Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa
File: 323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa (raw, json)
Hash identifier: Q61C4vXNAbJfstRUZ5m3XRi8trVc0JIpS4lnKRE+SL0=
Subject key identifier: 3F:00:BA:33:0B:03:66:28:67:CE:FE:BE:CB:3F:9A:8B:D1:B4:68:A4
Certificate issuer: /CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
Certificate serial: 6589C4AB1CE966AC7A29AC088DD3853B7B2A44D3
Authority key identifier: 51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa
Signing time: Thu 06 Mar 2025 22:33:29 +0000
ROA not before: Thu 06 Mar 2025 22:28:29 +0000
ROA not after: Thu 05 Mar 2026 22:33:29 +0000
asID: 267511
IP address blocks: 2804:4298:400::/38 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:89:c4:ab:1c:e9:66:ac:7a:29:ac:08:8d:d3:85:3b:7b:2a:44:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB
Validity
Not Before: Mar 6 22:28:29 2025 GMT
Not After : Mar 5 22:33:29 2026 GMT
Subject: CN=3F00BA330B03662867CEFEBECB3F9A8BD1B468A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:40:30:50:05:73:7d:09:9e:05:0b:41:34:18:
2d:d2:21:ae:8b:ae:64:9f:71:8a:f5:a0:57:a5:2a:
83:1a:38:f3:5b:c6:a1:f2:5c:95:61:75:9d:50:f5:
c9:14:96:e5:08:a9:d4:ea:14:8f:51:bc:c3:9a:7a:
b6:48:0c:ea:af:ff:5b:30:bd:05:6c:59:fe:0c:b8:
48:36:d3:60:7a:44:70:81:70:98:b2:4b:44:96:b5:
05:85:63:0c:d6:76:7b:ba:ac:53:f3:a7:5d:3b:dc:
4f:10:a5:09:8b:c2:34:2b:d1:a5:c6:e4:fa:c2:73:
52:0c:87:fc:88:6c:b0:f7:f1:c5:9d:29:dd:a6:90:
ef:32:d4:a6:02:ed:af:8d:07:5e:6f:b3:2f:69:43:
5a:2d:f1:4a:e8:d1:88:9b:50:04:1c:af:0d:5d:2f:
57:5c:4b:82:03:f0:42:87:27:56:04:cb:71:d1:74:
0a:c3:83:79:ce:f0:67:51:42:c4:fd:bf:a0:d8:44:
76:a9:c9:e6:31:6b:c0:0e:ae:ee:55:8e:21:a1:b8:
a1:ca:02:04:54:f4:27:3c:cf:c1:16:68:4e:ba:ce:
f9:9d:4a:1c:8f:dc:e0:c8:0c:44:ea:d9:f7:b9:aa:
8c:fb:9b:b5:3a:94:7f:56:c5:2c:2d:6c:55:73:26:
a3:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:00:BA:33:0B:03:66:28:67:CE:FE:BE:CB:3F:9A:8B:D1:B4:68:A4
X509v3 Authority Key Identifier:
keyid:51:D6:DB:A5:73:9A:66:5B:6F:DC:BD:4D:32:66:D3:E7:4D:8D:D8:AB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/51D6DBA5739A665B6FDCBD4D3266D3E74D8DD8AB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/kdPL1AuvFJxJ8XoTzXuzHYpnfGWc8gLm5GLfxaLE6DG/1/323830343a343239383a3430303a3a2f33382d3438203d3e20323637353131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:4298:400::/38
Signature Algorithm: sha256WithRSAEncryption
58:93:93:21:68:25:22:c1:33:a6:72:58:bc:49:06:3c:02:99:
b0:f0:f0:2d:00:6d:b2:37:19:d0:c6:5d:73:c2:11:91:65:57:
5c:77:26:f9:93:14:f8:90:af:eb:76:8c:2f:15:7f:c5:d6:78:
e4:8e:24:0f:fc:79:74:90:2a:08:8d:9e:0a:ac:6e:32:b8:ed:
37:78:13:a3:78:3f:54:31:27:b0:82:d0:ff:1d:35:5d:21:97:
28:80:36:6a:ed:cd:50:db:c1:a9:e4:25:88:4f:85:7d:b9:a9:
52:74:41:2b:a3:29:2c:c2:27:ba:0b:05:83:23:4a:30:39:a3:
8c:31:ad:02:35:6e:18:75:43:fa:16:ca:27:45:32:b7:9f:79:
9f:ad:f8:07:0e:c9:06:54:fe:63:0e:2f:76:92:99:ca:39:f9:
98:69:9e:b6:4e:d6:11:28:c8:47:97:4a:bb:ca:6b:f6:f8:c0:
c3:90:68:97:a4:87:c7:b2:5f:45:09:c9:54:7e:8e:da:0c:2e:
ae:4f:fe:76:4e:3b:36:88:93:8e:46:b9:44:39:d8:a7:0c:45:
6b:91:d9:b4:7a:8d:70:d3:a6:c9:33:bc:f0:24:7d:1b:b9:6a:
dc:e9:01:b3:e4:1f:9e:3a:a0:f4:4f:92:48:12:31:a9:a3:f3:
76:1c:e5:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:41:58 2025 by rpki-client