:47:8c:80:a0:e8:87:a6:
59:7b:ed:1c:10:7a:73:5b:7c:a4:d0:61:c3:76:54:
9f:cf:73:3e:a2:70:29:d5:4d:fe:6e:71:37:9e:87:
ee:c0:38:ec:eb:45:b1:3c:61:47:77:f4:68:73:5d:
f1:cb:81:3f:6e:94:d0:61:6e:58:15:23:94:48:ea:
c9:f5:13:cf:1f:81:cd:b1:eb:3e:0c:d7:2f:8b:15:
97:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:FE:CF:E0:05:A7:1B:9F:72:AB:13:B8:C9:CE:35:4A:DD:AC:E6:21
X509v3 Authority Key Identifier:
keyid:D8:02:15:73:B8:FD:DC:B1:52:3C:00:6F:A8:00:A7:BA:C5:BA:42:40
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D8021573B8FDDCB1523C006FA800A7BAC5BA4240.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HPJ96wbRLgvrExuR1LaS5e3NTArGGMEqt1EPPPEwkWMB/0/323830343a356366303a383030303a3a2f33332d3333203d3e20323638393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5cf0:8000::/33
Signature Algorithm: sha256WithRSAEncryption
9b:0b:7f:56:fa:6d:10:a5:ff:9e:4a:6b:96:27:2c:ce:b2:38:
a4:bc:e2:26:53:73:21:aa:a7:f5:cc:91:af:58:81:f0:46:f1:
74:3e:1e:5e:b2:93:f1:95:d0:55:b5:d9:15:42:d2:e3:4d:b3:
54:7c:f7:85:b6:da:34:3c:5e:34:e1:4c:05:ed:06:1e:7f:a8:
83:40:ab:6c:ab:99:a8:74:3e:b0:a9:75:9c:d1:e5:13:4d:dd:
42:9b:c7:58:59:e3:78:3c:50:0b:0e:7d:f4:3a:16:a5:3c:75:
e2:3e:43:dd:83:dc:4a:55:13:9d:62:c5:90:f9:e3:de:b2:26:
18:a3:de:ca:56:a9:d7:4a:c3:07:90:79:92:ab:46:37:ae:52:
5c:2d:a6:a6:65:07:7c:d5:10:5a:4b:a8:6f:0d:a5:ed:0d:4c:
fa:81:d9:35:0f:3b:95:be:a7:3d:8b:ed:c6:ba:b5:d1:73:a9:
88:88:74:22:ab:c8:86:04:c9:97:e0:9c:ff:e1:6c:2f:9e:92:
be:fe:11:ed:b2:97:6d:c6:63:34:45:36:53:26:71:b9:be:86:
8a:82:c8:4b:3a:85:ee:35:80:3f:bf:93:2f:db:8c:e1:cc:0b:
45:56:41:00:f0:5e:9a:32:24:dc:47:d7:46:c5:7c:29:e0:26:
f9:b4:af:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:13:54 2025 by rpki-client