Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
File: 323830343a376130383a3a2f33322d3438203d3e20323731333433.roa (raw, json)
Hash identifier: Okek1xevNK45+es+TgaKdwxrGwW1nGDvvscpk7/pfuE=
Subject key identifier: CB:E0:32:07:1E:5D:C4:62:93:A4:67:FC:80:65:AA:CE:EE:6E:B0:78
Certificate issuer: /CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Certificate serial: 59AFEB8312935EC15D9043F96C300AF72E9BCD63
Authority key identifier: 60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject info access: rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
Signing time: Thu 06 Mar 2025 17:28:30 +0000
ROA not before: Thu 06 Mar 2025 17:23:30 +0000
ROA not after: Thu 05 Mar 2026 17:28:30 +0000
asID: 271343
IP address blocks: 2804:7a08::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:af:eb:83:12:93:5e:c1:5d:90:43:f9:6c:30:0a:f7:2e:9b:cd:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60351DF380C4B3B45FA6563D20C3C596A13B0C50
Validity
Not Before: Mar 6 17:23:30 2025 GMT
Not After : Mar 5 17:28:30 2026 GMT
Subject: CN=CBE032071E5DC46293A467FC8065AACEEE6EB078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7e:16:e2:0b:5c:31:93:42:dd:06:42:28:37:
ed:8f:2c:37:df:0a:ce:37:2a:53:6c:71:22:87:ac:
ca:2a:06:72:89:7a:56:3b:da:fe:e9:13:a9:ad:bb:
60:10:aa:57:72:50:62:80:22:ae:7b:79:58:e7:ae:
a2:2a:1a:1c:9d:15:7a:38:c3:69:fe:d1:60:20:a7:
80:bb:92:4f:27:d2:55:f9:64:d6:22:01:49:f8:7b:
31:ae:b0:df:b2:0b:91:2d:85:c1:7f:41:bd:26:12:
14:c4:8b:eb:3f:ae:6f:ee:b0:6d:32:d6:90:9d:d6:
de:8b:a8:c4:54:ef:f5:45:30:d2:ae:c5:9b:06:b1:
26:8d:cc:a2:43:35:c8:49:57:ed:81:48:b0:a3:9c:
5d:4a:32:d9:8c:03:79:03:17:15:28:61:24:28:8f:
9c:0d:0d:a7:1e:69:56:fb:d4:7a:c2:13:ec:10:48:
01:22:12:b9:cf:23:76:b3:41:a0:2f:a1:e3:8d:bc:
6b:dc:e6:e6:6e:b8:20:4e:71:2e:5d:47:0a:3f:46:
00:b7:8a:25:fb:1c:c2:ec:1d:52:47:7c:c4:6f:69:
db:5f:74:eb:fb:21:d2:a6:14:2b:3a:4b:31:94:27:
56:a9:f6:3e:f1:9b:58:a0:5e:2f:9a:ea:09:17:fc:
84:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:32:07:1E:5D:C4:62:93:A4:67:FC:80:65:AA:CE:EE:6E:B0:78
X509v3 Authority Key Identifier:
keyid:60:35:1D:F3:80:C4:B3:B4:5F:A6:56:3D:20:C3:C5:96:A1:3B:0C:50
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/60351DF380C4B3B45FA6563D20C3C596A13B0C50.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/60351DF380C4B3B45FA6563D20C3C596A13B0C50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/HeK8PnnWVx94iddo3rbFHjAP2BoJrVYNhkBTDXVnA45K/2/323830343a376130383a3a2f33322d3438203d3e20323731333433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:7a08::/32
Signature Algorithm: sha256WithRSAEncryption
77:a8:ae:41:86:17:09:67:cd:3c:b2:cc:5a:46:67:8b:d5:dd:
18:84:cb:cf:17:cc:e3:77:51:ff:d7:87:54:b0:47:00:99:8b:
2f:20:83:67:28:ef:1a:cb:eb:a1:ca:3a:bd:56:f4:e2:b2:0a:
fd:d4:05:89:e2:24:a8:8b:37:a6:42:2c:e8:5c:4c:36:19:fe:
1a:fd:c6:84:56:9f:89:68:4e:6e:55:4f:91:df:7b:6d:20:1d:
d9:6a:d0:af:51:0f:ed:fb:94:98:97:19:97:aa:f2:7c:56:53:
d6:ef:db:77:f7:f9:a9:02:55:4c:67:ee:91:39:6d:63:68:cb:
98:13:56:07:ce:36:d7:0e:3b:01:21:5d:0a:54:82:46:55:3b:
9b:ff:4e:db:3a:8f:51:aa:34:8d:bd:52:5e:c1:c3:f4:32:92:
50:aa:42:17:1b:c1:77:c5:8d:51:53:75:49:d5:9e:7e:5b:ec:
4d:e8:41:0b:ec:c8:a7:ec:5f:55:d0:69:84:60:fe:99:12:fb:
8a:11:43:1b:ed:40:3f:ae:a5:a8:55:09:ef:ab:92:9e:ec:71:
c9:09:3e:3b:56:1b:83:10:b9:c1:b1:52:ac:99:b3:5e:7c:c7:
de:a9:15:95:66:ed:fa:0b:e8:ef:84:db:3e:a3:06:72:b7:56:
71:e7:16:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:54:39 2025 by rpki-client