Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa
File: 323830343a353239383a3a2f33322d3438203d3e20323638353238.roa (raw, json)
Hash identifier: npZtOWAX2jdEasirZhHJUpjOYx48/HGh96fzMy2npB8=
Subject key identifier: 09:47:E0:80:B3:2F:24:EE:F1:FD:0D:75:C4:FB:4F:D4:07:4A:06:B4
Certificate issuer: /CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Certificate serial: 27F6C1B62E7A495F15F1A41CB48B6DBAF3C3D3F8
Authority key identifier: 8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject info access: rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa
Signing time: Wed 23 Apr 2025 14:50:10 +0000
ROA not before: Wed 23 Apr 2025 14:45:10 +0000
ROA not after: Wed 22 Apr 2026 14:50:10 +0000
asID: 268528
IP address blocks: 2804:5298::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f6:c1:b6:2e:7a:49:5f:15:f1:a4:1c:b4:8b:6d:ba:f3:c3:d3:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8C9489B5F162370B3CD6AE611F82567891AA2F79
Validity
Not Before: Apr 23 14:45:10 2025 GMT
Not After : Apr 22 14:50:10 2026 GMT
Subject: CN=0947E080B32F24EEF1FD0D75C4FB4FD4074A06B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a9:f6:70:a7:55:32:45:d1:34:dc:78:a0:f3:
e8:1e:52:18:af:30:51:32:a3:37:16:91:c3:c2:53:
cb:f0:8c:d9:02:22:cb:74:80:ee:d6:cb:c3:09:36:
ba:7e:f8:d8:87:38:22:df:30:6b:82:9c:ab:18:b7:
dd:59:89:75:03:4c:4f:89:7f:36:d8:09:0f:43:47:
c5:96:ae:98:ce:eb:84:e7:28:fd:a8:34:55:80:9e:
88:0e:35:a2:71:a0:dd:e5:6f:58:8f:80:2e:35:df:
d1:f3:8f:6f:12:2d:ae:c2:bb:13:4d:38:62:47:2d:
2d:31:50:e8:c6:4b:fe:23:8e:3f:56:0b:48:4d:54:
2a:16:2c:ae:ca:d8:4d:00:1c:24:02:f8:22:14:ae:
91:a8:77:dc:6d:23:34:d7:5f:b7:5a:6d:e0:ca:21:
fd:58:eb:60:ad:94:d0:37:77:f6:58:67:1c:3b:9c:
96:d7:e3:a2:c6:29:a3:d3:8f:fc:3e:ba:e4:b4:d3:
68:cd:bd:81:28:92:99:39:98:3e:d8:b4:13:9e:07:
ad:d8:ed:06:59:4f:01:7a:38:f8:f8:70:bc:23:14:
09:5a:e9:3e:58:2a:5c:75:57:fb:42:ab:c1:05:8e:
45:76:92:84:0e:e9:63:8a:c6:7b:16:e6:26:94:73:
8f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:47:E0:80:B3:2F:24:EE:F1:FD:0D:75:C4:FB:4F:D4:07:4A:06:B4
X509v3 Authority Key Identifier:
keyid:8C:94:89:B5:F1:62:37:0B:3C:D6:AE:61:1F:82:56:78:91:AA:2F:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/8C9489B5F162370B3CD6AE611F82567891AA2F79.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8C9489B5F162370B3CD6AE611F82567891AA2F79.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/BwezPqCtpFZE7VmqRSyPQFPsLw5cSJ2nvPiF29RCL49v/0/323830343a353239383a3a2f33322d3438203d3e20323638353238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2804:5298::/32
Signature Algorithm: sha256WithRSAEncryption
3d:92:f6:69:8a:6c:4b:4a:e1:62:3d:a5:e8:a8:a3:c7:c5:20:
1a:2d:08:fe:8b:3f:d2:91:de:80:88:59:54:bb:61:a2:35:71:
a7:57:6f:69:a3:7a:0b:50:0c:9d:70:ce:6a:fe:f3:53:a0:ff:
46:b8:74:62:34:ab:5e:85:ef:ec:68:83:d9:ff:65:66:e9:62:
95:79:22:d9:2e:89:c6:00:ae:a2:fb:5d:58:c3:c3:5f:0c:90:
9f:91:ee:2b:fa:8a:02:88:a1:5b:30:0e:96:5b:5d:fd:fa:8a:
91:fe:21:64:25:79:f3:5a:1b:c3:7a:1b:57:04:5a:9e:ca:28:
19:82:78:88:01:47:83:d3:79:9f:d6:16:69:a0:11:5f:cc:92:
fa:34:77:4d:5a:37:3e:6e:99:72:cb:cb:09:85:38:6b:03:20:
0f:ea:2e:50:28:5e:1e:8a:98:ca:f6:2c:e8:64:47:43:43:82:
0a:30:13:fd:36:54:ce:18:80:a2:23:47:a3:e0:eb:44:51:f1:
ca:70:f5:a7:ef:d3:3e:ad:aa:0d:06:cc:e3:e7:c6:c0:d0:d7:
38:b6:10:96:01:bd:6a:6b:cc:77:f4:34:1b:b2:86:d7:6a:e7:
09:4a:e7:0d:eb:4e:42:de:26:3f:df:52:b0:8a:77:c9:6e:92:
be:81:ed:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 13 09:04:53 2025 by rpki-client