Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
File: 323830343a3136383a3a2f33322d3438203d3e203238323739.roa (raw, json)
Hash identifier: 9doD4vXpx/hiaKFea6OrtYIr48lxvMB9xifUy3qjF2k=
Subject key identifier: 61:EF:5B:22:1E:A1:70:FD:91:E2:04:66:37:01:02:2B:45:76:D8:9A
Certificate issuer: /CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Certificate serial: 6285D0A8D420688574C5142828F59AA89C8D2326
Authority key identifier: 71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject info access: rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
Signing time: Thu 06 Mar 2025 23:46:08 +0000
ROA not before: Thu 06 Mar 2025 23:41:08 +0000
ROA not after: Thu 05 Mar 2026 23:46:08 +0000
asID: 28279
IP address blocks: 2804:168::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:85:d0:a8:d4:20:68:85:74:c5:14:28:28:f5:9a:a8:9c:8d:23:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=713D42750562117CA0DB7D96A623898EF91F6ADA
Validity
Not Before: Mar 6 23:41:08 2025 GMT
Not After : Mar 5 23:46:08 2026 GMT
Subject: CN=61EF5B221EA170FD91E204663701022B4576D89A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:62:d5:42:22:73:ac:ef:53:cc:11:4d:e1:
a5:74:1f:ff:17:40:f4:38:49:90:a8:d6:2d:e5:3b:
76:ee:18:ad:95:e9:76:30:4c:c8:a2:a4:7c:bc:44:
a5:f9:64:00:e6:38:2a:a4:bf:9f:99:88:fa:79:57:
db:36:58:1d:d2:96:92:9a:00:67:cd:78:ef:e6:64:
df:4a:16:19:8d:5b:ea:5f:c0:76:72:49:f3:32:cd:
0b:b9:d9:ea:79:67:cf:3e:c7:4e:82:49:0d:48:8f:
e9:6b:07:ef:79:8e:4a:c2:7d:a2:87:5a:47:4b:f1:
f2:f5:b8:cd:3a:22:6b:17:76:60:19:d1:c4:52:ef:
c2:fb:5a:a8:c0:d7:29:7c:d2:a3:4e:0a:14:fb:ef:
17:76:ad:57:bb:8d:ec:b8:ae:fa:7f:d3:72:43:de:
2d:52:08:1b:e5:03:6b:05:24:9b:da:4d:44:4d:6a:
67:af:3b:28:31:47:80:ba:a0:2b:e0:ac:ec:d6:61:
d2:fb:93:b9:de:7f:a1:32:be:3c:2c:01:4d:9e:c3:
fe:6e:51:c9:ca:1f:0a:7b:c9:eb:1d:ba:43:51:46:
24:62:aa:78:9f:20:75:d5:25:b9:61:8a:61:07:ea:
2d:21:2a:32:e0:6f:61:4d:38:b2:8e:3f:fb:a5:6b:
a7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:EF:5B:22:1E:A1:70:FD:91:E2:04:66:37:01:02:2B:45:76:D8:9A
X509v3 Authority Key Identifier:
keyid:71:3D:42:75:05:62:11:7C:A0:DB:7D:96:A6:23:89:8E:F9:1F:6A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/713D42750562117CA0DB7D96A623898EF91F6ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/713D42750562117CA0DB7D96A623898EF91F6ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/cQvxkWdjC5vvvZUnZ42AdLYQVq88ersbdUvozmtNtM8/1/323830343a3136383a3a2f33322d3438203d3e203238323739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:168::/32
Signature Algorithm: sha256WithRSAEncryption
82:a0:e5:51:b9:de:7c:42:ae:b2:c5:a8:3b:98:ee:86:8e:c5:
57:8f:33:9f:e7:44:35:3b:1e:62:3e:1a:4a:ef:6a:c1:06:cc:
e0:3c:aa:bd:70:7f:72:81:fa:fd:47:a8:ad:6a:de:36:1b:81:
f7:5c:25:f2:a1:b8:b1:9c:a8:8d:c2:ff:f7:3e:2c:83:1f:4a:
97:bd:83:b6:80:c0:10:34:75:6d:3f:bb:21:09:9d:f0:db:6f:
94:e3:44:49:9c:c2:e5:6b:46:99:c2:7c:e4:0c:ff:a9:e6:fd:
3f:b4:e7:07:fa:37:24:f9:0e:ad:d2:40:22:3a:3e:52:d3:1f:
05:3a:7f:df:df:b6:69:c7:3b:17:06:8c:31:8c:0d:ba:cb:03:
3d:eb:f3:b4:06:6c:df:67:05:d6:d3:1b:85:f0:13:d9:20:63:
83:aa:9e:e3:b1:50:c1:d4:43:b6:38:c1:a9:44:88:ce:1e:69:
9f:ea:a4:7e:30:54:ff:2e:4f:03:e2:df:cd:af:02:bc:50:b3:
81:8b:08:43:c2:f5:b6:19:3d:13:2b:82:9e:6e:ff:be:e7:64:
11:b0:48:61:80:a4:57:2f:18:2d:1a:ab:10:bd:75:7a:de:d4:
38:b6:45:98:5d:8d:b0:d2:e6:ea:a9:42:a1:2e:cd:7d:ce:ab:
97:9e:d8:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:20:24 2025 by rpki-client