Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
File: 323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa (raw, json)
Hash identifier: P4z4l7ej6aD9p94lAuCnwgfM+JHC1QMD7OoSgDRE4Kg=
Subject key identifier: 44:8D:F3:9E:89:76:AF:6F:76:72:FC:9E:97:10:D4:54:22:15:8A:4A
Certificate issuer: /CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
Certificate serial: 25370BC96ACB48D3B2844E2515C63C4A01F2B0EB
Authority key identifier: 49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
Subject info access: rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
Signing time: Mon 05 May 2025 20:48:50 +0000
ROA not before: Mon 05 May 2025 20:43:50 +0000
ROA not after: Mon 04 May 2026 20:48:50 +0000
asID: 263940
IP address blocks: 2804:2818:8000::/34 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:37:0b:c9:6a:cb:48:d3:b2:84:4e:25:15:c6:3c:4a:01:f2:b0:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49035094B34CBA1B308381D57F68D0820CEA3A4F
Validity
Not Before: May 5 20:43:50 2025 GMT
Not After : May 4 20:48:50 2026 GMT
Subject: CN=448DF39E8976AF6F7672FC9E9710D45422158A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:90:8b:68:6b:40:d1:dd:e6:1c:5f:4c:64:be:
28:47:58:66:e2:ba:1b:5f:62:2c:ea:6c:b9:b3:20:
1d:32:9e:6b:a5:1a:07:4b:5b:09:6d:ad:97:b4:bb:
3a:86:24:c6:24:9d:e8:15:14:fc:7c:6a:8a:80:77:
6d:b3:aa:7e:de:15:cd:d2:ae:08:7d:25:2a:e9:25:
89:f3:36:57:d6:1c:29:ae:29:64:b3:d4:74:66:ba:
62:20:f2:46:7a:f2:13:4c:26:5a:71:21:9a:82:e3:
9e:07:ba:85:0d:eb:31:7f:37:91:84:4f:1d:ed:ac:
3d:83:8a:ca:aa:f2:d3:4d:d0:f8:f2:83:e7:36:71:
0d:63:cb:e3:d9:7e:1b:6d:82:bb:8d:07:f5:7f:21:
6a:c8:60:eb:86:01:e1:bf:e8:90:6d:66:41:5b:54:
c0:35:eb:69:d2:d4:44:cf:87:26:f1:05:ad:fa:b0:
d3:f0:a7:ff:ea:21:b5:9c:7a:9e:6a:78:87:44:28:
d2:b2:c6:91:b6:6a:68:2f:6e:fd:f3:fb:37:ca:75:
6c:8a:d0:9c:b0:e9:95:f9:e1:24:b3:ca:0f:b9:de:
07:d2:7c:e9:e0:6c:56:a6:34:4d:6d:cb:9d:52:87:
8b:5f:ad:2f:4b:ae:09:b6:64:dc:64:c2:09:1f:72:
1c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:F3:9E:89:76:AF:6F:76:72:FC:9E:97:10:D4:54:22:15:8A:4A
X509v3 Authority Key Identifier:
keyid:49:03:50:94:B3:4C:BA:1B:30:83:81:D5:7F:68:D0:82:0C:EA:3A:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/49035094B34CBA1B308381D57F68D0820CEA3A4F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/49035094B34CBA1B308381D57F68D0820CEA3A4F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/Yo8QeTbuKZ259i5qSYjeeU8okKAKU6L8ZFu1G5WLT1H/0/323830343a323831383a383030303a3a2f33342d3334203d3e20323633393430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2818:8000::/34
Signature Algorithm: sha256WithRSAEncryption
26:9c:e0:be:1e:7e:c2:56:55:73:57:e6:bf:7c:b6:34:2a:1d:
70:ba:ed:f0:1b:35:71:34:db:19:ab:b8:80:b5:13:32:68:55:
d4:ce:55:32:36:ad:72:af:70:d2:07:df:fa:e4:a2:fe:94:3c:
bb:42:00:f1:06:8f:52:0f:27:60:dc:d9:01:ca:fd:00:de:cc:
02:64:55:8c:2d:65:98:69:74:43:64:c4:1d:ab:f4:41:75:74:
36:4c:d1:6d:19:a4:fa:73:8c:3c:3e:24:b5:8a:64:55:19:ce:
dd:c7:cc:c6:21:3f:9b:e3:df:88:dd:79:14:5d:8b:e4:8f:2f:
a1:93:dd:03:d9:b2:39:c4:34:cc:16:4a:6a:ec:23:8f:84:ec:
6d:f7:15:85:24:72:ca:fb:74:22:1e:1f:78:6a:70:62:13:62:
c1:31:fc:be:30:62:25:4a:34:4e:60:e6:8d:85:81:a8:2d:e8:
e3:cf:d8:57:19:0e:83:bd:0a:39:53:b3:1f:bb:db:db:c8:9a:
a9:de:21:c9:e9:30:5c:69:68:04:d6:d3:cc:15:94:00:74:f7:
a8:38:00:d9:17:13:37:e7:a6:8d:44:06:4c:3b:6d:29:01:c2:
c5:f0:e0:6b:1f:9f:27:67:ca:30:3c:f6:d0:dc:fe:6c:13:2e:
98:3d:e7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:32:49 2025 by rpki-client