Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
File: 323830343a3262383a3a2f33322d3438203d3e203238313330.roa (raw, json)
Hash identifier: 0J7Ac0n1Bq8fufSDdrSHC8XPwJUKaBqN+pfWYh8Epmo=
Subject key identifier: DC:D2:1E:9D:66:95:E5:79:03:46:E3:74:76:53:2C:3D:F9:16:42:D8
Certificate issuer: /CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Certificate serial: 65A4DF53B9449B913968920525FFAEC4905C9DDF
Authority key identifier: 4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject info access: rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
Signing time: Thu 06 Mar 2025 07:53:57 +0000
ROA not before: Thu 06 Mar 2025 07:48:57 +0000
ROA not after: Thu 05 Mar 2026 07:53:57 +0000
asID: 28130
IP address blocks: 2804:2b8::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a4:df:53:b9:44:9b:91:39:68:92:05:25:ff:ae:c4:90:5c:9d:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0
Validity
Not Before: Mar 6 07:48:57 2025 GMT
Not After : Mar 5 07:53:57 2026 GMT
Subject: CN=DCD21E9D6695E5790346E37476532C3DF91642D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:fc:66:ec:86:dc:54:c3:81:91:a6:29:ae:
a7:ec:9a:8d:2c:d5:a9:9e:87:9c:f2:b4:c0:a4:16:
7e:f7:aa:e5:21:d5:7c:24:9d:13:5e:f7:2b:02:85:
a8:df:2b:1e:7a:60:5a:6f:1e:14:bf:0f:49:6a:30:
71:48:67:df:b6:75:d7:9c:09:eb:aa:e8:7b:10:e2:
7b:e6:90:6e:bc:86:f0:e1:f9:5c:27:b3:1c:81:0d:
68:79:a4:31:0b:98:04:79:a3:d1:c5:91:91:21:bd:
bf:26:76:0b:93:4e:5c:f3:dd:42:6e:6d:9d:84:be:
b3:34:b9:84:1c:50:5a:77:c1:9c:14:6e:1b:b9:65:
57:13:b3:5e:f9:28:ae:ab:93:f2:d1:70:4c:2b:f9:
e8:35:8e:5d:f5:ed:8d:ef:02:46:5a:7f:8e:7e:52:
6c:dd:d5:07:36:9b:54:5f:ca:b9:f1:24:ba:9d:2f:
5a:5f:32:d3:c3:cf:5e:bb:87:9a:5e:31:99:46:ea:
e4:2b:1f:a1:94:3c:cd:fd:91:dd:f7:d0:0e:69:dc:
f7:0e:68:50:b8:0d:c2:25:b3:04:20:41:65:a6:f3:
e4:2f:af:59:b0:30:a3:d9:fa:fe:3b:48:18:c2:c4:
91:43:b5:7d:56:63:f1:ef:3d:02:1b:50:53:7e:d2:
be:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:D2:1E:9D:66:95:E5:79:03:46:E3:74:76:53:2C:3D:F9:16:42:D8
X509v3 Authority Key Identifier:
keyid:4B:13:DB:64:BC:C2:5C:9F:A9:9F:A2:B9:DF:AC:49:61:D3:DC:09:E0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B13DB64BCC25C9FA99FA2B9DFAC4961D3DC09E0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/hXp314AVon5VUB853oMVD69aZkrKsuGfJDzoyGxgAs2/1/323830343a3262383a3a2f33322d3438203d3e203238313330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:2b8::/32
Signature Algorithm: sha256WithRSAEncryption
36:2f:33:e8:93:43:c3:15:7a:f8:9a:76:71:c8:31:d7:57:00:
f3:ea:b7:f0:e0:9f:3e:51:10:90:e5:bd:64:9d:ba:18:a7:7f:
7d:8d:bc:77:b3:b5:bf:95:cb:97:b7:bd:47:7c:60:81:20:34:
f4:0d:23:e9:62:ba:08:67:b9:4c:a3:93:92:ff:2a:3a:f2:f9:
ca:dc:23:6a:61:93:dc:24:48:92:c0:79:d0:1f:e8:31:0e:1e:
a7:31:3f:bf:ec:65:46:2f:be:b2:f9:09:bc:e9:87:8d:a9:16:
6c:7d:5d:4e:8e:89:12:1f:c9:b7:44:c8:dc:fe:82:6e:ff:c3:
7b:9f:c6:c6:af:eb:25:f6:d4:c9:75:35:0a:4f:69:90:b3:2d:
9f:2d:42:0d:eb:78:39:ca:fa:18:56:d2:9f:e2:28:f8:e9:81:
7c:03:87:fb:b0:b7:f2:75:77:35:8a:2c:85:0a:fa:17:a4:bc:
a3:10:03:9f:a4:89:37:ab:c2:7b:1d:70:31:95:dd:cb:3c:ba:
30:83:be:d7:75:f7:05:1b:57:aa:7c:d9:c3:2d:6d:2c:a7:e6:
c3:4e:59:d6:55:05:f3:31:c9:63:44:ea:f2:3c:80:7f:69:87:
36:fd:26:e3:71:98:dc:97:e9:0e:f1:d9:9c:bd:03:26:1a:fa:
72:98:8f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 21:29:34 2025 by rpki-client